Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
File: 3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa (raw, json)
Hash identifier: cXpG44ZjzNJFam1Ie7kEQgP+9O2J5aAdp7QRCwiLjRM=
Subject key identifier: DA:B9:14:D9:0A:F5:F5:CE:BB:BF:7D:EE:C8:FB:96:C2:73:4E:07:27
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 62851C1D11D0EC0C2A54CA57372500681C07011C
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
Signing time: Wed 12 Jun 2024 13:19:56 +0000
ROA not before: Wed 12 Jun 2024 13:14:56 +0000
ROA not after: Wed 11 Jun 2025 13:19:56 +0000
asID: 262272
IP address blocks: 177.21.128.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:85:1c:1d:11:d0:ec:0c:2a:54:ca:57:37:25:00:68:1c:07:01:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:14:56 2024 GMT
Not After : Jun 11 13:19:56 2025 GMT
Subject: CN=DAB914D90AF5F5CEBBBF7DEEC8FB96C2734E0727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b3:c1:4d:49:b6:f5:c2:82:1c:a3:21:61:bd:
68:f4:2e:77:a7:0c:50:8f:a3:1b:51:5e:4f:91:be:
99:08:0a:c9:89:ec:84:93:54:28:40:c9:02:d1:e6:
9f:5b:fe:2d:20:90:e7:10:38:73:89:d7:27:8b:3d:
d4:e4:3e:22:9f:65:61:7f:58:3d:85:1e:1e:98:c0:
c5:ee:a8:45:ee:bb:00:86:2f:7c:66:13:8b:26:76:
99:68:0a:e6:88:16:b1:3b:0d:83:34:5d:2a:4c:41:
5b:79:ec:12:4e:67:74:16:d7:a9:45:81:a3:f0:f1:
27:9e:31:f6:53:01:a6:c3:5e:4b:fd:54:e7:af:b5:
a5:c2:41:f7:32:6d:8c:67:cf:ec:db:1a:39:70:52:
d8:e7:d3:2a:cf:85:68:cc:5e:e6:0f:96:21:79:17:
56:48:5b:68:df:37:bd:90:fa:d8:47:ba:28:ea:2d:
88:cd:7e:22:12:8c:cd:0b:86:e3:41:5f:92:ed:19:
62:17:26:e8:6a:dd:c6:0b:98:40:91:79:00:b3:c9:
22:74:dc:be:5a:fe:d8:1d:b2:4e:a4:8d:46:63:40:
b1:4d:ed:7c:0a:c4:ae:84:85:c3:19:0d:97:12:8c:
20:76:6c:06:b8:99:8c:44:e5:c4:13:c8:4a:b1:f7:
e1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B9:14:D9:0A:F5:F5:CE:BB:BF:7D:EE:C8:FB:96:C2:73:4E:07:27
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3137372e32312e3132382e302f32302d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.21.128.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:36:64:2c:45:c9:bc:ed:cc:e9:56:80:b8:57:b8:27:62:87:
c1:f9:71:19:6f:4d:5e:99:91:d4:9d:e6:4b:ac:7c:53:9c:1a:
9a:ad:14:65:f4:a2:3e:cf:10:25:ec:6c:48:68:ae:21:c3:43:
d1:26:c8:dd:99:83:e0:bd:f6:c4:4b:ed:81:15:bd:e3:67:bc:
fc:71:47:1a:bc:ea:17:8b:d8:51:9a:9b:bf:7f:46:ef:bd:81:
6a:09:38:09:f4:31:92:9d:31:bc:0e:a2:11:1e:81:b3:72:95:
5c:4a:85:ca:6f:00:63:47:a6:08:99:61:5e:cf:11:5d:4f:9b:
57:ae:56:50:ff:d9:44:27:f1:b1:3e:77:63:d2:a4:b3:c7:7d:
3d:b4:f6:e3:2e:52:2a:22:14:ac:37:80:03:8d:50:23:fd:41:
af:2a:82:c3:60:46:21:da:34:5c:f7:ca:16:94:12:15:6e:37:
45:23:17:15:42:f8:a1:a9:4f:4b:55:c1:c2:af:54:31:fa:c5:
7f:07:90:c8:2e:fb:88:ee:9c:44:3b:3d:54:c0:d5:95:ad:ad:
5e:83:53:cb:db:ac:18:3d:c2:a9:07:d1:ff:67:08:17:00:ff:
74:bf:1d:a6:80:d9:05:56:11:a7:5f:af:8c:22:35:bf:79:7f:
aa:21:d6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:40:59 2024 by rpki-client on console-ams.rpki-client.org