Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32342d3234203d3e20323632323936.roa
File: 3137302e38312e322e302f32342d3234203d3e20323632323936.roa (raw, json)
Hash identifier: BS9b/FUM8vm4V2Y5It7LUeBNSW+V2PBwmK0wmkKPuTQ=
Subject key identifier: D8:C9:88:5C:14:C8:76:87:C2:CE:97:28:4B:D9:F0:AD:52:53:E2:3B
Certificate issuer: /CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Certificate serial: 20CA699E105EDD53028B91694373B80E66FB887D
Authority key identifier: 2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32342d3234203d3e20323632323936.roa
Signing time: Thu 10 Oct 2024 19:32:09 +0000
ROA not before: Thu 10 Oct 2024 19:27:09 +0000
ROA not after: Thu 09 Oct 2025 19:32:09 +0000
asID: 262296
IP address blocks: 170.81.2.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:ca:69:9e:10:5e:dd:53:02:8b:91:69:43:73:b8:0e:66:fb:88:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E
Validity
Not Before: Oct 10 19:27:09 2024 GMT
Not After : Oct 9 19:32:09 2025 GMT
Subject: CN=D8C9885C14C87687C2CE97284BD9F0AD5253E23B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cd:9e:6b:c8:83:0d:95:b9:65:4d:f5:58:d0:
c3:2c:88:3e:d8:07:ba:c3:7b:31:97:07:f5:84:24:
f2:7b:85:a3:7a:9a:53:9f:b8:1f:e7:be:5f:f7:58:
7a:5e:fd:1b:c7:23:bd:64:9b:98:d9:9e:ea:65:5c:
e8:1d:c4:ef:c7:f1:cc:5c:d5:5b:2f:69:2e:b5:e6:
08:0c:66:98:2c:58:d4:fb:2c:a0:49:9f:22:bd:8d:
7e:dd:f0:7f:12:0a:af:95:fd:a1:8d:d5:eb:7c:61:
d9:ef:9a:5e:ad:15:96:af:4d:46:77:49:a2:95:e3:
08:47:55:95:07:d3:f8:c4:bd:a7:7b:df:54:bd:1a:
aa:2b:d3:60:e6:f9:0e:78:08:b3:66:4c:02:da:b0:
ec:4f:82:04:ae:35:60:e0:a8:cf:62:d3:03:dd:cd:
d7:2e:6b:3c:a8:4b:68:ad:aa:98:2d:4f:8b:7f:66:
4b:8e:6f:93:52:9e:e7:47:8e:f3:b2:b9:9b:d4:08:
61:ac:d9:aa:a6:aa:66:8f:82:8e:1c:2e:09:95:4a:
8c:fa:40:7b:30:7f:b7:f3:56:c6:1a:3c:1d:08:0e:
55:60:2d:1a:df:e5:2b:2b:c5:d1:06:8f:2e:eb:b8:
d6:6c:ae:93:cd:74:1a:d1:4f:c2:a3:5a:83:16:41:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:C9:88:5C:14:C8:76:87:C2:CE:97:28:4B:D9:F0:AD:52:53:E2:3B
X509v3 Authority Key Identifier:
keyid:2F:56:21:64:A7:0B:45:F6:F4:B3:D7:C0:E1:5E:A2:D3:92:F3:CE:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F562164A70B45F6F4B3D7C0E15EA2D392F3CE6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NM6nyyZDRWRR71J2cxx6xRsVXy2Kj1kAGY6oCggLiy7/0/3137302e38312e322e302f32342d3234203d3e20323632323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.2.0/24
Signature Algorithm: sha256WithRSAEncryption
61:1f:90:f0:1e:ea:5a:10:6a:3d:7d:95:7a:0f:08:f2:d6:60:
e8:ca:d8:4e:02:e1:c6:ce:0f:30:66:01:b2:14:b3:35:0a:f7:
5e:41:51:04:fb:15:a9:83:e9:89:80:8e:e1:3a:68:f8:0d:75:
c5:34:b2:c1:43:da:27:fb:f6:df:1d:63:f7:50:eb:51:f0:e7:
6e:b9:dd:87:22:2c:5e:20:af:78:b0:f3:69:b2:ba:71:fd:32:
fa:42:85:59:d7:15:d2:fc:3e:c0:fb:3d:af:2b:1a:76:c6:91:
84:59:e8:62:70:0b:37:ad:e8:07:a7:15:3f:1f:56:b0:b0:e1:
92:db:c6:09:da:56:28:2b:5c:ee:08:18:09:95:f3:0f:b1:6a:
26:5b:bb:c4:3d:0f:40:e9:5b:b1:01:6f:d8:ec:b8:fa:df:44:
66:91:df:2f:0b:17:d6:9d:a2:3f:c5:f0:35:9b:db:e1:ae:40:
f7:f3:e2:83:da:c2:6a:99:76:91:1a:34:57:7e:a4:55:3e:77:
6f:fa:9d:63:5d:02:84:ca:6b:f9:e0:50:86:ad:db:e4:e9:0d:
27:21:78:42:97:ba:44:d9:39:e8:e0:88:4b:cb:a5:c4:85:97:
1e:56:b3:19:fd:0e:99:74:b9:cc:0a:87:9b:55:d2:e4:9e:2d:
bf:72:58:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 20 06:58:05 2024 by rpki-client on console-fra.rpki-client.org