Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263864.roa
File: AS263864.roa (raw, json)
Hash identifier: feM+gNnly97Felqp1vHQetwhiP82jJn3Kzj7D6nmMtQ=
Subject key identifier: 6B:8A:0F:96:09:35:16:C3:24:2C:5D:35:28:B2:9A:41:AE:82:1B:A9
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 2DDD6E2C2B2BE8022810AE2CD78291E340D02D7A
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263864.roa
Signing time: Tue 23 Jul 2024 12:10:34 +0000
ROA not before: Tue 23 Jul 2024 12:05:34 +0000
ROA not after: Tue 22 Jul 2025 12:10:34 +0000
asID: 263864
IP address blocks: 138.186.164.0/22 maxlen: 24
170.79.220.0/22 maxlen: 24
2804:26ec::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:dd:6e:2c:2b:2b:e8:02:28:10:ae:2c:d7:82:91:e3:40:d0:2d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:34 2024 GMT
Not After : Jul 22 12:10:34 2025 GMT
Subject: CN=6B8A0F96093516C3242C5D3528B29A41AE821BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:b7:b0:2f:a7:fa:63:9f:f8:bc:95:2c:78:
71:8d:b5:0d:fc:5c:69:4b:89:7b:4f:53:cc:5f:2e:
ca:03:63:09:9f:0c:a7:22:55:09:1f:5f:eb:10:20:
15:a6:32:0f:d7:5c:cc:fe:65:70:ca:47:46:e1:c7:
60:88:86:40:91:28:3b:f3:8c:0b:35:4a:ee:2c:37:
1d:52:45:40:cc:85:4e:4b:2e:55:39:a1:9f:3f:a3:
59:ed:82:73:db:55:43:ca:ab:1b:22:e7:18:b0:29:
13:6f:c2:5e:78:3b:96:76:10:72:9a:81:b0:50:b5:
f9:41:4a:48:fc:68:45:27:31:5d:8f:67:77:15:9c:
f3:14:d3:a7:66:fe:0d:6b:f4:13:d3:70:17:e5:9c:
a3:f6:ca:cd:e2:19:89:1e:39:a4:6b:ae:7c:0a:47:
52:7a:0b:ba:97:0a:7d:b2:d0:fe:4f:dd:f1:08:ac:
c0:37:58:45:5a:36:a2:f2:0a:be:58:70:a8:eb:af:
36:84:7a:8e:00:d2:64:3f:ab:72:79:82:ce:48:f2:
2f:c3:37:09:8a:ea:1c:27:65:81:c6:7b:22:d4:81:
80:ef:2c:eb:90:13:b7:59:92:5d:bd:50:1f:59:01:
12:6a:41:f9:32:a1:2e:fb:06:1f:c5:64:52:49:1f:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:8A:0F:96:09:35:16:C3:24:2C:5D:35:28:B2:9A:41:AE:82:1B:A9
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS263864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.164.0/22
170.79.220.0/22
IPv6:
2804:26ec::/32
Signature Algorithm: sha256WithRSAEncryption
85:48:de:18:7b:b5:28:68:dd:a1:d9:d4:71:bf:2d:05:7f:8b:
f3:19:94:6c:4a:da:e9:2e:3c:b9:56:96:8b:76:3f:df:ef:a1:
bd:6b:17:f0:1c:62:08:6e:85:cb:0e:b4:3c:d9:3d:47:71:38:
75:04:10:15:95:78:5b:d1:bc:62:34:a0:d2:65:9b:96:e6:4a:
e4:58:b9:f3:49:22:2d:79:1f:bb:10:b3:52:9c:8b:8b:0b:5f:
a1:60:1a:4c:8e:f4:2d:51:70:42:bf:23:f6:55:9e:10:71:31:
92:44:af:b7:ba:cc:bc:46:da:97:b5:23:3d:24:89:a7:d9:ed:
b5:3c:d1:17:25:fc:64:60:7b:8f:7c:bb:43:78:0b:b6:75:b9:
af:0a:02:5e:56:ee:28:8a:c6:d2:03:c6:6c:a5:5b:c6:fc:11:
09:77:7d:0d:d4:94:38:69:42:5e:99:1f:cb:24:ca:e6:34:51:
b0:af:f6:23:d7:ed:b9:74:75:47:bb:c4:88:50:0a:35:1f:36:
5c:76:48:d5:82:0a:c1:68:31:72:86:68:db:b8:55:70:3e:73:
ef:53:70:6e:10:25:c7:7f:3e:d4:08:82:60:a8:0c:f7:c6:e9:
0a:a3:c4:46:7f:0d:c9:6c:90:b8:e0:da:be:5c:ac:b7:11:86:
9c:4e:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org