Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32342d3234203d3e20323636303231.roa
File: 3137302e3234352e33382e302f32342d3234203d3e20323636303231.roa (raw, json)
Hash identifier: TykgTcSrYUQkp/WWykJPT0teTh/wzd7vAPSYANOkAmA=
Subject key identifier: 34:85:4F:01:67:D8:BF:28:D4:18:7F:7C:02:1B:F8:2B:7B:BA:AC:C3
Certificate issuer: /CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Certificate serial: 090C71163B6FD272EC630CB6AEE0FAADD7B4F09B
Authority key identifier: D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32342d3234203d3e20323636303231.roa
Signing time: Wed 24 Apr 2024 16:08:34 +0000
ROA not before: Wed 24 Apr 2024 16:03:34 +0000
ROA not after: Wed 23 Apr 2025 16:08:34 +0000
asID: 266021
IP address blocks: 170.245.38.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:0c:71:16:3b:6f:d2:72:ec:63:0c:b6:ae:e0:fa:ad:d7:b4:f0:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5CA974E91942554F8F7F25C9792A1BCDEB3758C
Validity
Not Before: Apr 24 16:03:34 2024 GMT
Not After : Apr 23 16:08:34 2025 GMT
Subject: CN=34854F0167D8BF28D4187F7C021BF82B7BBAACC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:2c:d8:ef:0b:f8:18:b0:40:3f:07:7a:f4:94:
7c:1f:71:de:e1:bc:58:cb:a9:24:14:ab:0c:17:0d:
56:c0:e3:c9:4f:6d:e8:57:9e:f5:08:98:cd:23:1c:
e8:54:25:b8:d5:0b:17:09:47:25:1d:36:7d:bd:c8:
98:a0:67:f8:fb:24:27:d6:d3:e6:35:fd:5f:33:66:
cb:1a:d2:f8:88:e0:8f:71:00:35:8c:79:db:16:32:
2a:f2:56:74:06:43:de:a1:f9:85:db:01:43:a8:38:
d0:db:27:11:33:ca:7b:f9:47:67:9a:74:49:b9:c3:
55:9b:ac:04:08:fd:cf:b8:b3:7a:92:58:61:cc:b0:
0e:e9:ed:52:9a:b1:8b:96:52:29:71:dc:b8:c4:3f:
7e:43:0f:c9:e5:ba:79:41:c8:e0:45:c8:bd:1d:ce:
0f:79:17:cd:2c:d1:16:02:58:34:7c:88:fe:b3:84:
bd:62:1e:db:66:55:63:a3:de:a2:c6:8e:d9:69:22:
05:22:b0:d0:cd:74:9e:fb:da:97:bd:12:51:93:de:
6f:8e:b5:42:e3:c3:5d:f1:b6:d6:b6:cc:c5:ca:55:
97:df:70:2c:8b:4f:42:b4:61:af:e9:51:82:a1:fa:
ee:03:09:14:6a:98:28:ca:4e:87:66:bc:14:dc:fd:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:85:4F:01:67:D8:BF:28:D4:18:7F:7C:02:1B:F8:2B:7B:BA:AC:C3
X509v3 Authority Key Identifier:
keyid:D5:CA:97:4E:91:94:25:54:F8:F7:F2:5C:97:92:A1:BC:DE:B3:75:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5CA974E91942554F8F7F25C9792A1BCDEB3758C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AACY62Xqj4HnNXtvG2wfW4qZM3ANso7SVj9MRLY5yZ5a/0/3137302e3234352e33382e302f32342d3234203d3e20323636303231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.38.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:5a:c7:13:0a:3d:fc:80:00:1d:04:c2:a8:bb:f2:4d:d5:c9:
c8:93:74:62:da:60:a6:6c:40:8e:56:f3:ac:1b:d4:dc:e0:cf:
46:64:49:a7:fa:10:59:1e:4d:74:1d:fe:b5:cf:48:46:96:e4:
86:25:14:ba:78:cc:cc:5d:99:07:b4:5c:0f:44:3d:5c:f2:c8:
17:eb:4a:88:24:5e:6e:da:9a:75:89:da:c1:d9:49:52:af:8a:
78:06:62:47:01:08:5a:fc:a8:5c:b1:30:ae:66:e1:78:14:e7:
46:3e:24:d5:b0:d5:0d:20:6e:25:c2:65:49:02:9a:55:1c:1f:
c3:bb:09:c9:f2:de:52:ea:b8:b1:29:38:83:21:c6:0e:88:d4:
a1:0c:89:ca:fc:cc:9e:a1:3d:bf:48:58:cd:03:4d:b2:e1:0d:
6f:eb:1f:c6:c3:4d:71:86:f7:25:61:c6:58:d3:e2:ac:2e:57:
f9:f5:28:35:5d:7b:1b:df:86:81:c6:36:c3:48:d6:a8:3b:43:
a2:d4:54:89:f7:65:ce:82:33:49:41:d0:a4:2a:ef:05:39:d3:
eb:11:84:3a:96:cf:24:94:61:ad:87:24:7f:72:92:85:c9:00:
91:6a:25:5f:95:2f:3d:ea:2e:25:a0:be:ea:05:1b:b6:79:81:
3c:bd:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 11:40:20 2024 by rpki-client on console-ams.rpki-client.org