Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa
File: 3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: hDi6pLv8pd+ZbQZ0D4cn0pJ/jY2yn0y/4RKZa3ipbJM=
Subject key identifier: D8:57:0E:39:57:53:44:DB:75:3A:3F:07:AF:B2:26:94:CC:E9:DD:4C
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 13CD7FC9C1F329B22B627ABBFED625F0E101BB57
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:49 +0000
ROA not before: Mon 14 Oct 2024 01:44:49 +0000
ROA not after: Mon 13 Oct 2025 01:49:49 +0000
asID: 28270
IP address blocks: 143.255.112.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cd:7f:c9:c1:f3:29:b2:2b:62:7a:bb:fe:d6:25:f0:e1:01:bb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:49 2024 GMT
Not After : Oct 13 01:49:49 2025 GMT
Subject: CN=D8570E39575344DB753A3F07AFB22694CCE9DD4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a0:a6:56:f5:44:86:7c:e9:cf:83:cc:ad:b0:
6f:55:64:8b:d2:89:7b:83:ce:45:26:e3:8a:64:84:
3d:71:83:49:dd:5d:cb:36:15:f4:c2:ea:de:0b:15:
1c:24:a7:83:58:e5:4c:83:5e:39:01:94:38:4e:af:
f7:24:e4:24:3d:9e:c7:16:25:70:81:73:39:f3:c5:
1a:72:9e:01:3e:08:03:93:a2:d6:91:e4:5b:a7:ff:
05:ec:b6:6e:aa:b3:ac:d0:be:7a:a9:05:b6:ec:9e:
64:83:ea:92:c7:5d:d6:3d:6d:ce:08:1c:f0:88:bd:
ef:ab:89:7c:e1:cc:fb:53:e5:44:98:54:af:f9:3e:
1a:65:4b:a5:b8:3a:a2:df:1f:5b:11:05:7a:a9:3a:
b2:be:76:6c:92:4e:f7:09:a8:96:88:c2:11:86:3d:
69:f9:a0:a5:3f:c5:56:5f:d5:86:dc:46:9c:a5:4a:
2f:e2:eb:98:c5:4c:f0:b7:5e:82:95:e0:da:d6:1d:
9f:c7:af:84:e6:c0:8c:b1:7f:22:a8:50:6f:96:fa:
be:7e:e0:34:1d:38:a8:73:a8:8a:82:18:26:0a:33:
ae:cb:cb:a0:c3:4c:a8:96:7a:3f:7e:5c:4e:79:62:
fe:82:90:34:6b:f6:aa:54:11:49:a5:7a:a1:59:fc:
14:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:57:0E:39:57:53:44:DB:75:3A:3F:07:AF:B2:26:94:CC:E9:DD:4C
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3134332e3235352e3131322e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.255.112.0/22
Signature Algorithm: sha256WithRSAEncryption
52:48:18:5e:e4:80:87:d3:d6:ef:40:3b:2f:0e:ad:bc:28:ca:
23:c3:d3:94:81:9b:d5:c5:8d:14:dc:0a:6d:4f:f7:af:58:62:
2d:16:72:ba:82:d2:79:d1:4c:c4:3b:0b:a2:cf:1b:79:24:34:
b2:e2:0e:3a:79:56:ce:c2:80:fb:3a:85:fb:11:86:ab:8f:63:
c9:83:2f:9c:8d:bc:bd:5d:91:b2:57:d0:58:83:b9:5d:9c:c9:
6f:cc:c4:23:28:ce:ce:f2:6d:d4:97:6d:04:bb:45:19:32:f9:
cb:10:fe:af:a7:2d:d9:98:27:c5:4d:0a:7b:f3:92:b0:c3:0f:
7e:4c:85:6b:8c:6e:43:49:4d:6c:9d:28:e2:ee:b4:96:02:a8:
c2:ab:c3:0c:d4:4c:02:f4:07:70:13:0c:30:b4:76:f2:80:89:
73:b9:b4:80:bc:1e:02:e5:02:6c:b2:2f:21:4b:af:7f:31:a8:
7a:56:32:2e:16:70:9b:b9:c2:58:d1:f9:b4:0a:d0:70:bd:da:
fc:6c:e0:9a:0d:82:06:df:da:1e:36:a5:12:e2:d0:59:bc:ee:
fd:9f:9e:dd:f0:c0:20:ad:69:e8:9c:51:51:41:b4:d0:cd:9a:
a9:6c:d4:ec:fe:b2:cb:bb:2b:95:f8:9a:d9:fa:bb:5b:42:19:
b0:c7:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org