Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
File: 3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: wDO0V7xpC2+s4WC0aF8dLC9eMs9WAFA2i4B8+regkds=
Subject key identifier: 91:CD:6C:EE:C3:16:B7:89:CA:0E:A3:38:8F:0A:15:AA:6B:9B:F2:1C
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 3F3ECEE30D9A773D41856935B6BC00A1FA2471D1
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:51 +0000
ROA not before: Mon 14 Oct 2024 01:44:51 +0000
ROA not after: Mon 13 Oct 2025 01:49:51 +0000
asID: 28270
IP address blocks: 138.121.220.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:3e:ce:e3:0d:9a:77:3d:41:85:69:35:b6:bc:00:a1:fa:24:71:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:51 2024 GMT
Not After : Oct 13 01:49:51 2025 GMT
Subject: CN=91CD6CEEC316B789CA0EA3388F0A15AA6B9BF21C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:86:c2:00:f9:b0:d7:fe:06:17:de:69:72:
d0:a8:be:3b:6a:02:d7:20:e2:41:40:b1:ae:12:0b:
82:c9:0f:fb:94:fa:a3:df:e2:3b:2f:49:b2:e2:a4:
f1:1a:64:cd:8d:03:bc:5b:91:fc:7b:a0:4f:0c:5b:
7a:f2:cc:b8:b5:ee:ce:b2:df:bc:33:80:68:c5:b3:
89:fd:48:0b:03:19:ab:c7:aa:ca:42:03:0e:5c:5e:
91:d8:ca:8f:14:3d:a0:1f:0d:fa:c2:bf:98:5e:02:
1f:aa:4d:f9:a4:c0:11:5f:48:1f:e4:7e:07:be:1a:
8c:1d:61:3c:d2:f5:f2:9e:61:dd:de:a3:f2:bd:3c:
83:87:53:a9:ac:24:e1:ee:9e:a9:d1:c0:da:cd:b3:
bf:41:ef:3d:3d:98:6a:ce:02:43:81:b4:3c:b2:15:
90:93:46:57:7e:f6:95:65:f2:6e:fa:71:c9:40:4d:
2a:5e:9e:79:cc:20:cc:2a:f6:e3:d9:a9:ef:ae:41:
7f:c9:78:b2:dd:98:c4:11:05:a3:e7:cd:23:5a:5b:
96:b9:db:2a:15:94:70:21:4d:25:9e:21:ee:de:a5:
cd:af:ec:62:c8:49:5c:76:8d:76:47:b8:f6:62:01:
ed:ba:85:2b:aa:36:3e:8e:f2:f0:47:fe:2c:ac:54:
5a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CD:6C:EE:C3:16:B7:89:CA:0E:A3:38:8F:0A:15:AA:6B:9B:F2:1C
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3133382e3132312e3232302e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.121.220.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:8f:da:de:2f:70:85:7d:e1:cf:a8:fb:9c:5a:0b:5a:49:fd:
46:a9:0f:a1:a2:da:55:0c:93:33:87:eb:05:06:33:18:55:84:
68:84:e6:9b:5d:b7:20:5e:66:99:47:fe:1e:8a:51:02:41:ab:
9e:b2:51:cf:06:8e:10:94:51:e2:5f:28:e9:8a:30:1b:85:3b:
5c:04:45:09:1a:b0:b9:62:75:10:21:8c:fc:c0:c5:1b:8d:d4:
72:42:88:91:0a:a8:03:18:46:4b:28:cd:42:b7:cd:b3:30:be:
b3:df:2e:1c:41:cf:17:ea:28:3e:59:f9:30:92:96:5a:d3:94:
c2:7e:b3:35:47:6c:a0:68:b4:14:a1:16:01:64:39:3b:7f:22:
b0:5f:57:1b:d9:68:75:68:8f:83:a5:4c:e8:be:b7:df:7f:d0:
58:0f:e1:bf:13:24:f7:07:bd:9f:1e:e2:4b:83:06:6d:61:5f:
27:7c:e3:dd:84:b1:1c:c5:fa:36:94:2c:9e:c0:8c:ab:74:25:
76:8f:21:48:d7:11:f7:8e:3d:ef:ce:59:25:6b:fe:89:11:eb:
88:1a:4e:ef:b9:d3:48:4a:a8:8e:a8:16:64:79:cd:b7:e0:1c:
3b:a8:b3:22:6e:11:b8:42:64:bf:a7:71:04:7b:54:11:56:36:
e0:cb:22:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org