Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263645.roa
File: AS263645.roa (raw, json)
Hash identifier: fGWcJPYfoBlQbNr2bfzmxiOPKXUBdsvMkCL1cycn+T4=
Subject key identifier: AC:AB:7C:94:CF:28:01:02:F3:53:78:B4:77:F3:F1:CF:17:C5:DC:4F
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 7691E8C431A939121BE64A8DC6840C03E09E6028
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263645.roa
Signing time: Mon 04 Nov 2024 17:53:31 +0000
ROA not before: Mon 04 Nov 2024 17:48:31 +0000
ROA not after: Mon 03 Nov 2025 17:53:31 +0000
asID: 263645
IP address blocks: 179.127.248.0/21 maxlen: 24
2804:10b4::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:91:e8:c4:31:a9:39:12:1b:e6:4a:8d:c6:84:0c:03:e0:9e:60:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Nov 4 17:48:31 2024 GMT
Not After : Nov 3 17:53:31 2025 GMT
Subject: CN=ACAB7C94CF280102F35378B477F3F1CF17C5DC4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:c4:18:91:23:10:9f:36:36:bb:3f:68:6b:
9c:f3:ac:5e:30:d1:d3:92:3f:47:10:0d:6c:0c:84:
2c:79:a6:0d:e1:d4:39:76:f1:b0:59:d7:96:1b:64:
9e:05:aa:2d:59:ee:ed:6b:6e:2c:2c:b7:fd:73:66:
d1:51:0b:83:9c:a2:6e:b1:20:65:ed:0a:88:3e:c4:
cf:3f:0f:c4:e5:53:f4:5a:c7:13:e5:54:10:b9:7f:
b2:c0:ff:ed:93:80:7c:41:ba:b7:81:94:ed:c9:f5:
28:e3:64:36:64:2e:8a:41:31:9c:d9:30:c4:d5:2c:
9d:0d:7b:d0:87:3c:b1:7e:e7:89:25:0d:cd:2a:47:
c5:44:29:a1:02:a4:ba:45:41:43:82:2c:a6:7e:fd:
a9:01:14:a0:18:5b:32:9f:97:db:8b:d6:ca:3f:ac:
1d:ca:75:d3:99:15:f3:59:d8:45:85:ee:a2:b0:e2:
55:52:85:b9:6d:f8:48:10:e6:f9:5a:83:c0:fe:da:
e6:0e:2c:6b:ba:1d:8d:55:43:05:1d:eb:99:0e:49:
e6:fc:11:55:d3:b7:5f:6b:6a:7a:c8:19:f5:bf:1e:
b5:8a:d0:d8:90:8a:9d:1f:7c:23:3d:27:ea:fb:c7:
0d:7a:21:8a:f2:d9:0c:19:fb:2b:ba:80:f7:34:cd:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AB:7C:94:CF:28:01:02:F3:53:78:B4:77:F3:F1:CF:17:C5:DC:4F
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.127.248.0/21
IPv6:
2804:10b4::/32
Signature Algorithm: sha256WithRSAEncryption
24:e2:85:3d:4c:2a:ed:0f:14:57:b0:57:b1:2a:4d:fd:fc:40:
01:67:5f:39:86:97:ea:fb:cc:a3:19:d6:c1:14:44:80:08:47:
6b:80:aa:b0:17:23:08:bb:b2:d9:06:5f:0b:c5:43:a3:6c:13:
8e:0e:5a:43:75:f7:19:a6:16:00:bd:25:9e:37:d8:ba:63:e4:
57:42:d2:86:b5:ed:ba:7b:61:96:29:e8:19:29:46:ad:9b:d2:
5a:91:f2:15:c0:4c:2e:7b:30:91:92:ba:b8:af:b5:71:3d:5f:
ea:68:0f:1f:b1:67:bd:9e:ee:27:07:c1:87:fe:21:9c:57:21:
cb:fd:5b:03:58:e1:32:fd:71:64:eb:71:e8:52:7a:a9:02:e8:
9f:da:ec:8f:ec:43:80:2d:7f:95:ee:29:8f:22:de:33:99:62:
60:f8:05:1b:77:97:f6:91:e4:a7:0e:d7:2e:a7:34:42:cb:b0:
22:84:fe:f3:86:eb:4f:25:ff:6b:30:c2:03:cb:4b:12:b6:57:
00:90:3e:08:8e:e6:01:a9:e5:06:ad:11:90:89:28:09:a9:71:
77:f5:2b:0f:42:87:37:4a:38:2e:30:ec:a9:18:13:7a:83:3e:
34:9a:af:bf:57:a6:87:32:1e:f3:a2:7e:83:73:ce:79:3a:5e:
cc:be:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org