Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa
File: 3137372e36372e302e302f32312d3231203d3e203238323730.roa (raw, json)
Hash identifier: cfva1tRZwOekg01cc7uMEplpVEFSRKlaL49pH7RPwMI=
Subject key identifier: 21:DF:D2:A5:0E:37:2E:D9:25:CE:4B:AB:9E:A1:68:F9:23:EE:E1:85
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 26F2D852F9A4F559CBA351007B6F713F3534790A
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:51 +0000
ROA not before: Mon 14 Oct 2024 01:44:51 +0000
ROA not after: Mon 13 Oct 2025 01:49:51 +0000
asID: 28270
IP address blocks: 177.67.0.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f2:d8:52:f9:a4:f5:59:cb:a3:51:00:7b:6f:71:3f:35:34:79:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:51 2024 GMT
Not After : Oct 13 01:49:51 2025 GMT
Subject: CN=21DFD2A50E372ED925CE4BAB9EA168F923EEE185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f9:25:f2:40:bb:d5:64:4a:a8:39:b5:d1:b0:
f2:82:0a:4f:eb:90:6a:e9:76:70:7f:fc:1d:63:f2:
c0:c1:c2:0c:20:c1:50:13:5e:b4:bb:e9:58:82:25:
b1:fc:4f:53:0f:90:08:3b:df:e7:05:68:42:2d:2a:
28:a6:a5:03:1d:bc:3c:87:69:f9:91:20:56:46:8f:
98:64:28:fa:a9:de:b2:f8:65:56:a6:61:33:29:5e:
3e:f6:57:ef:06:b9:3f:a5:b8:35:00:09:d1:23:6f:
63:50:cb:41:2e:66:5f:7b:c6:66:0b:7d:38:39:eb:
ff:81:3b:a1:96:3e:e0:50:9e:ad:fc:58:48:bd:c6:
a9:2a:65:b6:b8:ff:20:25:57:2b:a9:27:20:35:cc:
c6:13:34:54:14:0b:ca:f0:0c:69:c8:84:21:a0:34:
e2:c5:d2:80:68:8d:2f:fb:5f:0b:1f:39:df:f4:ce:
49:12:86:86:c4:46:5c:e0:54:b0:48:b9:75:bb:61:
1f:eb:b1:2e:e3:06:8c:f3:55:ae:af:87:f4:53:65:
a1:10:b7:5c:75:bc:6c:df:40:f2:69:b0:d6:e2:c7:
8b:09:89:91:17:9f:94:55:be:07:af:8f:3c:cf:e1:
70:3a:69:4a:4c:58:34:ed:e3:34:99:58:9f:a2:0b:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:DF:D2:A5:0E:37:2E:D9:25:CE:4B:AB:9E:A1:68:F9:23:EE:E1:85
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e302e302f32312d3231203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.0.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:17:2a:cf:27:5d:66:3b:fc:ed:1b:8f:af:c6:0b:35:30:ce:
a9:5d:3a:a6:98:d0:42:a1:ce:a5:81:aa:30:fd:d3:4d:d4:75:
37:7c:00:62:ba:23:e9:72:3e:b2:89:a7:ab:09:61:73:60:8c:
4f:e3:03:f0:a9:ef:f6:f9:98:ef:f6:dc:97:27:2d:4b:03:db:
5c:73:43:4d:1a:d4:36:c8:57:9b:be:96:94:8e:27:16:ca:fb:
ff:96:00:fd:05:2c:b0:77:9b:8d:9e:97:cd:e3:56:c0:4e:9c:
9d:90:99:64:70:aa:d2:2a:f4:c1:58:ef:b5:1c:98:22:cb:ff:
a6:f6:05:54:fd:f5:cb:d7:04:d7:4c:43:fa:38:c0:dd:13:d3:
80:9d:7c:19:d1:4d:9e:c9:99:bf:a6:3e:3b:13:22:04:d8:2a:
7c:33:cc:ce:5d:88:d7:59:05:56:71:d1:f1:68:9c:a4:0f:35:
36:f3:62:a0:39:c6:11:53:56:eb:c5:5b:7b:26:30:80:e6:90:
e2:d0:d7:98:92:76:82:33:75:bf:50:48:50:60:b2:8b:68:ce:
6a:a5:6d:2e:80:d2:b0:0d:d1:81:cc:2c:ef:f3:10:52:4f:a8:
db:4e:49:80:c0:aa:20:84:df:4e:f7:7b:78:72:4e:76:b4:94:
0f:30:e6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org