Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
File: 3137372e3130372e302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: gKJqPFuFRzpumaCk0uk7O74Ge3xQcvPwZ9O+qZpUDPI=
Subject key identifier: C2:DE:89:98:63:D9:88:D5:F9:5C:F4:AE:BE:D2:34:AF:C2:2D:06:80
Certificate issuer: /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial: 3F7222D876773BED287E6CC0E46C1B8A8F991E42
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
Signing time: Fri 03 May 2024 20:09:43 +0000
ROA not before: Fri 03 May 2024 20:04:43 +0000
ROA not after: Fri 02 May 2025 20:09:43 +0000
asID: 28667
IP address blocks: 177.107.0.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:72:22:d8:76:77:3b:ed:28:7e:6c:c0:e4:6c:1b:8a:8f:99:1e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Validity
Not Before: May 3 20:04:43 2024 GMT
Not After : May 2 20:09:43 2025 GMT
Subject: CN=C2DE899863D988D5F95CF4AEBED234AFC22D0680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:89:a8:c6:ae:1a:49:6b:0c:f3:2c:4e:d1:
d0:0c:c5:cc:cb:b6:1f:1d:25:da:1e:6c:6c:95:c4:
0a:81:ac:ae:65:00:f5:37:2d:d7:87:3f:c6:61:91:
5d:d2:b7:39:b2:9d:c0:8c:26:1e:81:d7:36:23:f2:
93:a4:72:c6:93:dc:5b:95:32:37:6e:ab:2f:15:19:
7a:0c:d0:19:94:ae:bf:5a:a8:9f:b4:40:6b:87:23:
43:c8:07:88:bd:5a:88:83:56:1f:a9:2c:d0:af:2d:
73:c9:92:1e:01:03:1b:a0:2d:d5:1c:25:69:c3:28:
05:75:9f:2e:4f:60:db:4b:bd:14:7a:02:7d:b4:17:
ec:b5:85:f4:80:1a:f7:89:9c:45:55:96:d4:ad:d1:
81:62:67:cc:e3:17:ef:77:fe:d7:45:6b:43:a1:93:
d5:e2:16:31:4d:0a:cc:99:80:ef:b5:87:c0:2c:da:
b5:71:8f:f9:06:9b:87:05:0c:53:52:06:c0:82:bf:
9c:e6:b6:bc:2d:74:5d:ae:d2:3c:d9:70:d4:f4:dd:
83:8b:fa:fd:91:c8:5a:aa:54:f7:92:fe:ce:f3:63:
e5:97:b8:2c:f2:f6:e7:e7:17:2a:5c:90:dd:4a:4f:
23:6b:5e:dc:03:c8:93:15:b7:24:04:92:c6:0c:ef:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DE:89:98:63:D9:88:D5:F9:5C:F4:AE:BE:D2:34:AF:C2:2D:06:80
X509v3 Authority Key Identifier:
keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e3130372e302e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.107.0.0/20
Signature Algorithm: sha256WithRSAEncryption
b4:7f:ef:83:bc:aa:a9:5e:aa:14:6c:20:2c:d5:77:26:5d:6d:
6f:c0:95:ce:02:ec:0a:16:ab:85:0e:da:c3:71:83:0f:02:f2:
f2:4c:8f:7d:8e:c3:3e:f5:e8:84:46:f2:c4:5a:07:ac:67:60:
72:26:a2:84:33:18:19:15:2f:bd:19:60:54:94:02:29:c7:3e:
dd:bf:f0:da:c7:0f:b9:e3:78:a5:57:a3:eb:c3:e7:10:4c:4d:
0f:9b:8d:e1:18:a3:92:79:38:9e:b5:60:0b:77:b5:87:97:28:
d7:3c:95:c1:9d:a2:82:5a:f4:c6:2f:fb:6d:76:3f:05:ac:b4:
49:11:e2:73:43:37:4f:da:e3:93:3e:d7:69:03:ab:0f:77:02:
39:b5:5b:16:1c:83:e5:fc:08:74:af:88:10:49:4d:15:8b:a5:
86:cc:54:30:07:dd:fe:fb:f9:f3:7e:90:59:de:9a:e0:16:70:
c7:59:f2:cc:dd:05:4b:dd:06:c5:53:8a:1f:a7:c1:2b:0e:9d:
a6:7f:47:3d:c4:6d:85:f5:b3:92:da:df:25:51:89:38:5e:52:
79:05:7c:26:13:f0:57:c6:de:9a:b8:a8:d6:c8:6f:cc:be:a5:
b6:4f:86:5d:fc:38:c8:8c:49:80:a4:15:4f:4e:d6:fb:b7:1c:
9c:2e:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 10:55:50 2024 by rpki-client on console-fra.rpki-client.org