Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
File: 3133312e3139362e37362e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: eXPqUzzcUabg2REP30mIP62D1K1x3q7qXh6EryF3KOA=
Subject key identifier: BA:F8:66:4A:66:0B:6D:20:76:34:3E:28:73:24:A7:68:AF:A0:63:DF
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 63F8D78EF9FD9578DBEF892E90B7EF81C26BB75F
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:49 +0000
ROA not before: Mon 14 Oct 2024 01:44:49 +0000
ROA not after: Mon 13 Oct 2025 01:49:49 +0000
asID: 28270
IP address blocks: 131.196.76.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:f8:d7:8e:f9:fd:95:78:db:ef:89:2e:90:b7:ef:81:c2:6b:b7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:49 2024 GMT
Not After : Oct 13 01:49:49 2025 GMT
Subject: CN=BAF8664A660B6D2076343E287324A768AFA063DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:d5:cb:72:64:20:fe:23:d5:2c:d7:f3:b6:
0e:d1:a4:f7:e3:1a:a8:ce:b1:3a:f3:35:44:d2:ca:
24:80:18:23:aa:83:f2:62:7b:38:27:3c:24:6a:0d:
69:54:d7:bb:c5:fe:f0:f5:8d:68:e9:a5:44:bb:97:
bb:48:98:41:c1:43:87:2f:e0:04:cf:23:55:37:4e:
53:ae:6e:c1:ea:31:d8:37:16:cc:20:52:fb:3d:47:
5f:bf:08:9b:48:8b:78:26:52:f8:76:15:3c:99:dd:
d7:8e:38:90:b3:a5:ec:e1:f5:ea:09:0e:80:5f:4c:
4b:89:83:6a:74:df:cf:0d:de:42:56:47:78:fc:67:
3d:ff:da:36:e4:c0:7c:90:92:7d:ce:c3:a4:3c:b3:
0d:02:08:17:9a:3f:b8:54:ba:7a:61:8c:63:0e:10:
9c:a9:66:81:ed:ff:09:b9:5a:24:f8:e1:82:88:c3:
ff:b8:61:2b:43:58:29:65:9f:7b:7f:4b:83:63:d8:
26:e7:68:4f:c2:c1:3a:4e:d5:c5:31:87:6d:c3:e7:
ab:1e:f6:53:93:c1:16:d2:23:2b:4e:e2:bf:02:80:
c6:40:e3:98:5b:3b:24:57:8e:1d:f5:5b:5c:a2:85:
d6:d7:90:c2:eb:f7:2c:07:2d:98:18:8a:ac:e9:a9:
bf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F8:66:4A:66:0B:6D:20:76:34:3E:28:73:24:A7:68:AF:A0:63:DF
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133312e3139362e37362e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.76.0/22
Signature Algorithm: sha256WithRSAEncryption
54:34:bc:a9:26:b6:97:7c:86:84:b8:23:eb:0a:db:b2:a5:a0:
88:dd:e1:40:f0:60:7f:1c:3d:75:9a:37:4e:07:3b:12:c8:cb:
d5:4d:75:dc:9a:d5:d5:f5:2c:7c:ee:7a:e4:25:a0:57:55:ab:
42:90:f3:72:aa:7b:9a:ef:ef:5d:5a:4c:81:cb:90:ae:b6:b2:
5e:3e:8c:db:43:4c:19:3c:ac:9a:a1:7c:40:26:b8:ee:a9:2b:
24:da:82:a2:db:1e:5c:7e:c4:1e:5d:a8:b1:e6:1c:1c:49:9e:
a7:17:cf:d0:9f:1e:68:a3:0c:80:7f:f9:51:6a:38:66:c9:23:
99:95:3c:0d:80:28:e2:c3:f5:cb:2d:a1:45:32:73:24:d0:6b:
ec:aa:ee:07:48:25:78:c6:b8:fd:3a:f0:4a:a0:96:fd:59:fc:
ee:32:f0:30:37:5f:dc:68:be:1c:91:57:2d:74:06:c8:c1:ce:
fb:89:31:b2:dd:62:6f:56:d6:28:74:cd:1a:fd:2a:cd:6a:9c:
75:de:93:f3:70:e3:a4:64:fc:1a:32:25:ff:f4:17:c0:81:90:
ca:97:d3:ed:06:0b:a0:d4:08:e0:19:b5:66:c0:8b:8d:8b:da:
f0:d3:01:44:83:0d:c0:2d:01:da:f8:aa:66:9f:fe:33:c7:53:
a2:31:51:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org