Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
File: 3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa (raw, json)
Hash identifier: X9ikvd72mgYVXg8Z6N0I1+yfDg4LG3qsTBZ8I+rzJ6s=
Subject key identifier: CA:2C:32:44:CA:2A:14:78:6F:2B:0C:27:E1:71:6A:3D:93:8F:7F:2A
Certificate issuer: /CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Certificate serial: 3E8D4F9869913FBA65D339F0DF919AAD1C35BC1F
Authority key identifier: 64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
Signing time: Thu 02 May 2024 16:26:39 +0000
ROA not before: Thu 02 May 2024 16:21:39 +0000
ROA not after: Thu 01 May 2025 16:26:39 +0000
asID: 265393
IP address blocks: 168.194.164.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:8d:4f:98:69:91:3f:ba:65:d3:39:f0:df:91:9a:ad:1c:35:bc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=647DC3046F93D7F36A7F25E5379F9A5E8E542DAE
Validity
Not Before: May 2 16:21:39 2024 GMT
Not After : May 1 16:26:39 2025 GMT
Subject: CN=CA2C3244CA2A14786F2B0C27E1716A3D938F7F2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bb:a0:c2:58:26:9e:e2:b3:b2:92:07:f8:a1:
0a:a1:35:bf:0f:5f:1f:52:06:21:1c:e2:3d:f8:aa:
d8:89:d5:f4:57:9e:5c:9c:9e:1a:d2:85:ab:cd:c9:
b7:08:30:fe:b8:c7:eb:a2:78:9b:a8:40:df:6f:a6:
cd:46:d7:71:2d:14:9b:8a:fa:22:66:2e:82:e5:8f:
0e:79:63:23:02:55:5a:57:57:dd:4a:03:ab:80:79:
99:39:05:d7:dc:df:d7:81:68:34:42:d7:69:5d:ac:
86:df:ef:a6:20:19:a0:29:ed:d2:d9:99:d1:a6:8c:
12:ab:27:19:67:f2:ed:68:1a:a5:be:6c:12:a3:f0:
1b:0a:d7:64:eb:00:4d:e9:49:e6:cc:47:f2:04:f3:
7b:fa:f0:c3:5a:a9:00:2e:67:10:09:83:fa:e1:4e:
55:c1:66:20:3a:9a:2c:06:55:c9:c8:9b:6f:20:a6:
89:ae:08:8c:4d:94:37:b5:ec:5f:a4:59:7f:38:12:
5e:43:b1:f3:e4:7d:24:a1:8e:cd:3f:92:49:02:8d:
a6:4f:93:1f:ba:e6:b4:d1:18:17:c6:19:2d:cf:af:
b5:87:1c:3d:66:76:c0:15:61:e0:30:b1:53:e9:6b:
39:8e:ab:16:5a:25:0f:43:d3:1c:f8:f8:5b:3c:95:
05:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:32:44:CA:2A:14:78:6F:2B:0C:27:E1:71:6A:3D:93:8F:7F:2A
X509v3 Authority Key Identifier:
keyid:64:7D:C3:04:6F:93:D7:F3:6A:7F:25:E5:37:9F:9A:5E:8E:54:2D:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/647DC3046F93D7F36A7F25E5379F9A5E8E542DAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/1/3136382e3139342e3136342e302f32342d3234203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.164.0/24
Signature Algorithm: sha256WithRSAEncryption
42:c6:a4:88:c3:5e:2e:52:bd:fd:91:0d:4c:3c:8c:75:80:8a:
a2:ff:59:ee:d2:1d:82:a9:b5:ea:c3:04:7e:f1:84:f1:8d:a6:
ff:cf:7a:f2:3a:ad:02:71:da:82:31:7e:a8:8f:f8:4e:b3:98:
21:e9:9e:fc:ed:91:31:1e:b2:67:b8:e6:77:5c:df:25:02:25:
9c:d7:7e:c3:3b:9e:13:33:45:c9:ab:93:bb:19:f7:38:fd:1d:
ef:1a:7c:fa:6b:82:60:48:d9:e2:08:c2:a7:35:4e:6d:91:76:
03:b4:f4:f0:67:fb:02:66:07:3f:ef:ec:8d:e5:dd:33:c9:a1:
56:b5:d7:98:af:d6:aa:e4:87:a6:28:a5:b8:e1:7d:13:28:9a:
32:c5:f9:05:42:c2:3a:30:1b:2f:91:da:c0:1a:2f:c0:4a:66:
47:13:07:b7:de:c7:dc:7e:f7:ce:f7:cf:2c:25:6f:92:96:06:
7a:c9:6e:ba:31:8e:fd:6a:5a:97:37:5e:72:97:e7:83:21:91:
25:81:90:17:92:b5:55:ca:de:31:51:71:d1:fb:48:de:25:60:
f2:4f:67:05:3f:e2:89:f9:83:71:52:6d:53:02:ee:b3:56:22:
a5:58:a8:3e:05:ce:de:36:de:da:c2:3a:4f:9e:8f:30:7d:ac:
bf:31:6d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 22:39:17 2024 by rpki-client on console-ams.rpki-client.org