Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa
File: 3137302e38312e3136382e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: vaXODtyJMFEzNYUdzPj3DTjdrUYlZIKFPsoEN9u2stk=
Subject key identifier: BF:42:97:41:3C:90:7C:CB:86:F0:C1:57:57:D4:8E:AA:1E:C3:FE:F2
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 1AB50B1F01C06735536AE8BB6CAD13DABD3DB6A3
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 19:20:05 +0000
ROA not before: Mon 01 Jul 2024 19:15:05 +0000
ROA not after: Mon 30 Jun 2025 19:20:05 +0000
asID: 28165
IP address blocks: 170.81.168.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:b5:0b:1f:01:c0:67:35:53:6a:e8:bb:6c:ad:13:da:bd:3d:b6:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 19:15:05 2024 GMT
Not After : Jun 30 19:20:05 2025 GMT
Subject: CN=BF4297413C907CCB86F0C15757D48EAA1EC3FEF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:44:53:67:b1:33:b5:f1:1d:48:20:b7:96:
5a:d4:c2:95:e1:20:5e:27:45:a4:26:84:73:91:55:
cf:15:a3:b0:0c:ca:d8:7a:1a:dd:43:91:30:50:9e:
82:94:8f:36:01:c9:db:f5:65:03:ad:65:82:b5:8a:
d3:3c:5b:da:68:4f:a6:f6:5e:cd:ba:15:71:40:5b:
a4:e0:1d:f7:d7:c9:33:ca:27:a9:24:c7:18:76:43:
a0:d6:2b:ab:89:43:9e:46:44:f5:00:51:e4:ae:1f:
88:53:7f:50:eb:ae:98:63:18:f3:99:cf:a1:85:ed:
10:61:2c:20:13:f0:83:05:f7:2d:8e:c4:7a:a3:e6:
75:7a:d6:0b:49:4e:8c:17:c5:dd:2f:55:a1:41:c1:
40:c1:68:29:ee:17:01:d5:c7:e8:09:a7:3e:27:58:
5a:f6:b7:dc:6c:89:bd:a3:9a:bd:1a:09:08:9d:73:
7b:b2:96:49:9b:c6:34:38:31:36:ec:24:e5:16:69:
4e:ae:21:9f:58:8c:4c:d0:d1:ce:9c:d0:5d:2b:2f:
a7:df:92:9f:57:a4:5c:aa:70:1b:b4:28:d4:05:9b:
71:12:65:9c:b1:62:e1:3e:3b:62:96:bf:32:d9:b9:
35:65:03:5d:ce:6b:84:a6:cc:7d:3a:17:1f:c3:20:
1f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:42:97:41:3C:90:7C:CB:86:F0:C1:57:57:D4:8E:AA:1E:C3:FE:F2
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3136382e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.168.0/24
Signature Algorithm: sha256WithRSAEncryption
67:d2:57:13:96:57:a4:45:e8:16:c8:3e:2b:a5:d3:95:a8:85:
f9:bd:bf:20:f2:92:5f:24:b8:d9:00:6d:e8:df:0b:f1:3a:7b:
b1:90:23:03:da:33:ac:e4:cd:95:a8:58:75:98:fa:fe:bb:da:
31:25:fc:b2:9a:b5:75:24:94:d4:21:41:69:3b:2c:da:0e:95:
8a:77:b3:96:1a:88:9b:a0:46:90:55:76:03:28:2d:34:1d:1c:
37:6b:dc:d7:15:6e:c5:29:22:83:6d:c5:cd:e1:e4:4b:51:ed:
20:d2:03:a3:fc:ff:a0:db:27:93:ac:46:0e:eb:55:d0:77:8c:
8c:ed:e5:4c:a9:03:f4:58:fc:61:be:a2:74:ed:89:dd:90:e3:
ad:36:0b:1f:49:de:39:a4:7d:7b:a5:00:f3:ca:70:3b:07:bd:
d2:38:89:42:92:d2:17:74:42:43:f6:61:39:2d:f9:bc:36:91:
f9:bc:1c:92:78:6a:57:be:9c:65:ab:40:92:9d:95:35:09:fa:
8d:76:34:ba:32:c3:75:60:2c:b5:b4:d6:64:10:db:7a:66:86:
08:2e:ef:d9:50:43:c5:fb:86:38:18:6f:ff:b9:31:05:8c:74:
d9:3a:bf:58:a1:86:22:68:4d:12:68:58:52:03:2d:39:1a:5d:
8c:ee:81:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org