Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
File: 3137372e33382e39362e302f32312d3234203d3e20323632343033.roa (raw, json)
Hash identifier: 1CcpEv8sbWtK6o7tsxN5beLb3eYqDDNGqq0U1Ianq4w=
Subject key identifier: 01:D7:C5:E7:14:1E:0D:E5:93:1A:3F:E6:41:13:74:19:70:CE:C6:8B
Certificate issuer: /CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
Certificate serial: 500E4B63F6622ADB886DAFA7C255EB2D913C84F6
Authority key identifier: 94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
Signing time: Thu 04 Apr 2024 09:54:42 +0000
ROA not before: Thu 04 Apr 2024 09:49:42 +0000
ROA not after: Thu 03 Apr 2025 09:54:42 +0000
asID: 262403
IP address blocks: 177.38.96.0/21 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:0e:4b:63:f6:62:2a:db:88:6d:af:a7:c2:55:eb:2d:91:3c:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
Validity
Not Before: Apr 4 09:49:42 2024 GMT
Not After : Apr 3 09:54:42 2025 GMT
Subject: CN=01D7C5E7141E0DE5931A3FE64113741970CEC68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e7:b0:b5:32:41:2f:bc:4c:6b:c6:a4:c0:f4:
38:d5:74:31:07:d3:85:4f:52:59:da:59:ca:82:0f:
83:a9:96:f6:c9:5d:67:d7:13:ce:79:22:07:c4:fe:
cc:4a:4c:4c:1a:3f:1e:ba:e3:ba:bd:cf:d6:65:a8:
13:ac:c8:ca:b2:69:15:2d:7c:fa:8b:2c:a6:82:e9:
d2:f3:d5:58:36:2e:21:88:d3:93:b6:7e:a3:b9:5b:
3d:10:fd:ea:51:c7:a1:bf:c3:06:dc:7f:0a:7e:fd:
72:b6:9e:da:0a:df:fd:4a:77:9a:b5:68:42:44:20:
ea:f7:1c:75:88:11:d7:99:a1:f2:ba:eb:af:6e:41:
83:92:b5:b1:9e:3e:81:a9:1d:51:69:aa:56:0f:15:
dc:4a:a6:06:09:df:af:ec:9e:e8:e4:fa:c4:f2:0d:
6a:3a:af:2f:67:cd:ca:8a:4b:8f:4a:74:6f:12:56:
4a:6f:a9:d1:8b:44:04:cc:6b:c8:2b:f8:25:3c:67:
e8:f4:86:3a:f6:69:9e:e8:e3:c1:52:a3:1d:8e:bb:
d7:77:a0:32:bb:1f:a2:a2:61:07:5a:5a:b7:ac:6d:
88:60:20:1a:d9:a4:ae:f4:e5:dd:29:b4:95:b9:47:
54:9e:c2:b4:42:43:99:2c:10:97:63:fe:98:61:a5:
12:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D7:C5:E7:14:1E:0D:E5:93:1A:3F:E6:41:13:74:19:70:CE:C6:8B
X509v3 Authority Key Identifier:
keyid:94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3137372e33382e39362e302f32312d3234203d3e20323632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.38.96.0/21
Signature Algorithm: sha256WithRSAEncryption
0c:ae:85:9b:6d:cf:af:1b:60:06:f9:ca:2f:a7:97:97:65:2d:
3c:bc:4d:0f:69:52:cd:6b:54:78:6e:af:62:cc:db:9f:c8:b3:
13:d1:10:20:c9:5f:59:f0:56:4e:30:b8:ea:d3:c3:7e:d9:9d:
5c:3c:41:37:05:bb:83:f4:13:c8:53:49:79:e2:4a:21:fd:67:
c4:72:6d:61:6c:4c:d6:2a:08:87:1b:ba:80:b5:de:c0:68:a1:
03:8a:86:23:9b:d3:38:b5:86:68:99:ce:c1:d5:2f:0e:c6:4b:
81:b0:ae:3c:c1:3f:cf:fe:71:b5:3d:97:91:72:2a:00:77:8c:
39:61:94:ae:d0:59:eb:81:81:a4:ed:51:e5:db:61:5a:ad:0c:
b0:16:5c:82:3d:63:bc:34:e9:4d:48:ac:a2:ef:99:48:cf:8b:
04:46:03:0c:f3:23:ba:dc:a5:37:04:24:a4:2c:61:d2:4c:66:
d6:a7:f9:3d:45:1d:cd:97:1e:4e:e0:6b:38:44:73:da:90:4a:
e7:96:fe:af:1f:17:2c:e3:de:e6:a6:be:19:4b:36:c0:86:1a:
aa:2a:ed:85:55:0c:c2:11:dc:a0:48:93:4d:df:fa:82:6e:74:
8b:71:25:a9:e8:ba:26:96:61:b4:2c:87:13:a6:fa:23:56:e1:
f8:58:d5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 23:03:02 2024 by rpki-client on console-ams.rpki-client.org