Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e39352e302e302f32302d3234203d3e203533303830.roa
File: 3138372e39352e302e302f32302d3234203d3e203533303830.roa (raw, json)
Hash identifier: Dr4CGoNSaEKPIVUyVsVLmPArsuCl2qOAtHWdZNKjrdI=
Subject key identifier: DA:E2:73:4D:14:54:15:A8:C7:DD:9D:F1:7A:17:2B:5B:32:CC:65:DC
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 322C70279C4633C5D38BF691F7CC52885FE77DC9
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e39352e302e302f32302d3234203d3e203533303830.roa
Signing time: Thu 31 Oct 2024 17:05:15 +0000
ROA not before: Thu 31 Oct 2024 17:00:15 +0000
ROA not after: Thu 30 Oct 2025 17:05:15 +0000
asID: 53080
IP address blocks: 187.95.0.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:2c:70:27:9c:46:33:c5:d3:8b:f6:91:f7:cc:52:88:5f:e7:7d:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:00:15 2024 GMT
Not After : Oct 30 17:05:15 2025 GMT
Subject: CN=DAE2734D145415A8C7DD9DF17A172B5B32CC65DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:00:b3:94:ad:2b:83:27:a9:06:e6:70:91:
fb:15:a8:d7:bd:d1:a7:23:dd:00:23:77:80:03:0f:
34:01:38:ed:2e:e6:d5:ec:af:1d:aa:ba:30:fb:f4:
db:19:df:f3:b3:6c:6b:e5:5a:2e:9f:ca:66:93:ba:
32:28:4c:6d:c4:5e:0e:a0:3b:96:68:10:f2:3b:04:
9f:b6:27:ee:84:db:ee:7f:16:94:69:09:b8:31:63:
00:52:59:b3:25:ea:21:78:f4:fa:dc:f9:1c:5d:9b:
0a:8b:1c:28:0e:d0:28:b9:b9:72:34:b8:71:02:3f:
c1:fd:f1:0f:9c:fd:1a:56:84:22:13:e9:07:65:f6:
4c:f0:67:37:55:22:a9:49:94:0c:db:c0:4d:50:3c:
4f:30:e6:99:1e:ae:ff:15:c0:e8:d5:41:11:76:8a:
cb:56:0f:14:7c:eb:a8:73:48:6c:94:4e:cd:ca:0b:
62:b4:91:50:48:94:d0:c2:d3:47:67:5f:da:60:12:
f1:d0:29:55:95:73:67:82:ec:9e:42:0d:d4:7c:f5:
0f:68:7b:02:6d:d8:0a:26:ad:04:8b:9f:fc:7b:05:
a3:99:7d:00:07:a4:99:6d:12:ca:bc:ec:88:25:1a:
d1:4b:c5:4e:88:d2:84:02:e7:f8:20:38:3a:e4:8f:
ec:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E2:73:4D:14:54:15:A8:C7:DD:9D:F1:7A:17:2B:5B:32:CC:65:DC
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138372e39352e302e302f32302d3234203d3e203533303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.0.0/20
Signature Algorithm: sha256WithRSAEncryption
34:de:27:36:5d:9f:64:c7:9b:f7:fd:98:f1:7b:01:7b:53:40:
20:33:42:18:51:0f:e8:a5:d9:da:53:2b:ed:b3:1f:fa:f2:a6:
fe:32:fc:6e:e0:99:8f:f2:e9:a7:43:df:01:7b:52:e9:0f:44:
29:4c:10:1c:40:40:20:d3:8f:39:50:63:86:5e:dc:74:1e:5f:
fa:a8:92:b9:8e:ea:7a:84:0d:b2:ba:62:62:e1:74:a7:78:ab:
9b:85:18:22:79:1d:96:39:56:c6:55:3f:62:f9:cd:db:c4:d2:
63:6b:ff:3d:4c:d8:f5:0a:32:62:81:be:96:d1:b8:ee:d7:28:
1a:a1:08:28:df:6f:f5:c0:87:d8:a6:e8:02:5a:0c:d6:8a:fc:
09:d7:1f:bb:ae:22:50:df:a9:d8:49:a9:ea:b0:c9:1b:79:12:
ee:15:dd:d7:19:12:11:4d:34:a2:02:74:11:78:9f:d8:9e:85:
d3:e7:a1:56:f6:c5:5b:36:f1:e1:76:70:d9:f9:7d:34:c4:cb:
98:4e:f9:0c:de:f2:ec:93:a9:ab:80:b7:e3:04:96:c3:df:6d:
f9:a6:fb:c3:0a:d4:41:a2:b6:41:29:88:22:1c:05:4d:ce:a4:
d2:eb:81:bf:e0:dc:08:b1:0a:5f:43:bd:a6:2e:3f:05:af:43:
5d:43:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org