Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3234203d3e203532373732.roa
File: 3137372e33392e3135362e302f32322d3234203d3e203532373732.roa (raw, json)
Hash identifier: baHWVG/mZmchWBZefpl7EO3d3Uhj83J8T+dZGJ9+4yY=
Subject key identifier: 84:D9:42:48:66:30:C6:7F:55:07:43:DC:E7:9C:89:72:67:0E:C6:D2
Certificate issuer: /CN=17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4
Certificate serial: 1BDE78DE3E5A3BC066E519E1A5E1837633F7493A
Authority key identifier: 17:AA:76:BA:7A:1A:D6:7A:50:01:A6:D4:2C:CE:A5:33:CB:30:F0:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3234203d3e203532373732.roa
Signing time: Fri 12 Jul 2024 00:14:18 +0000
ROA not before: Fri 12 Jul 2024 00:09:18 +0000
ROA not after: Fri 11 Jul 2025 00:14:18 +0000
asID: 52772
IP address blocks: 177.39.156.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:de:78:de:3e:5a:3b:c0:66:e5:19:e1:a5:e1:83:76:33:f7:49:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4
Validity
Not Before: Jul 12 00:09:18 2024 GMT
Not After : Jul 11 00:14:18 2025 GMT
Subject: CN=84D942486630C67F550743DCE79C8972670EC6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:36:fa:9c:10:fc:b0:aa:55:ea:3e:2f:5f:5c:
01:54:97:66:7c:c9:e8:d1:69:68:c8:57:63:89:76:
cc:3d:1b:0c:22:b4:bf:0d:6e:ee:c8:16:b8:59:b4:
e8:e8:69:ad:02:69:65:1b:9c:bc:22:39:95:8a:c1:
86:42:78:f4:ba:f2:42:13:75:80:af:9d:12:06:36:
c0:15:2f:fe:6c:0b:73:68:a8:f0:5e:16:7e:f2:27:
88:8f:b0:dc:d2:cd:44:45:30:31:3a:40:90:70:f7:
9e:b9:7d:f8:3c:9a:1a:b4:de:7b:30:e7:7b:f7:ab:
e5:cb:70:26:41:d7:83:70:28:af:6b:ee:c8:c1:15:
a0:89:74:3e:8a:16:49:56:ee:fb:23:d2:fd:cd:90:
40:04:2a:64:9d:c7:6c:91:47:65:06:07:fd:78:af:
21:bb:52:7c:84:d4:b8:fa:fe:9c:cd:91:91:54:92:
5b:98:eb:25:22:a2:1f:69:cc:4e:60:27:57:59:d4:
32:d0:36:e8:07:5f:32:4e:2a:26:b8:af:01:7d:78:
13:6c:aa:83:5c:43:22:d3:93:a6:c8:b1:77:d7:9d:
19:e7:16:ab:6b:70:44:14:bd:6e:03:40:fb:dc:f5:
8f:b6:8f:c3:ae:0c:8c:29:8e:1f:3f:1b:58:02:30:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:D9:42:48:66:30:C6:7F:55:07:43:DC:E7:9C:89:72:67:0E:C6:D2
X509v3 Authority Key Identifier:
keyid:17:AA:76:BA:7A:1A:D6:7A:50:01:A6:D4:2C:CE:A5:33:CB:30:F0:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/17AA76BA7A1AD67A5001A6D42CCEA533CB30F0E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/3137372e33392e3135362e302f32322d3234203d3e203532373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.39.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:c2:b1:ad:6c:16:d8:16:35:04:a9:45:fe:6c:d0:6c:1c:06:
21:40:fc:98:67:c5:24:ea:41:1e:bc:b8:9f:d9:2c:6b:09:57:
80:39:5f:ef:b6:a4:38:38:6c:71:10:6a:66:8a:9d:f5:04:62:
39:ec:fb:ad:f2:2a:71:a4:d9:c9:44:aa:51:98:67:1e:37:68:
32:57:61:6a:f6:a9:a9:45:3d:aa:d9:81:e0:8e:47:c2:f3:7d:
84:5f:2e:25:2b:0c:2e:5f:05:84:30:48:95:b2:fe:79:99:a3:
2b:ed:5d:3b:b2:18:ee:c7:f4:f0:d3:d1:4d:29:c9:05:05:2f:
66:56:b9:80:c3:22:a1:af:bf:c2:05:72:a6:3a:6e:73:2d:1f:
63:28:cc:54:a6:0a:ea:51:7a:df:7c:fd:54:6d:43:dc:77:1b:
d6:46:4b:35:48:11:a3:ab:13:99:07:6c:1c:62:f4:d5:f1:0e:
61:ce:b3:6f:24:d7:02:45:54:d5:af:a8:a2:31:e7:fa:43:9a:
d5:fa:59:2e:ca:b9:a3:f2:e1:bb:1b:d7:b9:99:da:1f:e7:3b:
d0:b7:f0:9e:82:a2:d9:98:72:e3:df:76:68:32:e2:c8:25:ed:
3e:51:73:a0:18:20:d9:e8:a3:91:0c:bb:c2:5e:fa:21:91:55:
bc:4e:4d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 08:03:26 2024 by rpki-client on console-fra.rpki-client.org