Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
File: 3137302e302e3230342e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: TB03+LBDJC4hZXLt+42XauRbA6/nsE3yIQzCTJGwH28=
Subject key identifier: 8F:4D:CA:D0:40:2F:F8:E4:58:52:01:33:6E:75:02:95:DE:54:D7:94
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 4CB95A9520EB97E7833E6739F4BC49A5AE0F6B80
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 14 Oct 2024 01:49:49 +0000
ROA not before: Mon 14 Oct 2024 01:44:49 +0000
ROA not after: Mon 13 Oct 2025 01:49:49 +0000
asID: 271724
IP address blocks: 170.0.204.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:b9:5a:95:20:eb:97:e7:83:3e:67:39:f4:bc:49:a5:ae:0f:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:49 2024 GMT
Not After : Oct 13 01:49:49 2025 GMT
Subject: CN=8F4DCAD0402FF8E4585201336E750295DE54D794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:be:83:67:84:17:db:f7:f2:53:50:44:2c:
4f:1e:0f:19:8b:94:91:54:2c:50:85:5c:95:9b:fa:
8f:7a:e5:b9:48:ae:4b:7b:d1:0a:fa:17:a2:07:94:
b7:cc:09:43:91:f9:03:7c:5a:64:02:e4:2d:62:a5:
7b:c5:ad:9b:36:a3:70:cc:d7:75:48:9d:f4:1c:b9:
d6:f0:e0:0b:a9:7f:59:3f:2f:2f:56:ad:8e:29:f4:
d9:51:5f:50:36:12:06:24:82:2b:4c:aa:16:5c:e4:
4d:d2:80:36:86:3f:f0:87:67:22:b8:b7:3a:c6:0a:
19:20:d2:13:a3:0c:30:df:d6:61:f6:b8:e1:c6:04:
6d:c0:8b:4d:67:08:1a:43:59:a5:66:0a:74:5f:b5:
bc:55:88:a7:1b:5c:c3:4b:49:b5:e4:fb:b4:75:ef:
76:b4:8e:a8:3f:76:a4:2a:f3:e3:37:ae:2c:87:62:
64:8d:37:0e:8c:77:e2:bb:19:2b:f7:82:78:40:12:
94:a2:47:65:38:4a:ec:31:91:e4:45:f0:88:60:1d:
f2:65:4f:28:09:51:90:49:21:e3:9a:ce:62:aa:bb:
d7:b4:e9:95:b0:2a:61:2c:5b:e2:e8:bb:ae:eb:6d:
03:ae:98:08:41:c9:10:5e:ad:fb:ef:b5:e6:9b:75:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4D:CA:D0:40:2F:F8:E4:58:52:01:33:6E:75:02:95:DE:54:D7:94
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e302e3230342e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.0.204.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:b5:74:b6:90:cc:28:d7:14:b6:1c:5e:f3:bc:2b:8b:8f:8a:
82:02:1a:0f:90:32:30:cd:69:8b:bb:63:c8:3b:fb:f2:03:65:
10:9a:f2:4a:65:8d:ae:2f:fc:22:f6:20:44:19:41:b5:b2:d5:
6c:db:7a:75:bb:b9:db:94:c6:a0:bc:9e:b2:92:53:07:4f:41:
11:c7:67:b2:31:70:0b:bb:1b:44:fa:bb:62:1d:04:8c:07:d7:
e4:5e:cb:c8:63:cc:37:01:6b:b3:a1:f3:e0:df:2a:48:25:ee:
95:fc:29:39:33:0e:8e:0a:6c:76:fb:cd:c7:24:f6:79:ef:db:
f4:c5:33:af:26:04:cf:90:9c:f9:aa:b7:53:e5:61:0e:20:cd:
12:61:b9:a9:87:56:4d:3b:52:01:d6:41:1a:6e:e5:5a:af:16:
5f:a1:b7:4e:bf:a9:1b:ce:64:b0:78:ef:cc:ff:72:87:3c:0b:
c1:48:b6:ae:b9:75:75:7a:e6:1f:67:6e:e4:b8:8c:51:92:d9:
a6:71:40:3b:01:ce:54:dc:60:5a:ce:5c:88:c9:a9:5d:82:35:
78:6f:9e:c0:0f:dc:2c:7a:ab:a8:9f:ff:3d:29:58:95:d7:b7:
37:83:80:50:d7:dd:b5:2a:52:1b:f5:3c:16:4b:7f:ca:f7:02:
46:4e:d0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org