Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e37312e302e302f32302d3234203d3e203238363637.roa
File: 3137372e37312e302e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: /zHgE7juXY5GBGgHZ2YGnOVZ5WqiYALLswswzZHMk5A=
Subject key identifier: 4B:D4:E4:8C:BD:BA:34:9F:DD:A4:58:C9:B1:32:32:D4:F8:30:EF:7E
Certificate issuer: /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial: 771318B9F8C25F97F4132651F9A912C416349A18
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e37312e302e302f32302d3234203d3e203238363637.roa
Signing time: Fri 03 May 2024 20:09:37 +0000
ROA not before: Fri 03 May 2024 20:04:37 +0000
ROA not after: Fri 02 May 2025 20:09:37 +0000
asID: 28667
IP address blocks: 177.71.0.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:13:18:b9:f8:c2:5f:97:f4:13:26:51:f9:a9:12:c4:16:34:9a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Validity
Not Before: May 3 20:04:37 2024 GMT
Not After : May 2 20:09:37 2025 GMT
Subject: CN=4BD4E48CBDBA349FDDA458C9B13232D4F830EF7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f4:66:50:c0:1c:66:ca:85:b5:40:f4:50:cd:
e4:07:c3:ce:ee:de:3a:fd:33:39:ed:99:6a:5b:33:
a8:7f:aa:5c:e9:2a:08:bd:4f:da:8f:2d:fc:72:6b:
79:ea:5b:e9:7d:7a:a5:e6:0b:53:b1:3c:d8:85:37:
ed:97:20:01:f5:1d:83:42:4e:dd:c4:49:fe:8b:d9:
88:ee:d3:2b:13:c2:f4:ba:11:96:fa:25:d9:bf:f7:
ee:e4:bf:5f:8f:28:dc:af:c8:7b:16:4e:d8:4c:64:
63:3c:d2:9d:2b:04:d5:e1:f8:15:16:0a:f6:51:93:
72:30:b2:cb:6a:f5:5a:c6:9b:3e:5a:c4:b0:f0:21:
e1:03:9a:7a:45:f0:8a:0c:ef:bf:7d:53:17:c1:9c:
b7:4e:b1:ff:21:ab:d0:e9:fe:61:fa:a3:44:d3:5a:
eb:d3:24:88:57:79:b2:a5:d2:2a:01:92:5d:70:c4:
a8:eb:48:fb:fb:ed:35:c9:66:2b:19:1b:5d:27:99:
14:38:2f:6c:13:9d:12:13:4a:31:92:49:ea:08:74:
0e:fa:68:a7:25:1a:4d:a6:9f:60:a9:96:0f:6d:6d:
91:84:03:9a:9f:ce:15:35:e5:88:46:9a:f0:98:1b:
f6:a6:e7:28:d0:4a:52:b8:ff:4d:e1:1e:2d:34:d9:
e7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:D4:E4:8C:BD:BA:34:9F:DD:A4:58:C9:B1:32:32:D4:F8:30:EF:7E
X509v3 Authority Key Identifier:
keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3137372e37312e302e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.71.0.0/20
Signature Algorithm: sha256WithRSAEncryption
34:12:f1:81:e1:50:f7:3e:45:9d:f1:da:d0:6b:90:20:f7:fc:
85:65:b1:e6:ee:82:9c:b8:08:55:f7:18:6c:bb:5e:6f:84:d0:
e0:4b:c4:ff:ea:08:71:92:c8:ea:64:07:46:96:df:b6:fe:99:
1f:78:da:85:67:59:6e:d2:ee:04:53:da:0e:a9:70:68:6c:69:
9f:8f:85:ab:05:e7:e2:ec:bc:a8:33:2d:23:da:e2:3e:88:ff:
bf:94:73:b4:81:5a:93:e5:92:85:6a:71:90:b4:f6:0f:34:6b:
c2:a3:dc:60:05:39:14:76:39:ab:26:56:0c:0e:41:88:3c:d7:
5f:66:b0:65:d9:f5:cf:0a:2d:1c:26:18:ce:25:89:b0:f4:c0:
cf:9e:6d:34:98:bd:54:9e:53:db:f6:54:0f:25:ef:af:9e:1e:
6f:68:36:f5:06:14:ac:6c:fe:8a:fa:d0:87:ee:ca:93:75:ec:
c9:1f:35:a8:06:c8:ef:26:63:ed:af:be:45:c7:05:8b:9e:a5:
8e:2c:86:3b:de:26:e3:38:8e:ef:64:29:c0:2a:64:01:61:1e:
e6:80:bb:07:66:87:92:f6:b0:c6:d1:20:1b:ad:53:21:e3:ac:
b7:c0:61:3f:bf:b9:22:03:8e:24:88:e8:08:c3:14:ec:57:79:
ee:a5:ed:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 10:21:42 2024 by rpki-client on console-ams.rpki-client.org