Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
File: 3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa (raw, json)
Hash identifier: B8BCRCsbRG4yyN5mdLp5fYv9JgfyxzmXa4AtNR4Lnms=
Subject key identifier: 48:65:72:CD:C2:9F:9C:63:82:D2:63:9C:30:E2:1E:9F:09:03:B6:A6
Certificate issuer: /CN=D84003289183B3DF8458686396FD00BFCE74A0DA
Certificate serial: 41444BC7BEF62DFFAB134A5910540419FD248C90
Authority key identifier: D8:40:03:28:91:83:B3:DF:84:58:68:63:96:FD:00:BF:CE:74:A0:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D84003289183B3DF8458686396FD00BFCE74A0DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
Signing time: Tue 29 Oct 2024 12:24:06 +0000
ROA not before: Tue 29 Oct 2024 12:19:06 +0000
ROA not after: Tue 28 Oct 2025 12:24:06 +0000
asID: 52898
IP address blocks: 168.227.156.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:44:4b:c7:be:f6:2d:ff:ab:13:4a:59:10:54:04:19:fd:24:8c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D84003289183B3DF8458686396FD00BFCE74A0DA
Validity
Not Before: Oct 29 12:19:06 2024 GMT
Not After : Oct 28 12:24:06 2025 GMT
Subject: CN=486572CDC29F9C6382D2639C30E21E9F0903B6A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d7:b7:ec:ac:96:c7:b8:b5:a4:7c:a1:cb:0a:
ad:c3:61:3d:64:d9:4a:7e:2e:cf:32:5c:07:52:97:
f6:9e:c7:1b:af:89:d7:96:21:c9:ac:1a:aa:63:bb:
2a:55:b7:b4:9c:c3:d8:5b:8f:c6:00:d1:cc:38:82:
49:9a:d2:fc:34:14:0b:3a:8f:e8:63:1e:54:3e:9c:
fb:44:6a:23:da:f7:4d:c4:89:3a:d5:cd:e4:7d:92:
41:8e:38:c4:7a:e4:06:bf:a4:59:89:e4:9c:bd:b8:
4a:4d:a5:66:ca:6c:ca:34:1e:17:dc:59:54:cd:52:
f3:06:c8:c9:62:08:61:9f:2d:c2:f7:ba:b6:d4:b8:
75:25:d7:6f:99:f0:f8:7a:de:34:06:ce:f4:2d:28:
fc:37:60:10:65:29:6c:29:9f:2c:cd:91:02:b0:f5:
ee:ad:3e:d6:00:3c:7a:f2:51:57:ba:1f:fd:e7:e0:
8c:15:4f:9a:60:a2:cf:46:a0:88:33:36:72:90:9a:
9a:65:e6:0f:d4:75:d0:f9:b0:e3:58:1e:9a:d5:3a:
f2:72:15:9e:fd:d9:00:9c:b4:a0:1f:ed:5d:87:1b:
83:76:dc:cb:06:0d:80:b2:f0:9b:6e:99:5f:ec:68:
61:a9:af:45:99:7c:2d:82:06:07:d4:0f:fa:0d:97:
7c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:65:72:CD:C2:9F:9C:63:82:D2:63:9C:30:E2:1E:9F:09:03:B6:A6
X509v3 Authority Key Identifier:
keyid:D8:40:03:28:91:83:B3:DF:84:58:68:63:96:FD:00:BF:CE:74:A0:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/D84003289183B3DF8458686396FD00BFCE74A0DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D84003289183B3DF8458686396FD00BFCE74A0DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/0/3136382e3232372e3135362e302f32322d3234203d3e203532383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.227.156.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:05:8e:aa:60:49:9c:f9:9f:c7:35:c9:0c:42:26:1e:fa:9d:
14:f3:92:c0:84:fe:7b:81:77:ae:40:bb:33:54:d6:26:1e:be:
05:2e:bb:38:2e:5d:c6:b5:ce:be:33:76:7d:e1:58:1e:31:79:
d4:44:1c:3f:65:79:16:1c:5f:06:0c:8e:b3:71:e6:8d:25:74:
75:d2:c3:f9:fe:cb:b3:cf:11:02:9c:ac:94:17:1c:d8:d1:bf:
a5:14:27:8a:cb:7c:e3:93:03:13:2f:b2:04:d3:2b:35:bc:5e:
eb:5c:4d:24:84:ff:0a:78:e5:1b:99:82:fb:9b:71:5e:46:0b:
cb:9a:41:e5:3b:94:2e:bc:05:e9:1a:ed:70:e7:70:4e:3e:c7:
69:2c:35:ba:cf:f2:43:f3:1f:3e:3f:89:78:13:24:80:bb:ea:
0e:25:e4:74:28:fd:1b:fb:b9:1d:2d:23:f0:29:b5:d4:62:e5:
1c:b6:37:f2:18:59:c1:37:c2:f9:18:91:29:07:74:6d:c0:2b:
13:d5:91:5d:95:b8:a8:8d:ba:e5:6a:03:f1:32:08:c7:4e:2d:
70:bc:d0:89:98:0a:93:23:ba:76:6f:d9:ec:86:e5:cc:bb:08:
56:f7:f8:9b:75:0f:72:83:e2:ae:c4:07:2c:63:8f:e2:0b:7b:
b4:c8:78:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 11:02:21 2024 by rpki-client on console-ams.rpki-client.org