Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137372e382e302e302f32302d3234203d3e203238333630.roa
File: 3137372e382e302e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier: 0DEJ6hlqGYjjjOBi6eVzHLTwkPZlfWPivw1fGN+P4dI=
Subject key identifier: 23:27:90:B8:CD:B3:18:D8:FE:85:03:0E:35:4F:D8:67:A0:A7:76:6F
Certificate issuer: /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial: 3A7CB90F164FA94AD15386BD74FE2EC2B49FFC25
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137372e382e302e302f32302d3234203d3e203238333630.roa
Signing time: Sat 06 Apr 2024 02:47:05 +0000
ROA not before: Sat 06 Apr 2024 02:42:05 +0000
ROA not after: Sat 05 Apr 2025 02:47:05 +0000
asID: 28360
IP address blocks: 177.8.0.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:7c:b9:0f:16:4f:a9:4a:d1:53:86:bd:74:fe:2e:c2:b4:9f:fc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
Validity
Not Before: Apr 6 02:42:05 2024 GMT
Not After : Apr 5 02:47:05 2025 GMT
Subject: CN=232790B8CDB318D8FE85030E354FD867A0A7766F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:4e:ee:f7:53:8e:d6:da:ec:76:ed:eb:0b:
ca:77:9e:74:29:52:11:15:f7:bc:dd:15:f4:69:cd:
84:71:82:cd:e0:33:2d:05:9f:16:ca:f0:27:7d:e2:
de:a1:ca:32:67:f8:54:be:ba:92:31:23:92:f5:33:
98:2d:9b:63:22:e5:74:bd:9a:ae:57:e5:4a:cb:a8:
b8:2e:b9:73:b8:0d:d2:81:93:f3:ac:5d:c9:f2:03:
f6:83:10:f7:62:19:63:af:a7:53:94:5e:52:30:a2:
7f:70:e7:ef:6a:72:90:42:7e:db:17:64:da:09:e1:
8a:16:e5:4c:43:d3:20:9b:0a:80:44:2c:46:56:02:
dd:13:ab:68:19:ef:02:8b:23:b7:58:f0:89:84:88:
c2:3b:66:d0:cd:5f:71:a9:38:a9:1d:25:30:93:7f:
da:fa:83:ef:f7:5f:3d:26:9f:5f:d0:d7:72:aa:46:
ff:b4:eb:eb:6d:0d:3a:f2:9c:62:36:fb:8b:9a:70:
b7:05:46:c0:0b:c6:2e:92:ff:67:eb:9f:a7:f9:12:
e3:6f:b4:a2:a2:04:bc:ea:08:1d:67:75:06:ed:78:
88:da:0d:d8:54:98:30:45:81:fd:19:24:4c:84:e0:
6b:01:d3:63:ff:a9:78:0c:60:0f:95:a4:68:7f:d8:
ed:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:27:90:B8:CD:B3:18:D8:FE:85:03:0E:35:4F:D8:67:A0:A7:76:6F
X509v3 Authority Key Identifier:
keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3137372e382e302e302f32302d3234203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.0.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:b4:91:20:e2:c9:7f:45:14:a3:2f:0e:52:96:59:fd:ef:27:
f7:0f:a3:52:e5:c2:64:0d:59:5a:96:28:7c:97:a9:c1:42:4c:
2d:cb:13:19:18:2c:63:6f:b3:c3:cc:a0:fa:4f:f9:75:49:7b:
b5:ac:41:20:58:a3:47:1f:fb:22:b4:39:7c:60:a9:2a:b9:00:
8b:be:2a:39:f3:72:e7:b7:fb:8c:f5:70:5a:08:7e:32:19:42:
2f:98:a9:a6:ce:1e:8e:11:7a:61:84:f6:e8:c2:ee:f8:30:e9:
f0:14:d9:49:94:52:16:e8:0a:05:64:45:18:52:63:09:5a:0c:
ee:61:69:f4:92:13:eb:c1:f4:e5:b6:19:39:01:e5:05:b7:09:
e5:06:7d:5c:25:49:1f:e4:6b:0d:92:5b:6f:d5:d0:da:e0:22:
6c:26:ff:9e:cf:81:5c:ff:ca:72:2d:a6:e4:af:87:ca:51:01:
67:7b:1c:57:74:29:0b:10:f3:a9:3e:63:cc:03:b8:6d:bc:53:
28:90:88:bf:a2:13:3e:fd:b8:ff:75:19:bc:f3:74:b5:39:80:
e4:12:f0:52:a8:99:ed:8b:35:a5:72:dd:5a:e9:29:66:2a:dd:
44:a3:f7:c5:99:8f:c3:b5:3c:16:3c:d3:6b:b3:b0:55:59:da:
58:a5:e1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 15:30:52 2024 by rpki-client on console-fra.rpki-client.org