Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
File: 3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier: UT4BNDmK3EtRKPC99IcKbgnKZ8xMmu7T4eteDUJuySI=
Subject key identifier: 9D:02:55:6E:DC:3A:8B:AC:EF:1F:E1:BE:FF:30:DD:56:5C:1B:AC:20
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 3942D5D6F713E4A55D5B0D2DD538B0D735EBC9E4
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
Signing time: Thu 31 Oct 2024 17:26:17 +0000
ROA not before: Thu 31 Oct 2024 17:21:17 +0000
ROA not after: Thu 30 Oct 2025 17:26:17 +0000
asID: 28667
IP address blocks: 168.196.108.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:42:d5:d6:f7:13:e4:a5:5d:5b:0d:2d:d5:38:b0:d7:35:eb:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:21:17 2024 GMT
Not After : Oct 30 17:26:17 2025 GMT
Subject: CN=9D02556EDC3A8BACEF1FE1BEFF30DD565C1BAC20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:8e:79:7f:bb:f0:fa:c7:70:4f:37:17:00:
1a:00:a9:ed:2b:9e:e4:d1:db:63:42:fa:cd:38:5b:
53:63:49:c2:cf:94:84:39:d6:60:33:17:15:f5:2e:
7a:08:a2:1d:0c:32:36:4c:b7:d8:e5:33:e3:06:ec:
c3:84:4a:a4:aa:97:78:4d:d3:24:c0:e4:be:e9:2e:
1a:78:54:8e:92:1d:37:48:1c:0d:1a:4a:eb:2b:f8:
bc:97:62:9f:f9:9b:66:82:8a:17:3c:ce:4f:a3:8a:
be:b6:04:97:3e:5b:29:c1:51:4e:94:9f:71:6e:53:
cb:7a:85:8d:06:53:29:0c:4e:ca:99:39:1f:4b:44:
67:26:17:9e:47:30:36:3d:b0:95:38:0c:f8:12:19:
3b:9a:20:74:ce:9a:48:16:2a:0c:48:ce:7e:52:e0:
f2:11:a8:45:64:dc:a3:7c:30:7d:75:c0:7d:be:c9:
ce:c2:71:a0:89:71:65:3d:a5:b3:d4:a4:59:a0:94:
3b:99:d9:0b:28:42:05:7e:a6:ff:67:f2:a7:9d:40:
67:57:2a:5f:e1:a2:50:80:8e:76:6a:0e:23:ef:3e:
52:ad:38:0c:02:1e:6c:73:f5:ae:e6:9d:88:9c:2f:
36:41:66:ed:12:3a:5f:df:91:9c:6d:37:02:66:a2:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:02:55:6E:DC:3A:8B:AC:EF:1F:E1:BE:FF:30:DD:56:5C:1B:AC:20
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3136382e3139362e3130382e302f32322d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.196.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:05:64:71:9a:0c:35:46:7b:5d:f6:02:ac:e3:5c:9a:62:1e:
67:7d:e2:2e:0a:a8:d2:e7:7e:14:b1:50:77:65:45:62:ce:c5:
87:b7:05:77:fd:2f:b2:3c:f1:fa:db:01:53:c7:3f:ea:ba:4a:
ba:fe:f1:31:89:d7:50:f4:8a:c3:25:d9:bc:9e:5f:60:26:6d:
53:15:23:ea:a8:f2:44:f4:23:68:d7:bc:65:f4:08:41:60:bf:
64:df:cf:09:69:82:cf:e2:15:6a:c9:f2:14:ad:38:5b:1c:a1:
c2:17:86:81:23:e3:db:2a:fa:7f:15:3f:a8:c4:36:69:30:84:
2c:08:6c:36:26:f8:f7:6e:f0:60:64:89:d1:42:32:da:ea:f0:
ee:92:d8:71:21:05:0b:74:af:31:dc:d5:13:af:1a:d2:95:3d:
21:e3:5a:19:22:25:f6:e3:8b:60:6d:c4:68:77:89:61:f1:fa:
b0:75:d8:fd:fd:dc:fa:1c:78:66:4c:97:ce:2d:36:ee:f8:d7:
cc:f8:75:51:e6:9a:aa:6f:ac:c7:83:75:dc:7e:ab:42:66:30:
c6:f6:f1:a7:1a:50:06:c4:c7:0b:f3:0d:fe:1e:3f:c1:94:55:
39:de:ab:6b:90:fb:f0:53:2c:4f:44:39:43:cc:e8:f0:86:97:
bf:97:64:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org