Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
File: 3136382e3232372e34342e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: GgbzbZrA3fJdIC+wsEy57mAFG6T7aQ5TgsqtsZp8Pno=
Subject key identifier: 51:ED:A4:5C:84:9F:07:0F:41:76:25:06:7B:E8:D9:24:3E:31:20:EE
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 19087D3ADABF41FC444B3385351E40B75196153F
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:49 +0000
ROA not before: Mon 14 Oct 2024 01:44:49 +0000
ROA not after: Mon 13 Oct 2025 01:49:49 +0000
asID: 28270
IP address blocks: 168.227.44.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:08:7d:3a:da:bf:41:fc:44:4b:33:85:35:1e:40:b7:51:96:15:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:49 2024 GMT
Not After : Oct 13 01:49:49 2025 GMT
Subject: CN=51EDA45C849F070F417625067BE8D9243E3120EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:51:95:28:f0:bd:4d:09:4e:eb:6e:35:03:67:
cd:b0:84:ea:5e:1f:fe:42:4d:aa:d6:4e:e5:86:60:
46:97:75:ef:58:5f:f7:05:00:50:e4:37:a6:de:d5:
f7:84:8d:73:df:77:63:6a:e3:d3:fd:7a:04:cc:5a:
74:dc:7c:92:83:03:bc:9b:21:12:7e:06:22:1a:ae:
c3:af:04:98:16:39:db:b4:72:27:7e:fe:c5:80:c2:
b8:62:fb:45:bf:dc:c6:16:21:c9:c9:8b:55:d2:68:
94:b5:15:6c:61:19:6e:91:c9:8c:23:38:22:d9:21:
27:9e:c1:e0:74:94:7f:b8:88:aa:4c:ae:8a:ce:30:
c4:f0:27:a9:c7:12:dc:9f:5d:46:75:98:13:99:a8:
fb:5e:32:fa:5b:47:93:ec:30:7c:0e:17:f3:eb:f9:
67:99:ab:99:20:80:e4:a9:de:82:68:6e:c3:2c:46:
4d:74:90:eb:22:1a:2a:97:d4:0f:3a:a7:01:34:4a:
a7:c0:67:92:f1:e4:45:fe:9b:23:20:bf:01:ac:6c:
d5:29:52:09:23:de:e7:e2:ed:9b:86:51:cb:32:e7:
35:fb:da:d5:82:32:1a:9a:4f:08:d6:e9:53:6b:2f:
45:46:6f:1c:33:de:d8:16:28:d7:01:a4:a9:ae:f4:
06:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:ED:A4:5C:84:9F:07:0F:41:76:25:06:7B:E8:D9:24:3E:31:20:EE
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3136382e3232372e34342e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:bc:f5:f0:68:90:75:27:26:37:c7:1e:07:6e:a8:b5:9a:af:
c4:1f:74:22:a4:40:77:3b:6b:0a:d1:4a:2a:ff:5f:90:ba:9a:
15:ea:5a:e3:8c:be:d9:24:8e:0b:00:c3:80:dc:7b:27:ec:5d:
6e:3d:e5:d4:79:ca:89:96:c4:3d:71:94:ec:8a:6c:26:19:7c:
22:c2:eb:36:fa:19:2a:6a:ad:02:c8:f9:75:8b:db:4f:c7:c8:
b3:43:8e:d7:0f:ec:96:b4:2e:7d:a5:3c:c3:71:00:28:02:95:
35:7c:90:bc:d6:da:97:f0:78:b4:52:0e:46:0f:40:f6:dc:6a:
11:f6:67:11:05:a2:a3:9c:35:40:05:40:d5:ec:3b:4f:ae:58:
86:58:d8:18:68:4b:20:cb:68:23:eb:82:bb:2e:a1:6c:bd:8e:
43:09:0c:d9:f3:6b:9f:c1:f4:61:b4:05:19:6b:92:67:0c:fa:
4a:57:0d:98:98:a5:aa:ff:55:bf:9e:e0:ca:5c:c2:b5:43:cc:
7f:d6:32:e5:79:29:74:92:37:72:91:a6:b6:4a:dd:08:c4:e8:
e9:13:02:eb:04:3c:fa:c6:da:8d:8b:8b:5f:80:d1:cf:10:e7:
44:73:e1:fd:5f:53:17:7f:9a:9d:3d:95:1b:f5:00:02:56:64:
6b:7d:d2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org