Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35322e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: rPF/8+pEInSBzdTrz720+pG0HIMOGHp3juZcnUdBISg=
Subject key identifier: 82:E7:2F:C2:0D:9A:4A:24:18:6D:C2:F3:20:BF:F5:3A:03:10:64:96
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 6598B8DCF84AC4DAA70A891E655C1CAEA2999473
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:50 +0000
ROA not before: Mon 14 Oct 2024 01:44:50 +0000
ROA not after: Mon 13 Oct 2025 01:49:50 +0000
asID: 28270
IP address blocks: 168.121.52.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:98:b8:dc:f8:4a:c4:da:a7:0a:89:1e:65:5c:1c:ae:a2:99:94:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:50 2024 GMT
Not After : Oct 13 01:49:50 2025 GMT
Subject: CN=82E72FC20D9A4A24186DC2F320BFF53A03106496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:98:da:86:24:0f:1f:48:b1:6c:3c:0e:59:d8:
75:e1:46:89:49:f3:ee:a8:62:85:2d:c8:1b:24:76:
c0:b4:4f:61:f2:ad:20:db:17:99:ce:c1:6d:94:ab:
38:a0:28:6b:62:45:58:4c:8a:66:27:74:d4:e1:0b:
5a:34:c5:c0:94:bb:e5:2c:d1:12:47:98:f2:1b:39:
3f:24:01:c2:d2:7a:78:13:bc:93:d2:5b:89:d6:d7:
d2:76:aa:04:a9:75:a9:5b:57:8a:6f:e3:8f:e8:c7:
c0:5b:b1:09:90:1d:f1:b3:ea:cc:40:fb:4c:4e:04:
c0:e5:a7:d7:df:5f:0d:5b:46:83:84:ae:ed:f0:d7:
6d:b3:bb:bc:ce:e9:c4:a3:c4:20:7e:38:50:fa:86:
1f:83:fa:d7:35:d3:45:32:83:08:5c:65:44:cb:5e:
46:01:22:6e:68:3a:2b:cb:a9:a5:a9:f6:13:ea:34:
85:79:96:ae:a2:80:e2:4d:7c:ed:e4:af:d3:a7:f2:
b4:6f:a6:76:b5:8b:0a:2f:45:fa:88:97:aa:4c:4a:
0a:6a:d9:61:96:57:c9:ee:88:a3:e9:77:32:0e:ed:
35:d8:46:fb:05:c6:a2:16:7f:f3:e6:39:6c:a5:35:
79:36:00:01:30:a1:ba:ac:ef:4b:e0:54:32:03:9c:
d7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:2F:C2:0D:9A:4A:24:18:6D:C2:F3:20:BF:F5:3A:03:10:64:96
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35322e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.52.0/24
Signature Algorithm: sha256WithRSAEncryption
69:5e:79:61:9e:75:8a:c1:a7:72:0e:e8:8b:48:48:7d:82:6b:
cb:c9:06:47:f2:47:cb:8c:8a:81:3f:0f:ed:cf:82:e3:ae:0f:
b0:b1:0e:5e:ac:86:04:d3:c4:fe:c7:2a:69:68:d4:77:0b:f2:
60:e5:cb:cf:e4:3a:3f:b9:b0:cd:cf:b2:4e:1f:4b:b4:c6:4a:
a7:a9:75:9a:c5:b9:6d:05:0f:a3:17:21:a4:1b:9c:81:8c:4e:
ab:e2:de:af:06:c9:d0:b1:ac:a1:17:e3:96:8e:f4:2b:89:1d:
72:2e:9c:61:23:f7:c8:4d:96:a5:ea:cc:98:c7:d5:de:05:1d:
76:f7:b2:e6:45:6a:9c:ba:7a:de:f5:93:9e:51:d7:d1:b4:e4:
c5:36:ae:40:9a:ab:76:9c:86:78:03:bf:d9:c3:93:a9:09:10:
2e:5b:7c:ee:9a:3f:62:d6:67:47:81:ff:38:78:3b:1b:b2:96:
f6:cd:9c:30:8c:b4:e5:1c:75:e1:71:22:75:2a:f2:33:e7:b5:
54:ad:6f:b0:ff:6b:e3:db:e7:f4:b7:bf:7b:e7:b7:5a:92:3e:
6c:3c:13:d8:4c:76:c5:ec:ba:27:0f:5d:00:97:6e:7a:0a:6c:
e5:2e:d5:bc:ec:89:14:51:4f:d1:d3:bd:da:87:bd:4c:e8:ae:
d1:90:73:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org