Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
File: 3137372e3130372e302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: S9T8kUBZVcLnFrqBkaDteCx5rA7Zs4GqI92CVIVuYq0=
Subject key identifier: DE:CE:D1:4A:24:0B:F5:65:DC:39:FB:DE:19:DA:45:26:C4:33:FC:1C
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 3265E37719DEF1A578B9BAB5A05CFC73A9380B94
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
Signing time: Thu 31 Oct 2024 17:26:38 +0000
ROA not before: Thu 31 Oct 2024 17:21:38 +0000
ROA not after: Thu 30 Oct 2025 17:26:38 +0000
asID: 28667
IP address blocks: 177.107.0.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:65:e3:77:19:de:f1:a5:78:b9:ba:b5:a0:5c:fc:73:a9:38:0b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:21:38 2024 GMT
Not After : Oct 30 17:26:38 2025 GMT
Subject: CN=DECED14A240BF565DC39FBDE19DA4526C433FC1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1a:16:da:ad:be:e9:71:d7:f7:4f:7e:da:82:
c7:62:0d:07:8c:ac:89:ec:40:81:51:57:ca:b2:2c:
18:d9:33:65:31:4f:ca:69:ee:d9:6b:1a:a7:5c:d0:
c3:4f:13:0b:f2:09:0a:6c:81:27:d9:e0:0c:ed:9d:
6e:d7:f8:4d:c4:41:b7:74:52:8b:34:19:d6:99:dd:
d4:4e:29:06:9c:65:e9:82:a4:c3:38:c8:10:9f:30:
3b:d7:1a:e8:96:d1:73:b1:47:6d:5e:5d:90:02:76:
56:de:66:0f:66:88:d4:b6:88:c1:8a:d0:e9:36:ed:
d6:a8:4a:c2:47:bc:81:08:0f:65:10:b0:dd:e2:a5:
07:51:f1:a9:6c:c0:a3:4e:66:18:97:97:db:35:a4:
2b:e3:61:ec:64:cb:a9:52:c2:6a:f2:16:e0:4a:29:
6f:a3:19:be:1a:ab:dd:d1:c8:50:d2:e3:8b:ac:33:
1e:2b:30:e8:5c:55:9c:71:98:fd:29:57:52:49:e7:
d4:95:f1:02:84:28:73:5f:7d:f6:eb:bb:a3:f9:7d:
72:ec:57:6f:c8:55:a7:2a:8c:00:d4:bc:d8:e0:12:
5b:b5:0d:a4:fb:7a:b1:0d:7a:2c:7e:ee:84:5c:04:
2b:b6:76:a7:46:65:20:cb:e6:fc:ce:32:cb:e0:5e:
70:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CE:D1:4A:24:0B:F5:65:DC:39:FB:DE:19:DA:45:26:C4:33:FC:1C
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.107.0.0/20
Signature Algorithm: sha256WithRSAEncryption
1e:5d:7b:11:fd:f2:5e:aa:45:0a:04:8a:03:40:89:8d:8b:ee:
cf:b0:a3:3e:ba:b3:23:ac:36:66:18:b5:11:85:31:e9:e7:b4:
db:07:c3:3d:a4:fe:09:3a:54:1d:3f:41:1d:36:ab:3c:5a:59:
0d:d0:c8:3e:24:15:34:84:1a:ab:d2:70:61:bf:1e:32:35:15:
27:8c:08:3b:89:9a:e1:87:f7:66:49:7e:ce:8a:79:72:9a:cf:
89:28:96:9f:40:f4:52:48:36:61:57:fc:5c:df:97:08:04:96:
3d:29:3e:f8:a9:3d:99:cf:d4:76:cf:21:ac:59:2a:8a:af:d1:
f8:08:6d:fb:dd:df:cd:01:d5:1a:f0:fd:43:15:d3:c2:aa:0d:
ab:84:a8:3c:2e:fb:7a:27:0b:6a:3c:9c:3a:10:7e:bb:8e:e0:
c3:c6:b1:7f:20:22:69:02:f9:d7:f9:76:bd:b6:6f:95:e6:c1:
b9:56:d9:f1:df:74:a2:29:7c:d7:6e:a5:54:fa:34:fc:24:52:
b7:38:35:08:d2:1a:0f:9c:0c:82:9b:97:1b:cc:c1:89:a6:57:
0b:b2:ec:2f:af:e1:b0:db:b0:ff:85:3a:70:d6:db:23:61:57:
f8:07:e7:fa:1f:0a:97:97:9c:0d:8b:42:e8:1f:41:ed:5e:3b:
00:11:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org