Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137302e302f32332d3233203d3e203238313635.roa
File: 3137302e38312e3137302e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier: kxDVKrsutJDYw/71ok/+9/wNDceCqBVWMdNdOleALNI=
Subject key identifier: DB:BB:53:BE:0C:DC:38:8F:1F:28:76:A7:7F:A9:5E:CC:1D:77:BD:58
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 5134E0DBF4618C23A611A2FD679C5B5DCE9E1E52
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137302e302f32332d3233203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 19:22:25 +0000
ROA not before: Mon 01 Jul 2024 19:17:25 +0000
ROA not after: Mon 30 Jun 2025 19:22:25 +0000
asID: 28165
IP address blocks: 170.81.170.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:34:e0:db:f4:61:8c:23:a6:11:a2:fd:67:9c:5b:5d:ce:9e:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 19:17:25 2024 GMT
Not After : Jun 30 19:22:25 2025 GMT
Subject: CN=DBBB53BE0CDC388F1F2876A77FA95ECC1D77BD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:ad:93:1a:4c:c5:36:35:27:6b:7e:3c:71:
1b:9e:ef:99:7f:de:fb:22:a1:17:4b:86:87:31:67:
36:91:f5:a0:60:e3:40:00:a4:ad:47:ff:50:4c:92:
5b:d4:1b:1f:cf:96:e8:9c:64:86:2f:54:90:06:6e:
98:2f:9b:2d:f4:38:cf:83:e0:ec:64:17:e6:20:7e:
da:59:bb:0c:a5:1b:f2:1c:f8:34:6d:0a:75:a0:d7:
89:e0:ce:31:b4:76:ac:3f:04:82:a4:00:8e:85:de:
36:52:4b:fe:53:0a:fe:61:5c:a8:71:97:49:ab:fc:
a0:a2:22:8d:d7:cf:be:0c:d9:e6:23:5b:7e:6d:08:
50:92:70:67:0b:d5:cc:3d:30:1d:0e:45:d6:5f:f6:
2b:36:95:45:91:81:6e:98:76:dc:a9:20:7b:2e:5e:
b8:da:8d:10:f0:4a:6e:c5:15:f8:9f:d6:98:6a:27:
de:ab:6c:ed:83:bb:b7:0b:45:62:25:12:a5:b6:10:
f8:a4:db:9e:42:fd:ba:4b:34:0c:0f:97:f6:3a:f0:
f2:60:18:39:e2:d9:d8:34:a1:06:de:69:a0:4c:b5:
e1:a8:27:d9:fe:03:be:32:a2:e4:48:96:fd:00:81:
1c:72:a7:aa:49:63:3a:07:c3:16:ed:77:c5:6b:9d:
31:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BB:53:BE:0C:DC:38:8F:1F:28:76:A7:7F:A9:5E:CC:1D:77:BD:58
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3137302e38312e3137302e302f32332d3233203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.170.0/23
Signature Algorithm: sha256WithRSAEncryption
18:c0:c4:1e:f8:fb:c5:e9:4d:9f:ff:35:47:2a:e8:ac:52:35:
95:63:1e:e0:4a:5e:f1:da:4e:45:af:47:09:86:46:49:97:d8:
c6:95:94:43:02:59:0d:48:c6:07:10:dd:c1:fe:1f:f9:1f:37:
be:e2:56:60:47:aa:31:25:db:7b:96:cd:b1:bc:8d:4c:03:38:
48:89:c5:55:65:f8:76:75:04:e2:d6:dc:58:f2:71:59:26:87:
2d:90:d7:48:62:79:cc:0a:96:76:73:c0:8b:6c:08:2c:41:a4:
b4:d0:19:b7:9d:59:4d:43:26:60:c8:43:00:89:6c:8d:59:cd:
ce:e9:af:36:49:67:84:01:fe:c9:a4:6b:5b:7c:e5:30:94:db:
1e:4d:d9:98:df:31:b2:ae:70:8b:39:4b:fa:a9:c6:a6:86:d9:
24:89:27:ad:c5:40:a8:c1:bb:6e:13:23:81:78:00:5f:a7:b9:
8b:e1:a3:3f:08:4d:ae:54:7d:b9:bb:bc:61:97:43:35:84:3b:
0e:3d:04:2d:68:68:c0:26:5d:fc:15:3f:6b:05:67:a5:68:5b:
52:f4:b1:91:b8:62:99:6e:6c:24:80:77:d6:03:ef:03:2e:98:
9e:95:78:b6:84:4e:da:0a:e8:1f:0d:da:f4:ed:b7:fa:dc:0d:
7f:c9:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org