Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
File: 3137302e3234372e35322e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: vyrKIFy45Ag548IYvjWWKM/eY7JqSW9lgqX7c/BXxlU=
Subject key identifier: 42:D6:C1:B1:9C:01:A1:B9:E7:51:51:2C:BB:77:A5:07:20:B9:F2:20
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 536C789C90D90BB14E07D64AA80ABA59D5176D82
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:50 +0000
ROA not before: Mon 14 Oct 2024 01:44:50 +0000
ROA not after: Mon 13 Oct 2025 01:49:50 +0000
asID: 28270
IP address blocks: 170.247.52.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:6c:78:9c:90:d9:0b:b1:4e:07:d6:4a:a8:0a:ba:59:d5:17:6d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:50 2024 GMT
Not After : Oct 13 01:49:50 2025 GMT
Subject: CN=42D6C1B19C01A1B9E751512CBB77A50720B9F220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4a:32:24:9c:51:d6:65:fb:c9:a9:1e:e5:55:
b3:0d:4e:5a:fc:65:21:2f:59:1c:15:d7:13:ea:aa:
0a:95:59:dc:57:4b:bb:c3:28:d1:70:1f:ad:b6:ea:
28:c1:e5:81:51:1d:ce:05:53:94:62:fd:89:c6:53:
c4:9d:12:ff:41:c1:a2:1b:bb:9a:96:ae:43:1c:d1:
fb:da:34:fb:e7:5d:7a:2d:65:f5:c6:71:9f:d3:c1:
15:28:50:25:53:ff:b5:43:29:f0:00:17:0d:0d:38:
30:45:95:e7:3a:02:dc:23:6a:76:ec:ca:72:64:1c:
7a:94:d3:da:e1:6f:d8:4d:22:79:03:67:0a:d5:30:
fb:e1:85:ef:98:7a:bb:5e:0e:51:49:05:fd:d1:64:
7e:02:11:5d:da:c6:00:9a:4e:da:e3:95:72:13:3e:
74:b4:c3:85:3f:1f:8c:3b:8d:c6:8e:91:8d:6f:aa:
35:68:75:fb:7c:b8:b1:0d:ad:ac:92:1d:01:9c:6a:
60:dc:4a:07:a8:50:29:1d:69:43:10:76:ba:25:54:
76:87:01:1a:43:fa:ac:47:66:4e:d8:65:3a:b1:ba:
3f:9d:d4:6a:1b:42:76:92:7f:82:88:12:66:7c:6c:
d0:8b:8a:4a:4c:90:20:93:df:67:5d:7f:f3:2c:ff:
8d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:C1:B1:9C:01:A1:B9:E7:51:51:2C:BB:77:A5:07:20:B9:F2:20
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137302e3234372e35322e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.247.52.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:92:4d:df:d5:5d:7e:d0:b4:d5:d3:46:9e:75:d2:4c:38:0a:
da:96:2f:e3:8d:64:1f:51:99:5c:20:6b:82:be:8c:3c:9c:cd:
01:02:98:65:ae:10:a5:d2:0b:fd:e1:d4:30:b3:a8:6f:1f:b0:
d0:d4:0e:86:06:b9:de:49:85:e0:75:2c:29:7d:40:f8:ec:1f:
25:6d:99:55:ec:0d:04:4f:35:b3:3b:49:72:fb:f9:7e:3f:35:
1f:36:bf:19:7d:04:a0:81:2d:24:9a:5a:9c:ba:dc:eb:e2:30:
21:64:66:81:b9:ef:fc:f0:d5:1a:35:e8:e3:83:29:f7:fd:7b:
2a:54:6f:7c:91:44:4e:48:e8:6b:2d:56:c8:e3:8d:e9:59:ec:
ca:68:61:21:31:54:97:50:34:2b:ae:23:2e:53:31:5c:4d:35:
d5:7e:70:36:56:49:2a:11:af:3d:69:61:e1:91:75:8a:fe:c4:
05:3a:48:df:bd:42:4e:5d:64:dc:53:9c:25:9c:6f:75:a2:bd:
5f:62:da:25:a4:70:4f:36:26:cd:46:1b:70:ff:d5:dd:28:8f:
d9:40:2c:03:b1:05:04:24:ea:03:53:a6:e1:2b:d9:01:2e:8c:
7a:f2:c3:cb:59:a5:d2:b7:e4:99:74:b2:4d:78:ec:5b:e1:9a:
a7:95:2f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org