Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
File: 3137372e382e3230382e302f32312d3234203d3e203238363637.roa (raw, json)
Hash identifier: zDezL7CI4s7Bf7k4yNzB8H48Wq//wROWi2pOBBWMnx8=
Subject key identifier: 6B:D9:EE:1C:5B:41:C4:95:37:D8:A0:2B:0A:46:E2:84:01:D9:25:0D
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 09464A41486DF451E3063F731A356B783507FCE8
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
Signing time: Thu 31 Oct 2024 17:26:16 +0000
ROA not before: Thu 31 Oct 2024 17:21:16 +0000
ROA not after: Thu 30 Oct 2025 17:26:16 +0000
asID: 28667
IP address blocks: 177.8.208.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:46:4a:41:48:6d:f4:51:e3:06:3f:73:1a:35:6b:78:35:07:fc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:21:16 2024 GMT
Not After : Oct 30 17:26:16 2025 GMT
Subject: CN=6BD9EE1C5B41C49537D8A02B0A46E28401D9250D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:ae:48:2f:77:fa:a9:65:2f:6e:6a:b4:75:
4e:d6:c0:55:18:c3:53:06:ec:b4:2d:d7:21:27:7b:
c3:cd:81:d9:05:45:3d:fa:d5:70:c8:17:1b:46:04:
f7:ca:f9:e6:02:5d:7c:9c:a1:6d:04:eb:8a:4f:ba:
4c:e8:f5:eb:ea:ec:76:bf:0e:c2:35:71:b9:54:c6:
a3:b2:15:86:79:e1:f0:f6:5c:f0:7a:94:b0:f9:ce:
f2:8d:c2:3c:c9:fb:94:af:4b:42:ac:fe:19:1d:5f:
42:2f:a8:a5:c6:bd:8c:d1:06:4a:86:1f:7a:2e:51:
7e:db:23:f2:e4:95:85:c3:51:b8:a3:42:87:c6:53:
06:fd:25:cd:f2:d4:4b:65:90:a0:c1:ca:cc:54:2b:
5b:8c:58:c4:43:8c:94:fa:d1:39:5f:89:71:fa:36:
83:4a:2f:9e:35:5e:24:40:f9:c5:e2:a9:af:5c:67:
49:38:76:a8:9b:2e:13:6f:c7:0c:4c:2e:48:c4:c5:
e2:6e:1a:13:7f:fe:ac:f2:4a:07:66:dc:14:4b:c1:
fa:d0:dc:3f:70:49:22:cd:30:f0:20:f0:c6:a0:32:
fa:4d:83:4a:89:d8:79:f9:20:69:eb:9c:a8:f9:98:
94:9c:7c:fd:11:32:bd:6b:85:fa:e8:ba:61:a4:c8:
1d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D9:EE:1C:5B:41:C4:95:37:D8:A0:2B:0A:46:E2:84:01:D9:25:0D
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3137372e382e3230382e302f32312d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.8.208.0/21
Signature Algorithm: sha256WithRSAEncryption
94:bb:70:6e:08:9e:91:6f:40:f5:74:24:c3:a0:46:88:f8:91:
7a:31:a9:9f:e7:e8:dd:81:9d:85:93:f0:45:69:cf:a6:68:eb:
47:91:c6:46:7f:c6:f0:cc:89:17:9a:57:31:be:d8:5e:ca:90:
c4:38:20:82:58:3e:89:0a:cd:a7:3d:d7:d3:9d:4f:6f:cc:19:
8b:6d:02:ec:8d:8b:33:5e:64:ae:95:0f:54:b0:0b:53:e1:b8:
52:e9:30:35:f9:e9:4d:15:42:c4:92:99:5a:56:2e:06:fa:1a:
10:35:b6:46:51:02:5f:ab:2c:f2:f4:0c:8a:c8:ec:dd:32:92:
ce:32:6d:a6:e6:e4:08:e9:22:35:05:f2:97:99:d6:fd:5b:75:
27:51:ce:aa:0b:17:0e:dd:09:92:16:22:63:b3:30:bf:df:76:
2a:a3:39:f4:d7:5a:16:86:29:dd:8d:7c:50:a6:50:94:0e:61:
39:0a:33:83:a5:37:b6:5a:20:64:c2:99:d9:d1:1d:f7:4a:56:
0d:10:f4:d1:2a:8e:6e:86:c5:04:9d:fb:90:7d:5f:55:0e:96:
01:69:26:0d:c8:b7:9d:1e:f5:f7:46:d5:3d:d3:5d:e4:45:56:
a4:78:bb:2a:49:20:79:ca:85:44:80:92:d7:9c:dd:a0:9a:fe:
87:b4:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org