Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
File: 3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: t2ZnV06HKuqDSAj0v7lgeFrqurMjk+ojCequMRmoKCg=
Subject key identifier: DC:51:23:B4:20:94:BE:20:56:2C:20:9C:25:76:0F:88:7E:A7:58:16
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 17173E5F2DDB006AFBED1C62C04486C030A5F650
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 14 Oct 2024 01:49:47 +0000
ROA not before: Mon 14 Oct 2024 01:44:47 +0000
ROA not after: Mon 13 Oct 2025 01:49:47 +0000
asID: 271724
IP address blocks: 138.117.124.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:17:3e:5f:2d:db:00:6a:fb:ed:1c:62:c0:44:86:c0:30:a5:f6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:47 2024 GMT
Not After : Oct 13 01:49:47 2025 GMT
Subject: CN=DC5123B42094BE20562C209C25760F887EA75816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:45:84:33:88:75:33:8c:90:89:73:28:5e:ed:
63:10:c7:c5:7c:4c:e1:dd:df:3d:5d:46:e5:94:2a:
f3:93:5a:0e:d1:98:5b:08:f1:bc:9b:0a:86:79:b0:
6a:cb:81:43:e3:97:dc:fc:63:d1:14:89:6a:d9:f9:
f7:07:71:ff:86:6c:0e:42:8d:6d:d5:9c:c3:9f:a0:
62:27:b9:4c:81:71:99:23:b1:6f:36:6f:67:63:7f:
e0:4a:da:be:7a:af:f1:f6:4e:84:98:62:b1:29:ef:
b7:60:f6:29:6f:ad:4a:0e:9d:b5:ff:a4:f8:e5:67:
93:db:3a:b9:c4:49:e3:d9:e8:04:31:53:e8:d8:bb:
72:ff:01:6e:4c:20:58:9d:b7:3d:a8:df:d4:d4:b8:
4a:f8:3a:ef:4e:e0:43:61:20:2c:37:0c:37:c4:60:
f6:92:cc:73:ba:ed:56:77:ef:f9:ad:69:f3:f5:44:
2a:f9:d2:35:b6:60:a5:b2:1d:93:2f:38:99:7d:0b:
0b:f2:81:6a:79:41:3c:b1:60:6c:1c:93:30:91:68:
d7:6b:88:27:08:00:f9:4d:a0:f5:c8:78:89:9b:fc:
2f:a6:5c:19:2f:46:29:c3:76:12:eb:81:9b:a4:3d:
82:37:07:f5:f2:e8:65:a9:4d:2e:cb:95:c0:f2:24:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:51:23:B4:20:94:BE:20:56:2C:20:9C:25:76:0F:88:7E:A7:58:16
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3131372e3132342e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.117.124.0/22
Signature Algorithm: sha256WithRSAEncryption
10:f2:02:79:91:ea:5a:b2:bd:8f:ed:89:cc:4c:75:88:5c:6a:
90:4e:ce:45:46:6b:fe:5b:99:3f:b8:cf:03:0e:05:5e:3d:da:
14:87:99:db:7f:4d:d1:59:f3:7a:e5:4b:eb:db:93:bc:a6:42:
80:f4:41:85:8f:c0:fb:a9:22:5c:e7:d4:3d:0a:1b:8f:c0:aa:
35:b1:09:86:f5:59:3e:4c:b9:53:db:62:fe:f6:6b:44:ba:8f:
1c:2b:7c:00:f8:79:ba:ca:8e:34:0a:f5:c1:09:34:00:d1:b3:
c1:7f:82:88:92:53:64:ad:34:9e:c3:f1:93:9d:b8:75:97:ca:
a1:0c:b2:5a:d5:2a:c8:3f:fe:21:70:8c:65:ad:ed:8b:5e:76:
00:64:87:5c:3a:38:78:c2:eb:34:c1:7b:7e:1c:75:f4:ab:85:
bd:30:c3:06:82:87:48:c4:ac:c2:d8:eb:b9:c6:eb:98:15:dc:
d7:b0:87:15:c8:9b:5e:ad:10:d4:31:3f:3e:71:cd:63:33:e1:
99:47:30:66:41:29:9c:b2:96:c2:c0:7d:78:3d:a4:cd:53:74:
d4:b3:f7:1d:e1:47:67:cf:10:7b:6d:fe:7e:c1:16:40:dd:2d:
b7:ce:1c:1d:4b:89:66:aa:5c:f4:e4:87:28:b0:35:35:2d:a7:
11:c1:aa:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org