Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32322d3232203d3e203238313635.roa
File: 3137302e38312e3136382e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier: y/C9ssTw2/9Msjl38GMhV0It7PQofae5XPXij9gWBao=
Subject key identifier: 78:01:FD:B6:23:C9:14:F7:B3:CC:9D:BD:27:35:BF:00:64:94:AC:75
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 3966F357EF0BABB9808F329C9AA018B2127BE3F8
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32322d3232203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:24 +0000
ROA not before: Wed 31 Jul 2024 22:20:24 +0000
ROA not after: Wed 30 Jul 2025 22:25:24 +0000
asID: 28165
IP address blocks: 170.81.168.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:66:f3:57:ef:0b:ab:b9:80:8f:32:9c:9a:a0:18:b2:12:7b:e3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:24 2024 GMT
Not After : Jul 30 22:25:24 2025 GMT
Subject: CN=7801FDB623C914F7B3CC9DBD2735BF006494AC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:cd:f9:3d:54:ca:e6:32:ac:fa:80:82:63:1f:
77:d4:13:8b:0c:38:23:d8:5b:49:ab:e3:bb:1e:ea:
36:ae:b9:10:0b:97:58:ed:36:e5:ca:f2:bd:b0:20:
19:24:b0:1f:55:2f:dd:a3:3c:1d:73:c5:54:fe:76:
41:f0:e6:af:a3:11:c8:4b:18:67:32:eb:b8:91:7a:
14:02:78:68:67:8f:08:60:45:62:9c:65:4a:c4:64:
02:6d:a1:43:5d:c1:08:15:83:9a:5e:be:34:73:bc:
60:8d:dd:46:6c:44:97:7c:86:2a:3f:20:f9:70:c0:
ae:f1:2c:b3:32:71:12:64:8b:fd:e1:2b:5d:db:87:
64:9c:39:bb:71:f5:1b:8b:5e:6a:ee:3f:38:8e:c7:
42:ff:6e:89:06:f9:58:3b:f4:94:e7:63:62:9c:00:
2f:fb:af:81:90:53:cf:58:4f:c7:f1:e3:28:fd:1e:
b4:c8:2d:c4:b8:13:1e:5a:2f:fc:81:2d:53:ed:16:
71:a2:3e:53:a2:02:ac:19:5f:a4:7d:8b:60:d1:b2:
1b:21:f8:a0:3c:67:71:e3:d8:c3:f9:80:31:a7:9c:
c9:4c:47:7b:c4:4b:4d:43:6a:0c:0c:c4:d2:5d:53:
68:65:5d:fe:7c:ff:01:6f:3b:46:72:bb:7e:92:63:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:01:FD:B6:23:C9:14:F7:B3:CC:9D:BD:27:35:BF:00:64:94:AC:75
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32322d3232203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.168.0/22
Signature Algorithm: sha256WithRSAEncryption
60:25:a5:87:ac:e2:96:4c:21:65:00:50:99:70:9d:24:8e:a8:
98:b4:a4:b5:92:e2:a7:8a:1e:8a:47:d5:bf:3e:f0:77:a8:a2:
94:bc:bf:d7:c4:17:49:d1:df:17:ee:86:c2:8b:ed:54:8a:5a:
6e:cd:7f:57:ea:eb:f5:a4:9a:96:a6:a4:2c:64:0c:6c:45:39:
74:d5:a0:22:bc:1c:8c:0c:8c:2b:a4:34:48:bd:fd:87:93:da:
1e:fa:30:27:ac:95:71:b6:d9:10:06:ed:cc:c2:74:ba:0d:dc:
fa:ec:50:38:7e:aa:df:5d:bc:bf:fc:60:67:ec:70:0c:8f:49:
9e:3b:c5:b9:3a:07:cb:58:41:96:e8:e5:c7:f5:f3:ae:fc:19:
84:85:78:82:e1:c8:8f:9d:f0:6c:cf:c1:47:14:2f:28:b0:b1:
1f:f7:46:b1:8a:15:0d:0c:ca:36:8a:f2:21:e3:9e:9f:6d:96:
ad:4f:36:d8:93:91:ed:d3:0d:85:2d:fe:64:68:80:0d:b3:83:
a2:c1:7c:b0:fc:9e:fa:c2:e2:6a:7c:1a:fe:9e:8a:4c:23:3d:
f9:46:47:9b:77:05:24:b8:fc:82:c1:19:e4:b7:fc:87:10:95:
19:6f:2f:f6:db:69:b9:41:63:3e:6f:7c:e2:34:51:5e:a3:19:
a9:51:44:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org