Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
File: 3230302e39342e3234302e302f32322d3232203d3e203238323730.roa (raw, json)
Hash identifier: ddbh1o5giJ3ESUzGCXYPH02k7L5ciesTTzvS0Z9zAi0=
Subject key identifier: 5E:85:09:E7:C2:E8:8E:7D:1F:04:7D:FB:4E:56:22:DE:25:F5:A0:E1
Certificate issuer: /CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Certificate serial: 7D44024EDD883A2FA1B5C14C056A8C13BCB95922
Authority key identifier: 7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
Signing time: Mon 14 Oct 2024 01:49:48 +0000
ROA not before: Mon 14 Oct 2024 01:44:48 +0000
ROA not after: Mon 13 Oct 2025 01:49:48 +0000
asID: 28270
IP address blocks: 200.94.240.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:44:02:4e:dd:88:3a:2f:a1:b5:c1:4c:05:6a:8c:13:bc:b9:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CAD7FBEB62D41BEDEB82049A836E467615886FC
Validity
Not Before: Oct 14 01:44:48 2024 GMT
Not After : Oct 13 01:49:48 2025 GMT
Subject: CN=5E8509E7C2E88E7D1F047DFB4E5622DE25F5A0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5b:5e:4c:a5:a6:e3:ce:bd:94:28:6e:5d:64:
b4:8b:ca:e8:93:ce:3d:aa:ce:1c:43:3f:16:5c:d7:
d3:f0:29:e9:94:be:2f:35:c4:e8:8d:69:3b:0f:1c:
f1:d4:5e:4b:c2:e2:7a:94:dd:9a:05:c2:b9:d8:2b:
0d:45:65:6f:d6:2c:4f:74:06:4c:a7:9a:dd:35:34:
96:d8:6f:04:05:ff:23:4e:c0:cd:ad:29:1a:6b:19:
54:28:f7:cb:bd:b1:d4:59:e6:c5:b5:65:d0:d2:da:
43:7b:ba:e5:98:be:45:b5:10:0b:0d:28:c6:87:a8:
2d:4a:07:81:89:b2:c8:8e:6f:ed:ca:2a:cd:e2:41:
cf:17:16:57:a0:f1:89:78:80:de:0f:db:d1:14:e9:
67:89:90:c3:8a:34:4a:cb:1e:a0:81:fc:98:c6:71:
4b:01:e8:12:d8:5b:6e:de:1e:b9:0d:96:8c:9a:0a:
12:0d:d5:68:07:bb:b1:7b:1a:5f:83:f2:0b:45:6b:
88:88:e9:ff:fe:34:c3:66:d1:e2:82:41:4b:c5:e4:
0c:bd:29:f1:17:d2:1d:04:d4:5c:6d:de:27:c2:47:
96:ed:79:3c:9e:98:e5:e1:30:ed:0c:97:15:7e:68:
99:a6:9c:35:89:09:7c:42:65:af:30:75:fc:c1:55:
56:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:85:09:E7:C2:E8:8E:7D:1F:04:7D:FB:4E:56:22:DE:25:F5:A0:E1
X509v3 Authority Key Identifier:
keyid:7C:AD:7F:BE:B6:2D:41:BE:DE:B8:20:49:A8:36:E4:67:61:58:86:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/7CAD7FBEB62D41BEDEB82049A836E467615886FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CAD7FBEB62D41BEDEB82049A836E467615886FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/0/3230302e39342e3234302e302f32322d3232203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.94.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:5f:54:a5:d3:5c:17:2d:9a:9a:30:ce:7e:04:13:62:01:85:
a8:90:3f:9c:78:68:4c:f4:75:ba:3b:20:2d:4c:75:c0:e7:3a:
85:a0:0c:8e:d8:4b:19:17:e1:17:da:33:16:db:5a:56:f0:97:
98:58:7f:d6:b7:bf:48:cf:74:37:a6:d9:49:2c:d9:e0:b1:cf:
69:40:9a:c6:45:b8:7d:6a:0c:f3:e2:9c:91:87:1f:d9:64:ab:
61:3b:9a:a9:d3:2c:2f:3b:f8:94:5e:13:fc:85:c5:b8:54:9b:
75:c8:64:ce:60:3d:21:d8:81:1e:5a:63:ce:4b:1f:7d:00:1d:
e4:42:3b:e5:20:d2:05:13:4b:c2:8b:81:58:fb:5b:20:6d:63:
94:cf:38:4e:af:ac:19:1f:3b:18:56:03:74:f4:35:a0:54:7c:
30:f5:96:07:a3:57:c5:93:57:12:b1:0d:c5:d7:d6:14:64:5a:
d5:13:b1:8a:98:a2:97:41:0e:9b:86:23:24:ea:3b:61:90:79:
f1:5d:ba:e0:d4:f5:c5:47:75:b6:64:13:cf:0e:89:b3:2b:ed:
02:15:7d:fb:68:93:fd:05:20:d2:b0:5a:ac:fb:6f:9a:ee:9d:
d5:95:e6:a1:ff:81:98:5c:41:40:a0:f3:25:67:56:a4:e0:b7:
cd:a6:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org