Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
File: 3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa (raw, json)
Hash identifier: gJRwW13KPKLOvWVaQvwsbfeATKJNqP+Vc5cb2OknK50=
Subject key identifier: 6A:EA:D7:4B:3C:E1:1F:C1:0B:72:AB:0A:73:74:5D:4B:58:9E:ED:E4
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 561D1B90F424A6DC912E17DF8D52788ACE294956
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
Signing time: Mon 14 Oct 2024 01:49:48 +0000
ROA not before: Mon 14 Oct 2024 01:44:48 +0000
ROA not after: Mon 13 Oct 2025 01:49:48 +0000
asID: 271724
IP address blocks: 170.245.100.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:1d:1b:90:f4:24:a6:dc:91:2e:17:df:8d:52:78:8a:ce:29:49:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:48 2024 GMT
Not After : Oct 13 01:49:48 2025 GMT
Subject: CN=6AEAD74B3CE11FC10B72AB0A73745D4B589EEDE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a3:42:4a:01:78:6b:8c:15:af:9e:ea:a6:69:
04:ff:53:39:46:3d:f3:8c:fc:ab:95:11:bf:2f:d8:
cb:b1:90:d9:2b:43:e6:b2:c7:be:ac:8f:11:50:02:
a1:42:9a:71:da:d4:b6:f3:9d:96:bf:27:b3:81:af:
c0:bf:e8:0d:73:cf:cb:65:93:6e:bb:ff:5e:74:7b:
ed:ac:0e:54:fe:b1:87:5b:d1:01:74:c7:7d:9a:c0:
d0:0c:54:02:e9:21:b0:fe:ea:86:3a:9d:d8:ca:ec:
5a:02:79:4d:1d:6b:f9:5a:a9:4e:ef:c4:8b:56:72:
63:6c:af:d9:86:63:ab:49:7c:e4:17:a9:ed:7d:c3:
39:a9:fc:d3:7b:3c:22:7b:be:20:84:7b:d0:89:8f:
08:4a:de:b0:e2:e2:c2:39:d5:d1:69:a2:dc:99:a9:
9f:9f:58:20:eb:1c:9f:2f:f7:08:5c:b0:a7:f2:35:
e3:a8:84:33:c2:b2:4d:03:31:ce:88:a1:75:b1:55:
82:c2:1c:52:6a:f2:ac:49:65:3a:14:e8:b1:8e:df:
a2:f3:e4:a0:92:66:de:5a:d0:85:e2:80:2c:9d:7e:
a3:f8:e6:7f:a8:4b:3e:91:23:12:b3:2a:de:3d:22:
15:62:1d:68:50:3f:86:ad:29:99:a8:00:3a:3d:33:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EA:D7:4B:3C:E1:1F:C1:0B:72:AB:0A:73:74:5D:4B:58:9E:ED:E4
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234352e3130302e302f32322d3232203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.100.0/22
Signature Algorithm: sha256WithRSAEncryption
01:b9:3c:87:59:49:cc:f0:7a:5b:2d:31:30:ae:10:01:04:e1:
4f:9f:1d:03:6f:bb:aa:6d:4d:ef:13:3e:a5:88:49:95:14:0e:
ea:3b:9d:da:0d:eb:44:fa:27:bb:f7:3e:2b:10:68:b8:cf:5c:
5b:18:6e:44:9e:49:5a:ee:ff:0d:3f:48:74:15:df:ac:a5:af:
fb:f3:f2:0b:e2:10:89:ec:17:40:33:99:cf:cb:59:5d:47:8c:
23:08:e9:5b:9a:89:fe:db:59:5d:a8:3c:5c:ae:a9:f2:de:a6:
c3:2f:e7:65:54:50:23:75:34:82:05:fe:29:56:9f:ed:ec:29:
a6:15:61:4e:b2:b3:60:be:43:23:ea:03:ca:e5:ca:43:88:c5:
d2:4b:c3:d1:c7:06:9b:bf:07:73:0b:1a:96:82:79:c7:e8:f1:
01:6c:40:79:6c:10:d3:4d:fe:1c:32:99:9a:af:e0:cb:57:0a:
7a:ee:de:ef:30:1a:fc:f6:87:d7:2b:9c:8f:ae:b1:9f:70:f4:
e3:c4:ab:3a:03:9b:48:ba:04:20:b2:5d:4f:f1:87:a8:44:41:
e9:f4:c9:dc:9c:bb:00:6d:ff:59:2f:51:58:17:5f:5e:b4:4d:
ee:ee:2d:62:c8:a2:50:d8:85:56:7a:47:d8:4e:2d:20:e7:d8:
67:a2:17:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org