Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
File: 3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier: olNMobaC1hKSXho/a472N9PW3orIVGIjxNpqKsCP33w=
Subject key identifier: 62:D2:69:14:F7:51:9B:DB:C7:0D:A7:A0:61:86:08:CE:F3:33:3B:4C
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 16F000C8D79656F3F88F4DBD50C4D86A2CF1219A
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
Signing time: Mon 14 Oct 2024 01:49:47 +0000
ROA not before: Mon 14 Oct 2024 01:44:47 +0000
ROA not after: Mon 13 Oct 2025 01:49:47 +0000
asID: 262509
IP address blocks: 170.247.52.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f0:00:c8:d7:96:56:f3:f8:8f:4d:bd:50:c4:d8:6a:2c:f1:21:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:47 2024 GMT
Not After : Oct 13 01:49:47 2025 GMT
Subject: CN=62D26914F7519BDBC70DA7A0618608CEF3333B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7d:d2:a0:13:db:63:41:5b:0c:09:15:3d:4e:
d4:56:5e:cc:dd:6a:e3:5a:0a:9c:ca:47:2e:74:e1:
b2:37:64:d7:46:3f:7c:17:94:0f:56:eb:d1:dc:c5:
96:f7:29:03:0a:46:28:5f:0a:2d:e6:09:b7:9c:e2:
f1:79:74:7c:b1:93:aa:40:65:69:cc:06:11:b5:58:
a5:5b:df:b3:a2:42:6d:72:7f:22:96:90:8b:85:50:
e3:52:25:8b:4f:1a:bc:53:9e:fa:55:73:49:3f:55:
40:78:da:38:21:dd:22:76:54:c5:74:91:51:e5:9c:
a9:e4:d6:be:68:4a:41:b5:4b:43:89:9a:31:19:e1:
62:d7:d3:7d:28:70:b8:fa:38:4b:16:06:13:b6:5d:
a9:f0:b7:b6:e1:47:77:e1:4c:41:98:65:65:27:66:
67:18:b6:80:54:2c:e0:bf:e0:6c:a6:14:60:28:42:
d7:b4:39:00:1c:77:dc:9c:ab:ee:22:75:25:e2:c2:
29:d8:bf:ff:2f:ef:13:6b:82:f9:ca:c5:ce:0d:a7:
b2:1f:f1:43:fa:90:65:b9:53:46:8f:ec:06:1f:69:
28:5b:aa:db:c0:3c:2a:53:69:95:d6:0b:3b:08:6b:
55:be:2b:76:0d:e5:98:20:0c:3f:24:06:27:3f:55:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D2:69:14:F7:51:9B:DB:C7:0D:A7:A0:61:86:08:CE:F3:33:3B:4C
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.52.0/22
Signature Algorithm: sha256WithRSAEncryption
28:17:50:18:55:be:41:f2:87:41:cb:6b:60:1e:80:c8:0e:d8:
aa:5f:5c:75:71:70:3b:f3:ee:6c:b5:73:67:dd:bd:89:b7:63:
dc:4e:20:a5:d4:36:3e:4f:c7:e4:de:58:d5:2e:9f:04:61:b7:
92:5f:3c:9d:30:d9:38:f5:47:a9:7c:ea:37:51:95:8a:8b:59:
b6:38:11:b3:f2:f3:b6:08:b2:0d:49:c1:69:64:11:71:11:03:
8a:e2:5a:c0:53:93:22:c8:1b:da:33:8b:a9:79:bb:d8:27:1d:
fd:2b:1f:fe:b7:1c:a8:88:4d:06:18:e2:3b:f0:93:5e:7e:3a:
e6:b2:37:0a:4c:40:2d:50:cd:2a:39:9f:12:7d:25:d6:1d:2b:
35:fe:d2:b8:05:dc:61:6a:45:ec:93:e8:49:b6:e4:64:e4:f0:
e3:95:f9:08:b5:73:2b:36:f0:2f:6b:ce:ad:a5:ca:b4:64:27:
de:1f:5f:c3:c2:3b:c0:8b:f8:42:a0:b9:ff:58:32:0b:97:99:
74:7b:8a:7a:4b:31:99:5a:77:d4:b0:5b:9a:d8:eb:b3:9d:5e:
2f:96:7a:b9:17:37:3a:e5:76:98:19:b4:af:90:f4:6f:8d:cb:
b8:25:cf:26:e9:b8:fe:6b:9c:48:15:db:4b:ca:8a:ac:06:38:
b0:c9:8a:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org