Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3136382e302e3235322e302f32322d3332203d3e20323632383534.roa
File: 3136382e302e3235322e302f32322d3332203d3e20323632383534.roa (raw, json)
Hash identifier: l2EqLK42CXmzMY/CfLi22pd5Aw9QXshycqKZXRpBLkc=
Subject key identifier: 94:41:87:50:02:A7:33:AE:30:44:11:48:4A:BA:7B:92:19:D6:BB:CE
Certificate issuer: /CN=A4C2DF8D77F6DE20C71FA62D3066541A140F8B27
Certificate serial: 549AFAC967F3BA5DB76008C09E1DC78EB81798F6
Authority key identifier: A4:C2:DF:8D:77:F6:DE:20:C7:1F:A6:2D:30:66:54:1A:14:0F:8B:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C2DF8D77F6DE20C71FA62D3066541A140F8B27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3136382e302e3235322e302f32322d3332203d3e20323632383534.roa
Signing time: Fri 11 Oct 2024 23:53:36 +0000
ROA not before: Fri 11 Oct 2024 23:48:36 +0000
ROA not after: Fri 10 Oct 2025 23:53:36 +0000
asID: 262854
IP address blocks: 168.0.252.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:9a:fa:c9:67:f3:ba:5d:b7:60:08:c0:9e:1d:c7:8e:b8:17:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4C2DF8D77F6DE20C71FA62D3066541A140F8B27
Validity
Not Before: Oct 11 23:48:36 2024 GMT
Not After : Oct 10 23:53:36 2025 GMT
Subject: CN=9441875002A733AE304411484ABA7B9219D6BBCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7f:8c:ad:72:81:8c:96:54:c0:eb:23:a6:04:
0d:64:cb:7d:6b:89:72:74:4b:73:fa:a0:9b:12:d2:
b8:f9:7f:89:47:1d:c4:7e:fb:b5:52:7f:44:08:5d:
22:e2:86:36:55:0d:cc:c0:7e:fc:7d:10:1f:1e:43:
b9:f5:da:07:5c:fe:98:1a:24:43:8e:7d:24:b7:3e:
04:fa:d9:e5:ca:20:b1:3b:fe:02:10:79:e6:e4:f6:
98:6f:cc:98:0a:0d:ac:72:32:1c:6c:98:40:c7:16:
dc:13:27:68:e0:29:67:34:05:43:07:49:0c:61:fe:
7e:d4:66:20:70:e6:a0:32:01:c5:8b:95:e8:e8:5f:
de:29:ed:85:56:7d:be:a6:5e:bf:25:4f:9e:0d:26:
b5:fb:29:9e:a8:7c:6c:40:50:4d:48:bc:19:da:5d:
c5:8a:b8:3a:ee:1b:b2:0d:07:74:75:02:1a:7a:7c:
7b:5f:46:ce:7f:20:2e:e8:18:a7:8d:c6:d4:0d:51:
64:f6:c2:22:62:e8:82:d9:8b:0d:01:c4:0e:92:86:
a4:f5:e1:e1:16:5e:df:c3:31:a3:07:c4:31:40:4e:
95:08:39:ad:67:b5:4a:75:8b:8d:aa:be:a3:96:66:
69:d9:bd:ee:1e:82:85:af:00:97:ea:6f:68:c0:8d:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:41:87:50:02:A7:33:AE:30:44:11:48:4A:BA:7B:92:19:D6:BB:CE
X509v3 Authority Key Identifier:
keyid:A4:C2:DF:8D:77:F6:DE:20:C7:1F:A6:2D:30:66:54:1A:14:0F:8B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/A4C2DF8D77F6DE20C71FA62D3066541A140F8B27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C2DF8D77F6DE20C71FA62D3066541A140F8B27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FNjzx5VdKKfVA8X54KYjsABHsYaEAzaN7M3Ms2xXY77P/0/3136382e302e3235322e302f32322d3332203d3e20323632383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.252.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ff:6a:8d:b2:2d:86:ba:ac:3e:71:92:ab:f3:ff:98:44:8e:
22:9d:a6:37:57:b1:45:e3:f1:0f:8c:50:bb:35:72:d7:82:5d:
f4:08:2e:43:1c:08:49:53:0e:e6:c9:1f:47:1f:40:c9:bb:a5:
01:eb:b7:36:0e:77:28:02:be:27:ae:53:51:5b:9d:6f:33:fb:
89:79:9d:c4:2e:ba:1a:95:5d:5c:74:0a:a3:a6:21:c9:d4:0d:
c6:2d:70:f6:6c:f9:9f:fa:eb:ce:c0:e5:ce:93:94:42:31:97:
bd:a4:5b:db:f1:2b:5b:f1:f4:83:d7:07:9c:e9:10:cb:33:45:
00:ca:98:ac:74:21:29:64:ff:38:5a:1c:06:20:1c:50:fe:1c:
3d:75:9f:29:56:7a:8e:3e:70:c1:f5:43:93:d2:02:9c:ee:18:
52:65:ef:eb:d3:1b:d2:60:5c:e9:85:47:21:39:72:7e:a3:3b:
3a:c3:b9:3d:c2:63:c2:f9:73:1d:87:c6:d6:f2:c4:38:b4:3b:
bd:e9:1f:f7:02:3d:74:48:2e:8d:af:c7:6e:86:f4:2a:3a:80:
3e:83:27:a6:2a:3a:60:58:23:f0:a8:0c:69:04:81:13:a4:d5:
50:9b:71:4d:20:17:fa:cc:91:38:5f:02:48:20:a4:94:d9:9d:
99:2e:1f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 29 19:20:08 2024 by rpki-client on console-fra.rpki-client.org