Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263405.roa
File: AS263405.roa (raw, json)
Hash identifier: LQiPbNJ1h7T6uslSkVn7NUkYNH+DVOlspWctngqO33Y=
Subject key identifier: 2D:46:48:1C:37:8B:2A:BD:A4:60:24:12:DF:44:64:DD:61:96:3A:DD
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 4FD3D1A0F08DC5F43D86BDC46FCF4C7AEC8D479F
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263405.roa
Signing time: Tue 23 Jul 2024 12:10:32 +0000
ROA not before: Tue 23 Jul 2024 12:05:32 +0000
ROA not after: Tue 22 Jul 2025 12:10:32 +0000
asID: 263405
IP address blocks: 128.201.0.0/22 maxlen: 24
143.255.252.0/22 maxlen: 24
170.254.32.0/22 maxlen: 24
177.222.248.0/21 maxlen: 24
2804:15b4::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:d3:d1:a0:f0:8d:c5:f4:3d:86:bd:c4:6f:cf:4c:7a:ec:8d:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:32 2024 GMT
Not After : Jul 22 12:10:32 2025 GMT
Subject: CN=2D46481C378B2ABDA4602412DF4464DD61963ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d9:74:49:af:a1:37:ea:0d:c9:bf:97:08:50:
f4:ca:7e:02:d4:f9:32:0a:ba:f8:7a:d3:bd:90:c1:
b6:81:32:bf:31:98:95:e5:ff:14:57:30:73:8a:78:
6a:74:22:d6:43:94:15:e9:cb:00:c7:3a:2d:6b:35:
7a:36:e7:94:58:bf:4e:3e:f8:47:d6:12:89:8a:5a:
b2:56:0c:5d:cc:7a:0b:fb:2d:9c:84:e6:38:21:65:
63:c4:73:30:41:b7:1d:bb:fe:85:40:ef:1c:53:35:
fe:b6:5e:7a:3c:91:53:6a:e3:fa:b4:10:4b:5c:f1:
8e:8d:7e:e2:03:10:d3:1a:1d:b4:06:8c:e3:9d:5a:
67:0a:98:fe:2b:40:f8:08:cb:49:bd:b4:c8:23:c3:
0c:cd:d0:9b:a5:dd:87:ac:ea:ea:f1:d2:1e:93:40:
d4:68:95:06:a2:ee:60:b7:a7:66:bf:51:9d:01:fc:
a7:ce:cf:2f:26:d5:86:a8:04:79:59:b4:31:b8:ab:
f1:dc:89:b1:08:c6:b1:53:e7:c4:9b:cc:dc:bb:34:
e4:28:96:d9:10:9f:02:e3:bc:c4:dd:88:07:34:07:
6c:49:9b:88:c1:8c:65:6c:fe:2b:9c:ce:a3:6b:46:
f2:63:b3:77:c4:18:ac:14:10:b8:86:14:cc:ad:cd:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:48:1C:37:8B:2A:BD:A4:60:24:12:DF:44:64:DD:61:96:3A:DD
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.0.0/22
143.255.252.0/22
170.254.32.0/22
177.222.248.0/21
IPv6:
2804:15b4::/32
Signature Algorithm: sha256WithRSAEncryption
79:9a:1d:d3:dd:cd:9d:05:6f:0f:08:1d:f1:c6:af:b2:4d:d0:
b6:d6:7e:3d:15:4f:66:74:28:bc:60:29:4f:96:d2:ea:d1:a6:
64:af:89:e0:e0:25:bb:f6:34:dd:c6:1b:cf:9e:e2:60:4b:0f:
99:bd:64:ac:19:04:39:7f:cc:48:79:43:b3:8a:41:95:88:aa:
71:97:f2:33:0a:e1:de:e3:e2:99:52:8b:b4:05:09:e8:eb:22:
2c:60:6e:8a:6e:ec:01:37:ee:7e:51:ab:62:6d:28:9e:8d:07:
36:4d:24:96:63:2d:e1:34:33:4a:e7:ff:21:48:03:c6:cf:e9:
18:c1:4f:97:ab:f8:df:b4:85:23:e0:94:73:7d:66:91:83:b7:
48:63:2a:bd:70:49:94:16:e5:8d:72:06:b2:b6:9a:f4:37:b7:
b4:4a:45:f6:22:03:f2:c2:a6:5d:55:23:db:15:53:87:c5:8e:
9f:c6:dd:54:05:d3:42:e2:7b:09:42:a2:64:e4:55:fd:b7:6b:
62:76:c4:10:7b:a5:e3:54:a3:1e:b9:ec:f6:4a:3e:3f:fc:9d:
50:cc:d0:ef:14:63:8f:5b:27:12:ce:2d:89:c2:3b:4e:77:9c:
ee:f9:4a:ac:82:cc:5f:c0:03:f2:b1:74:f8:27:3d:a6:e3:a1:
1c:30:29:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org