Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e203238323730.roa
File: 3137372e36372e342e302f32342d3234203d3e203238323730.roa (raw, json)
Hash identifier: RrqZ/EKwawZZJhyAe6sW7p89gz2dfV8VHOo7ipXHza4=
Subject key identifier: E5:41:8E:B5:3A:B7:C5:02:8E:A3:27:19:97:79:DB:5C:7C:67:E8:FF
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 09888CAB6705A9AA13C3F7AE803C319A488FA604
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:52:53 +0000
ROA not before: Mon 14 Oct 2024 01:47:53 +0000
ROA not after: Mon 13 Oct 2025 01:52:53 +0000
asID: 28270
IP address blocks: 177.67.4.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:88:8c:ab:67:05:a9:aa:13:c3:f7:ae:80:3c:31:9a:48:8f:a6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:47:53 2024 GMT
Not After : Oct 13 01:52:53 2025 GMT
Subject: CN=E5418EB53AB7C5028EA327199779DB5C7C67E8FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:00:00:8a:fe:04:b4:82:06:7b:e1:81:24:0c:
6a:11:77:de:b6:2a:9a:ef:4a:b0:fa:75:a3:38:78:
b5:4b:0a:5e:b3:51:a0:ea:27:26:d0:64:c4:f2:93:
17:60:4d:77:00:32:31:60:33:ed:bf:a0:c6:02:dd:
37:d5:3d:fe:16:ce:2f:fd:d4:b5:bc:bd:3e:df:95:
9e:bb:27:35:a8:54:40:f4:f0:b5:a2:e1:e1:61:ed:
b3:b8:83:ac:5c:e1:a9:cc:b5:e6:79:60:0e:86:a5:
8a:94:25:c6:d6:c8:19:66:02:ed:5c:58:fa:08:3d:
86:09:01:6a:73:5a:84:5b:0a:2c:ea:51:bc:b5:9e:
de:41:78:92:1a:76:4c:db:f5:a0:f0:3d:9b:fb:51:
d1:0c:25:13:3f:c4:c4:9c:4e:ef:9f:ab:f9:26:03:
29:52:bf:b1:65:fa:53:5d:8c:e7:08:34:c2:5e:7e:
61:af:52:e9:44:11:99:ad:49:53:ed:01:54:ca:de:
98:8d:cb:43:8c:f7:cf:04:8f:63:c3:c2:97:16:a2:
4d:9a:ee:fc:cd:01:53:25:c2:17:3b:9c:a0:21:6a:
9d:1b:f5:d6:52:b7:1e:32:5f:bd:95:e1:52:60:18:
11:45:eb:ee:e6:1b:e3:c2:65:02:f1:d2:92:b1:b2:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:41:8E:B5:3A:B7:C5:02:8E:A3:27:19:97:79:DB:5C:7C:67:E8:FF
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3137372e36372e342e302f32342d3234203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.4.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:40:82:3a:89:f6:eb:a8:57:c6:d3:08:28:81:7c:67:e6:f1:
aa:ac:a6:d8:ae:25:78:23:05:46:f4:00:09:fe:62:51:af:c1:
40:02:31:f5:b6:85:fd:68:91:19:2a:27:09:a6:01:bc:1f:3c:
8d:99:1c:a2:36:41:c4:b4:79:bd:ed:bd:27:05:87:64:bd:eb:
ca:a1:00:a5:bc:41:ed:98:45:bb:94:c0:0b:45:05:8c:87:a5:
4b:a5:5f:36:77:eb:ee:2d:97:21:55:64:75:e9:e8:27:0d:26:
6d:a3:ce:66:bd:ac:a0:09:e7:8f:d3:ed:e7:32:75:18:6c:e5:
0a:e1:bc:29:61:6f:71:a7:4c:25:10:f0:e6:6a:76:ab:8a:c4:
93:e1:c3:33:32:61:04:56:6a:d6:a2:8c:7d:5e:86:c9:dc:86:
7f:db:81:d2:0a:9b:56:9f:9b:29:82:56:3e:eb:98:7d:fc:2f:
7f:7a:f0:2b:1b:1e:5e:02:1b:ce:99:08:e1:dd:20:77:c4:17:
3e:42:ac:00:fd:57:2d:68:fc:c7:b7:d2:18:63:74:0d:84:7a:
4e:6b:cb:24:4f:56:5a:9a:7e:91:17:55:45:84:b3:2f:1b:59:
15:be:ec:c1:ef:19:4a:4b:1d:54:02:c7:21:5d:a0:2f:7f:25:
0c:c0:9a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org