Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
File: 3134332e3230322e36382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier: 0DpCiLsPfbmJfKUwCwySpOQfSDQq+bn4xObcF2LYo5s=
Subject key identifier: 93:76:9C:E3:A5:7C:C2:7F:4B:26:9A:D3:13:51:EB:D6:C2:6E:6D:60
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 0B521B2A3F741A021F39737BAD807811C2EB6040
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
Signing time: Thu 31 Oct 2024 17:26:14 +0000
ROA not before: Thu 31 Oct 2024 17:21:14 +0000
ROA not after: Thu 30 Oct 2025 17:26:14 +0000
asID: 28667
IP address blocks: 143.202.68.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:52:1b:2a:3f:74:1a:02:1f:39:73:7b:ad:80:78:11:c2:eb:60:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:21:14 2024 GMT
Not After : Oct 30 17:26:14 2025 GMT
Subject: CN=93769CE3A57CC27F4B269AD31351EBD6C26E6D60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:e6:34:70:29:b9:5b:cd:18:9f:ab:ac:dc:
a2:03:21:e4:94:1b:be:a5:7e:ed:bf:48:36:8c:c0:
91:9c:db:4a:5c:53:cd:7d:c3:6d:b5:45:8a:fb:9b:
71:f4:c8:5e:b4:6c:4a:ad:aa:51:2c:53:8b:bf:72:
00:bd:ab:36:84:04:6b:a6:02:78:e4:07:4c:b5:d8:
ab:02:c9:e9:0a:33:2c:93:23:98:e0:09:34:f6:43:
7c:40:53:36:51:ca:58:d1:c3:5d:22:32:cf:27:6e:
6e:e4:6b:98:94:4d:00:c1:68:ce:29:98:f3:ff:91:
4d:4d:b5:da:6c:2c:b8:22:f0:10:9c:08:bc:7c:c6:
98:42:3e:36:7e:3a:ab:1d:90:04:ba:e2:0a:be:ec:
c1:3b:2b:9b:33:ae:6e:78:7b:8a:09:0d:ee:d4:1f:
b0:92:2c:e8:4f:2c:c8:8d:91:80:a5:42:ac:77:8d:
a6:3a:74:d2:cc:54:9c:50:be:a7:4e:1a:de:c8:4b:
ca:b2:aa:84:26:10:e6:9e:0d:be:87:a2:1c:91:fa:
c1:0f:8a:87:d3:dd:d0:93:6d:01:d5:b3:9c:70:ab:
4b:f6:de:57:34:fb:d1:ab:46:c1:35:f6:74:5e:fb:
e6:e1:2d:30:df:83:0d:79:02:be:48:8d:87:2b:00:
53:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:76:9C:E3:A5:7C:C2:7F:4B:26:9A:D3:13:51:EB:D6:C2:6E:6D:60
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3134332e3230322e36382e302f32322d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.202.68.0/22
Signature Algorithm: sha256WithRSAEncryption
35:c5:8c:19:1e:69:ca:09:95:f1:ad:5f:83:97:e2:55:03:56:
ea:ad:3d:98:87:a3:bd:5d:e0:34:ce:d9:c4:65:96:62:13:91:
f8:f8:52:4b:bd:68:b2:02:d0:4b:8a:ef:6c:5b:20:71:ca:66:
da:bc:96:09:c5:26:84:7d:58:c6:95:f9:b2:1d:30:21:5c:32:
f9:81:3f:2d:6b:d0:77:50:bd:3a:2e:29:52:b7:32:7e:e7:1e:
dd:23:9b:1b:c9:13:87:d6:12:3e:e2:9a:18:08:05:39:be:9c:
d1:3f:1e:d3:83:5d:fc:bf:96:6d:00:c2:13:49:bc:0c:a9:9d:
73:1f:84:97:d9:a3:60:a5:89:d7:37:25:66:36:77:50:20:cb:
0d:8d:73:b7:4f:7a:38:c8:63:62:c1:64:56:35:b5:8c:68:18:
f2:39:c7:a5:e5:d5:11:3e:d7:ec:f8:1d:84:47:ab:5e:5d:1a:
dd:b6:43:f6:85:da:71:10:fa:89:08:7f:7d:86:b6:31:4f:2a:
08:27:2c:9e:40:f2:15:30:24:ff:d5:a7:32:3d:23:1c:2c:59:
9b:ba:58:db:73:71:ce:f7:d1:3a:41:49:85:91:73:4f:77:6b:
e0:a8:b9:01:91:08:2f:53:a5:ec:8e:a2:2f:0f:42:09:af:58:
48:d6:c7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org