Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa
File: 3136382e3132312e35352e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: rBcVaaNrwDeU+r6SI/sMjFsyTM/0ZYzZxEerWP/G4SI=
Subject key identifier: 51:23:F1:03:A2:0B:59:07:A8:28:5C:03:72:BE:6B:C9:F9:3B:44:9D
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 5B1DDF7911C2A382A913B8DE4E5DDA4EF07F0A49
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:50 +0000
ROA not before: Mon 14 Oct 2024 01:44:50 +0000
ROA not after: Mon 13 Oct 2025 01:49:50 +0000
asID: 28270
IP address blocks: 168.121.55.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:1d:df:79:11:c2:a3:82:a9:13:b8:de:4e:5d:da:4e:f0:7f:0a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:50 2024 GMT
Not After : Oct 13 01:49:50 2025 GMT
Subject: CN=5123F103A20B5907A8285C0372BE6BC9F93B449D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:db:32:80:3d:5f:36:5e:92:6c:4e:db:cd:
af:a8:6a:a0:54:52:dd:5e:3d:e2:bf:bb:13:96:95:
2f:ef:78:1b:c4:57:eb:c6:ab:b7:65:4b:c4:9d:44:
22:3e:74:4e:e6:09:32:a8:49:98:fb:be:7b:0c:bc:
af:56:a8:9b:ec:af:c2:3f:4c:c8:65:0b:34:b0:0d:
81:0a:e6:b9:29:5a:6b:52:40:74:b3:6d:a6:42:95:
bd:48:15:4e:10:30:ef:93:29:01:03:11:3c:b3:9a:
e6:2f:93:64:e4:92:4b:89:67:60:ff:dd:d0:9b:4b:
71:69:a5:30:34:8a:eb:68:4c:51:1c:4a:ab:51:46:
54:01:7e:3d:6e:e1:41:b6:8a:f8:8b:8b:f8:39:99:
0e:01:83:85:8e:35:d0:54:7c:54:85:a5:4a:3b:c6:
0b:d6:02:f8:2f:02:7e:bb:1b:62:4f:97:82:b0:ce:
0b:7d:09:a9:b3:26:3d:1a:9f:45:36:21:ec:f2:7b:
f9:81:24:69:dc:67:64:01:78:27:0b:48:de:c5:85:
f0:e6:c7:c8:9f:8a:c0:cd:05:76:bb:96:e1:59:48:
37:73:ff:ce:18:e2:6f:d9:06:04:f1:df:95:72:16:
ea:4a:d7:f5:7e:5f:7b:4d:06:c0:41:69:97:2f:69:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:23:F1:03:A2:0B:59:07:A8:28:5C:03:72:BE:6B:C9:F9:3B:44:9D
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3132312e35352e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.55.0/24
Signature Algorithm: sha256WithRSAEncryption
94:04:f8:1e:65:b3:30:55:33:f0:11:10:17:8c:3c:3e:6c:bb:
0b:80:0d:8b:66:de:5a:61:99:dc:07:f6:44:a7:f7:7e:ce:c3:
2c:9c:92:e9:68:51:15:5e:ed:1e:c1:c7:d7:be:4e:dd:1c:f7:
92:9f:01:a2:69:b2:88:dd:35:a9:ce:55:b7:bd:91:66:5f:f2:
39:c2:da:92:c4:2e:2e:7a:58:06:e4:0a:dd:d8:3a:bf:21:fe:
46:12:a0:f2:ef:9e:ee:88:97:d8:c1:13:ff:de:1b:29:57:04:
b8:60:ff:ff:31:a5:11:9f:5c:aa:57:1c:3e:51:14:42:73:51:
7c:8e:4b:39:df:5a:d1:a7:f8:fc:9b:ac:30:d7:34:1b:4f:d9:
ed:b1:d1:bf:72:9c:19:3c:2f:c1:1f:dd:ec:b5:64:92:19:c5:
a9:ee:8d:e1:cd:a5:4e:07:73:fe:da:5b:47:27:e5:5d:6a:0e:
c5:26:0f:7d:28:74:65:28:ae:37:9b:3c:28:7d:7b:d0:68:a2:
7d:03:fc:56:82:19:d9:b4:39:17:0e:24:e7:81:f7:58:ed:29:
09:32:ef:d8:bb:97:d4:a8:7b:01:e2:2b:81:5e:47:05:00:cb:
c6:a5:af:88:4f:02:2a:ea:f6:b7:11:60:c2:38:54:37:bc:a6:
59:22:1b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org