Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3230203d3e20323632343632.roa
File: 3137372e3130352e3134342e302f32302d3230203d3e20323632343632.roa (raw, json)
Hash identifier: lqxHNfZICEh+jQ2bCLWOqkaJR/vr/ajSg9rpqYC0C/I=
Subject key identifier: 17:4C:7B:CD:87:3B:46:35:CC:0F:E2:86:E4:31:D6:90:9E:A9:88:34
Certificate issuer: /CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Certificate serial: 2A2ED2E998E48A3F6F73B942E35070A03EC8C994
Authority key identifier: 2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3230203d3e20323632343632.roa
Signing time: Wed 27 Sep 2023 23:52:40 +0000
ROA not before: Wed 27 Sep 2023 23:47:40 +0000
ROA not after: Wed 25 Sep 2024 23:52:40 +0000
asID: 262462
IP address blocks: 177.105.144.0/20 maxlen: 20
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:2e:d2:e9:98:e4:8a:3f:6f:73:b9:42:e3:50:70:a0:3e:c8:c9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D
Validity
Not Before: Sep 27 23:47:40 2023 GMT
Not After : Sep 25 23:52:40 2024 GMT
Subject: CN=174C7BCD873B4635CC0FE286E431D6909EA98834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7d:a1:d6:08:ad:2a:16:70:c7:38:65:e4:06:
c5:45:a0:94:f4:ac:30:84:13:3f:7d:76:db:3b:67:
b8:d7:15:42:bd:01:59:4e:91:96:7e:10:f9:36:3d:
9e:fa:11:30:58:60:d2:76:76:41:af:0f:07:fe:26:
6e:3a:05:8c:9d:ab:86:0d:c3:ed:de:e0:fa:3f:0a:
53:c7:08:c9:95:73:ef:dc:53:24:3d:8a:62:0d:ae:
99:c3:b6:54:3e:c2:3e:0c:4c:29:db:af:01:a5:f6:
c6:e0:00:68:63:ac:82:75:b8:e1:8e:70:f2:4d:81:
87:1f:6c:75:b9:a8:54:a3:c3:88:4d:75:8a:67:1e:
0b:91:c2:76:3e:be:8f:cb:c2:b7:33:d5:2f:32:d7:
89:d7:ab:64:33:0d:e7:3e:07:b1:50:8a:f5:43:6a:
5a:1f:c4:33:63:f9:f8:02:f6:04:4a:4e:c5:02:30:
b1:c7:0d:2e:d4:af:75:71:c7:e3:1a:94:84:ee:df:
60:1b:4a:42:21:74:17:1c:13:d9:57:9e:9a:e6:77:
52:09:0b:ae:27:17:ca:f4:fd:ec:30:8f:82:5a:4f:
05:cb:f5:3a:31:c1:bc:53:d2:f9:be:74:1b:a7:11:
73:17:fa:b1:c1:83:94:8a:bd:a2:9f:7d:95:b8:90:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:4C:7B:CD:87:3B:46:35:CC:0F:E2:86:E4:31:D6:90:9E:A9:88:34
X509v3 Authority Key Identifier:
keyid:2D:FC:A0:40:3E:5C:A0:9E:3F:5A:F4:BA:63:E2:CD:FD:EB:A0:03:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DFCA0403E5CA09E3F5AF4BA63E2CDFDEBA0032D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZoHMsRDA2GMB4SURdri9coFnPBQBG5eihKYghFmbnU4/0/3137372e3130352e3134342e302f32302d3230203d3e20323632343632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.105.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a0:e1:84:20:68:21:fd:2b:fb:96:bf:87:83:b9:e7:d5:9e:d0:
42:0e:ee:87:03:20:51:d3:a7:33:4a:5c:86:2f:c0:e5:a2:17:
cf:22:5b:88:2b:9e:82:c1:ef:13:b1:bd:91:c7:48:5e:85:a3:
14:2c:68:6b:62:c6:9f:b1:27:74:5a:11:ed:4e:24:d4:81:38:
84:d2:21:09:2f:e9:93:37:4b:2f:32:07:21:29:26:b8:eb:2c:
0a:3b:4c:0b:3a:b6:d7:78:b7:de:43:48:4b:67:42:40:2c:9e:
ed:3e:1c:1e:fd:50:63:22:41:f7:6a:6c:49:c2:dc:15:99:64:
f8:53:d3:d6:f2:f3:43:ca:c3:83:dd:7f:1f:34:9a:a2:45:f1:
36:3e:52:49:a8:a5:ee:1c:3f:ca:37:a6:fb:37:93:e2:50:d4:
a9:18:2c:e4:68:fd:e3:08:a5:d6:b5:14:ef:80:9b:9f:36:62:
bd:8f:fb:af:b1:80:cb:07:15:7e:50:bb:4d:fe:21:80:87:26:
29:d8:a7:f8:ac:80:55:38:e6:0e:5b:fa:5d:91:12:84:36:38:
8b:6a:6b:2c:91:a2:9c:67:18:18:67:43:ae:8a:ae:36:5a:c5:
6a:f4:8b:7a:ab:cc:f5:07:1d:07:c2:05:d5:26:e4:2a:ad:83:
fb:f9:91:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 10 01:26:25 2024 by rpki-client on console-ams.rpki-client.org