Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137302e302f32342d3234203d3e203238313635.roa
File: 3137302e38312e3137302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: GKLVN2SiruNTCTNM68sgpPiPq+NZpQHMnY3HYMW7gv4=
Subject key identifier: 14:FC:24:DA:15:36:0A:AB:1D:BE:D2:AB:DA:99:0F:C1:FF:36:CB:CB
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 64FCA90866E3917E5621B945A5394DBB08621E6D
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137302e302f32342d3234203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:15 +0000
ROA not before: Wed 31 Jul 2024 22:20:15 +0000
ROA not after: Wed 30 Jul 2025 22:25:15 +0000
asID: 28165
IP address blocks: 170.81.170.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:fc:a9:08:66:e3:91:7e:56:21:b9:45:a5:39:4d:bb:08:62:1e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:15 2024 GMT
Not After : Jul 30 22:25:15 2025 GMT
Subject: CN=14FC24DA15360AAB1DBED2ABDA990FC1FF36CBCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:bd:45:0b:7c:33:1e:a1:9b:c2:d9:5f:75:
bd:3b:3d:18:97:c5:b8:fc:69:31:d0:7d:67:0a:6c:
95:c3:ff:51:34:0f:bc:20:d2:8f:ac:10:83:7d:73:
b3:94:8d:44:d4:21:bf:60:27:5c:16:ba:05:88:cc:
98:2c:5c:34:63:8e:bf:69:db:97:2f:ef:a7:0b:84:
c3:0a:31:72:1e:41:7d:d4:0b:8e:bd:6b:37:6b:e1:
b2:92:e8:72:f6:5c:03:79:12:20:dc:09:90:f1:76:
8f:9c:10:f8:c5:1a:f1:82:ff:eb:1f:09:fe:64:3b:
70:16:d0:3d:81:ea:48:bd:7e:f4:27:2a:7d:1a:eb:
4a:2d:e2:21:a7:0f:1c:7a:66:9f:27:47:0c:a8:cb:
d9:2d:f0:17:ed:1a:5b:84:dc:e3:24:b6:d4:7d:b3:
3b:fc:99:65:00:f2:3d:7b:91:00:7d:ef:f8:8b:3f:
76:a6:b2:74:b7:05:a9:4d:68:3c:e4:66:73:ec:b4:
06:19:92:54:7f:a8:37:97:7e:b4:b1:8f:3d:66:aa:
ce:4d:8f:7c:6c:07:fd:a9:76:aa:42:f3:b2:d0:33:
8c:ae:ee:82:e0:b5:5c:b6:e5:8f:61:d1:b0:d6:9c:
e7:72:bd:3e:5d:ae:09:cb:67:cc:aa:6a:2e:6c:53:
2f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FC:24:DA:15:36:0A:AB:1D:BE:D2:AB:DA:99:0F:C1:FF:36:CB:CB
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3137302e38312e3137302e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.81.170.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b9:ec:69:8b:08:6d:4e:8e:55:5a:51:ae:f4:0d:9c:e3:e0:
17:31:22:db:71:50:0c:dd:d4:c0:47:69:f4:98:e4:54:ba:56:
7f:fe:6b:6f:22:89:78:c2:c9:35:39:24:4d:0b:72:74:b5:ca:
a8:5c:cd:19:94:b6:64:5a:63:a7:91:d4:16:65:f9:b1:d4:4b:
61:56:55:13:02:8b:e0:c5:05:63:9a:7a:7d:2a:36:81:69:83:
c3:d0:ea:af:fd:9d:8e:eb:b5:17:9b:2f:50:12:61:51:dd:12:
1b:e3:ce:2a:4a:fe:9a:cd:30:ba:35:f7:b1:dc:f5:36:16:59:
53:2a:e5:11:90:e9:ed:00:c7:11:7c:bc:81:56:22:f4:ce:eb:
d8:b5:74:1a:64:7b:56:1b:7a:33:74:22:d0:ed:fe:4f:04:31:
c6:6b:76:91:09:bb:8c:10:7e:d3:89:9e:a0:fb:29:67:84:ae:
d7:9c:09:a8:4f:de:ed:ed:94:c5:56:fa:eb:f5:ee:ed:be:de:
c0:2b:18:d9:ff:11:b5:08:6d:ad:d8:79:1e:fa:02:29:2f:46:
87:80:df:55:b8:22:cc:f0:41:4d:53:02:e3:27:f8:10:85:74:
44:04:59:37:21:e8:12:6d:dd:3c:82:cd:6f:23:d3:e3:15:b6:
a5:ae:78:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org