Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa
File: 3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa (raw, json)
Hash identifier: 18LPiXHz5Khk7krN+NqvwHWMYoQUtNdHP7+9rDa00nU=
Subject key identifier: 8D:F6:31:A4:7F:48:92:4B:CA:99:16:3D:C5:3C:76:E7:19:C5:AB:E6
Certificate issuer: /CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
Certificate serial: 3972485E0008A611209BCD0F20F388E489D0323B
Authority key identifier: C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa
Signing time: Fri 05 Apr 2024 03:20:40 +0000
ROA not before: Fri 05 Apr 2024 03:15:40 +0000
ROA not after: Fri 04 Apr 2025 03:20:40 +0000
asID: 263441
IP address blocks: 170.233.168.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:72:48:5e:00:08:a6:11:20:9b:cd:0f:20:f3:88:e4:89:d0:32:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4
Validity
Not Before: Apr 5 03:15:40 2024 GMT
Not After : Apr 4 03:20:40 2025 GMT
Subject: CN=8DF631A47F48924BCA99163DC53C76E719C5ABE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:51:cf:89:c6:f6:67:8d:3f:7e:2e:2d:1c:7f:
59:3a:63:19:96:7e:31:1f:e8:80:39:d8:88:c0:04:
0e:4d:ec:67:8e:6e:73:9d:7d:e1:58:c7:cf:4a:00:
9f:b6:be:ef:76:c4:e6:35:df:6e:a4:10:9b:c1:a0:
50:1f:4d:d0:e1:37:05:20:2b:b5:9c:31:a5:a2:2b:
71:7e:10:46:97:7c:2b:64:c3:25:90:b3:8f:af:f2:
6c:c8:2a:a1:c9:b5:e1:79:88:3f:19:18:e0:3c:74:
f6:b8:7c:31:be:64:e9:0f:40:12:e9:51:8a:d1:87:
a1:fe:fc:19:74:6f:f8:08:2e:13:61:e1:0a:22:41:
fc:0d:c5:ee:0e:e4:49:6d:f2:67:3a:ad:67:67:86:
1d:5c:06:89:bd:f1:d6:e6:cc:5b:a1:d1:13:f8:d2:
fc:0a:42:6f:94:47:b6:d5:09:2e:f4:b9:69:8c:7c:
9a:37:6d:e2:58:1f:7d:a9:50:6f:10:3e:a8:67:58:
2e:7e:4e:91:5f:9b:c6:04:88:05:1d:8a:8f:41:fe:
97:e3:da:54:7b:2a:ae:67:d5:ce:cc:fe:a8:e8:0c:
03:09:21:15:bf:e9:e2:39:03:79:8a:85:49:7d:4d:
41:45:69:22:93:9f:09:91:17:86:30:0f:e5:64:f9:
f5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F6:31:A4:7F:48:92:4B:CA:99:16:3D:C5:3C:76:E7:19:C5:AB:E6
X509v3 Authority Key Identifier:
keyid:C3:B6:85:58:E3:6D:44:74:BB:9E:1D:FA:62:37:B9:F0:34:3A:A0:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3B68558E36D4474BB9E1DFA6237B9F0343AA0D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FcrizYV9P6TLwTrhn9L8ZWRkzwMXq7PUefAWNMb3w5zd/1/3137302e3233332e3136382e302f32322d3332203d3e20323633343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.168.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:23:6c:66:a7:57:4d:d2:db:b7:7c:7e:c1:f8:a8:ca:47:e3:
e4:aa:cd:cf:ff:32:75:83:0c:b2:46:6a:56:ee:6f:c8:8d:7c:
c3:09:1b:e7:e9:56:14:76:c3:ae:af:b0:d9:03:0e:85:53:55:
90:4d:5a:9a:76:76:49:c9:08:34:de:89:3f:ce:ce:7c:4b:48:
bc:ff:05:fb:6e:d8:9f:e3:8c:af:39:da:f0:d5:51:d7:ca:59:
f8:67:ed:4e:db:e4:b9:f6:ab:4b:08:81:61:0e:8e:af:dc:a9:
b1:9d:bf:2c:37:4b:80:3c:aa:0f:f0:60:33:71:8c:26:bf:36:
0b:dc:ac:a4:95:a8:ab:8d:24:7f:67:c5:36:b5:e6:07:14:ca:
86:67:55:c3:db:a8:c1:6f:d5:d6:b7:82:8b:fb:76:17:3f:be:
8a:e1:8e:33:ca:c6:c6:d6:e0:eb:60:5d:20:64:11:23:bd:4f:
6b:89:6d:61:09:2d:32:2b:d0:d9:8d:6d:a2:44:7c:ee:54:c8:
17:c4:65:a2:02:b1:14:8d:6a:64:ef:37:29:23:96:00:49:43:
00:82:0a:df:59:02:f3:2b:a8:17:d1:31:d7:3b:d0:ed:71:29:
cf:86:25:7d:f6:9a:08:b2:70:42:1e:6f:27:91:ea:58:39:30:
cf:a8:89:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 14:42:34 2024 by rpki-client on console-ams.rpki-client.org