Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32332d3233203d3e20323635353030.roa
File: 3137302e37382e39322e302f32332d3233203d3e20323635353030.roa (raw, json)
Hash identifier: dwDY2/mjU5QjqDgAYT0XXEQS3OctBd6W7paXVEh2AAQ=
Subject key identifier: 04:99:9C:E9:A8:EB:54:5B:96:1A:9C:3E:D7:32:33:05:7F:1A:ED:D4
Certificate issuer: /CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Certificate serial: 0BA13B9D9D7F0F83B43BCB5EF340BCA01613D8DB
Authority key identifier: 2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32332d3233203d3e20323635353030.roa
Signing time: Mon 29 Apr 2024 14:47:40 +0000
ROA not before: Mon 29 Apr 2024 14:42:40 +0000
ROA not after: Mon 28 Apr 2025 14:47:40 +0000
asID: 265500
IP address blocks: 170.78.92.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:a1:3b:9d:9d:7f:0f:83:b4:3b:cb:5e:f3:40:bc:a0:16:13:d8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B36FD67FD146F6ABC421C609744891EA7512F17
Validity
Not Before: Apr 29 14:42:40 2024 GMT
Not After : Apr 28 14:47:40 2025 GMT
Subject: CN=04999CE9A8EB545B961A9C3ED73233057F1AEDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:36:a8:cd:d3:47:7a:0e:85:05:87:c0:44:
7f:83:62:e4:e8:5c:c7:f9:77:cc:fc:8a:f8:c2:d3:
e8:a0:82:c9:22:7b:ab:2a:41:06:3a:30:8e:40:bc:
84:e1:a8:14:4e:da:8b:ab:45:2d:5c:2e:04:e8:5c:
1f:a9:16:bb:5d:05:34:bf:31:08:0d:80:0d:46:4d:
5e:86:16:45:3c:91:5f:26:81:cb:95:d7:2f:65:6b:
8a:32:a2:f2:7e:74:7e:ec:ab:47:e8:40:14:d4:38:
f9:d6:37:d7:ef:50:8f:55:e3:f8:ff:df:f4:44:d0:
ea:ed:d0:6e:5f:8d:72:7e:8a:18:b5:00:65:50:4a:
14:97:9c:f2:b2:bf:ac:59:a6:b9:fd:68:ad:d2:e8:
9b:20:b8:08:f6:bb:8e:f7:0b:c3:71:28:2d:74:b9:
72:68:96:7d:0f:d1:00:25:00:47:ea:8c:30:b2:2d:
69:80:d1:69:6a:99:4e:ac:7e:af:b4:18:bf:6f:1e:
42:ae:54:e3:6c:43:69:f2:3d:d5:ea:82:98:f5:ab:
90:af:11:f6:bd:4a:d9:67:ed:8a:3c:53:ae:a4:45:
76:06:32:da:4d:c2:0a:d3:c0:f4:f0:7f:e0:3b:f0:
64:f3:09:3f:f2:e9:d6:34:5a:f6:05:bb:f9:d5:cc:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:9C:E9:A8:EB:54:5B:96:1A:9C:3E:D7:32:33:05:7F:1A:ED:D4
X509v3 Authority Key Identifier:
keyid:2B:36:FD:67:FD:14:6F:6A:BC:42:1C:60:97:44:89:1E:A7:51:2F:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/2B36FD67FD146F6ABC421C609744891EA7512F17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B36FD67FD146F6ABC421C609744891EA7512F17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQAdk7fze1c7jh3goB6VopCS8tjQVN1JfNXBZahXVcxj/1/3137302e37382e39322e302f32332d3233203d3e20323635353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.92.0/23
Signature Algorithm: sha256WithRSAEncryption
38:0c:06:9d:dd:74:99:f2:a9:6f:6b:1c:86:4f:5d:db:9b:71:
f0:82:6b:49:6c:7a:e6:61:9d:5f:2c:0c:47:5f:49:a1:71:8e:
32:3a:b3:72:2f:5a:83:40:39:ab:d1:e5:21:71:78:d7:79:f0:
bf:8e:b8:43:e7:fb:db:32:6b:62:60:76:6e:bf:81:1a:d4:55:
22:6c:71:04:0b:1c:23:c1:bf:6e:c0:b1:5c:62:b4:b1:13:27:
9b:f9:14:b2:08:a8:69:84:d5:eb:ef:7c:5b:db:d5:af:ed:d1:
76:13:1a:2f:4e:89:59:09:bd:0c:98:e9:69:f2:e4:71:8d:79:
6e:f4:7f:40:bf:b9:21:d2:aa:da:0b:96:7b:9d:2a:60:00:68:
86:0f:55:2f:53:b1:d5:0e:2d:60:11:87:b0:1c:e0:6d:d3:fd:
c3:c8:ad:69:ae:9f:b5:a5:7a:07:98:41:b8:65:32:49:fe:ed:
e3:fd:a5:33:fe:84:d0:54:fe:de:5f:2f:ac:e4:de:20:df:83:
eb:38:18:8e:b8:71:a8:fb:dd:89:30:a3:86:65:7a:35:d1:54:
30:4a:15:f3:15:be:3d:4b:e3:5a:19:fd:05:91:ea:6b:00:32:
af:e2:1e:92:8f:51:61:05:42:4d:dc:31:09:76:3c:ba:09:4b:
b5:18:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 00:23:35 2024 by rpki-client on console-fra.rpki-client.org