Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32322d3234203d3e203238313635.roa
File: 3137302e38312e3136382e302f32322d3234203d3e203238313635.roa (raw, json)
Hash identifier: PNxz67J1XQc+T7Emu3neiG4mNNXDX7KnBSMaB5dua5U=
Subject key identifier: B1:DE:96:A0:30:27:EF:A7:2F:B4:EB:E9:E1:F5:7E:D2:D5:B2:70:42
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 747A2A2CB167A30C5A759CD7A59AABF90A64A25F
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32322d3234203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:32 +0000
ROA not before: Wed 31 Jul 2024 22:20:32 +0000
ROA not after: Wed 30 Jul 2025 22:25:32 +0000
asID: 28165
IP address blocks: 170.81.168.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:7a:2a:2c:b1:67:a3:0c:5a:75:9c:d7:a5:9a:ab:f9:0a:64:a2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:32 2024 GMT
Not After : Jul 30 22:25:32 2025 GMT
Subject: CN=B1DE96A03027EFA72FB4EBE9E1F57ED2D5B27042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8f:85:d8:e3:aa:2b:47:f8:29:ef:cb:80:9d:
86:44:8f:01:5f:cf:e7:0e:ef:cd:18:61:c2:1b:ea:
c9:ce:df:08:f6:dc:75:d5:88:6e:77:e4:2e:1b:31:
db:88:4c:62:36:6d:e0:29:ea:52:60:63:e6:69:e5:
94:17:b2:e7:14:a6:e0:74:31:c5:f7:be:fd:c1:6a:
f6:2d:83:5a:c8:fc:47:0c:a0:c1:6a:30:72:87:b6:
97:bd:b8:77:7c:ae:fe:ba:77:d1:32:79:45:d6:b4:
ee:26:03:1f:d4:0c:8f:d9:bc:6f:b8:c4:15:0c:19:
5a:57:b8:87:c2:70:54:46:10:7f:54:c7:13:14:06:
4a:44:2c:ee:4e:3d:fd:e0:df:a7:62:ff:18:ec:e4:
4a:b9:f2:fc:63:28:da:5a:c8:99:98:27:4d:9b:50:
08:53:87:3d:7c:75:f3:b1:f2:6f:1d:81:ca:99:f5:
08:3b:74:9a:89:08:80:87:9b:28:c8:5f:55:4a:21:
d2:b6:30:61:35:09:4d:d8:ed:f1:94:39:ba:d0:4e:
9f:96:b8:a5:0d:62:7c:b1:4f:5b:0e:93:e8:da:ea:
74:04:25:9a:6b:03:11:44:8f:83:d2:5b:4e:a0:a3:
41:d4:62:d2:88:99:f0:69:1b:4f:ee:b4:95:c1:ca:
9d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:96:A0:30:27:EF:A7:2F:B4:EB:E9:E1:F5:7E:D2:D5:B2:70:42
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3136382e302f32322d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.168.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ae:3e:03:18:6c:e1:f1:2b:30:26:7f:e2:bb:4e:90:73:d0:
9f:15:46:4d:69:f1:d5:81:15:11:19:4b:f0:92:96:4e:4d:53:
08:41:40:6a:55:17:ce:98:06:43:4e:03:8b:7a:f7:1f:dd:87:
4b:91:a2:cc:18:4f:e9:de:60:a3:5b:e0:7e:9d:5a:c4:94:77:
97:fa:3d:ee:83:e2:2b:ea:63:5d:88:5c:c7:e9:75:b1:83:09:
83:92:26:f1:2d:36:a6:9b:52:ef:91:9d:57:be:66:d9:09:bc:
d7:ed:c5:d4:40:aa:5d:ed:5e:ef:3a:a2:eb:5a:b3:90:7f:16:
9c:0a:0c:3a:e9:4d:2e:1f:e1:68:48:ec:6b:2e:ab:86:2c:53:
22:a5:16:56:9e:c6:3e:32:96:6f:a2:cb:1b:4e:d2:ce:8d:12:
75:75:1f:9a:1a:cd:95:b7:66:7e:01:dc:ed:8d:b6:ed:54:cf:
ef:e3:07:6f:7d:f6:fb:1b:a3:ea:30:05:f7:e5:f3:3e:a2:2a:
dd:e5:75:c3:e7:b7:65:4d:3c:2b:76:b5:b9:87:80:95:48:95:
4e:5b:4a:6f:fe:0b:fa:14:da:8f:0c:8f:dc:49:67:9d:40:a5:
4d:c9:cb:fc:90:df:35:7c:4c:14:32:ce:a6:57:6a:f9:4b:2a:
4b:75:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org