Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/3137302e37382e3135362e302f32322d3234203d3e203532383630.roa
File: 3137302e37382e3135362e302f32322d3234203d3e203532383630.roa (raw, json)
Hash identifier: hmjsv+DJBCtLHYzuXkWcp75s6NvFSxpOP4vG4UhZovs=
Subject key identifier: 51:24:A4:07:64:9C:86:78:EE:A9:65:F7:56:E6:48:EA:A8:42:CE:8E
Certificate issuer: /CN=A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E
Certificate serial: 5FD067A4C3BD38EE966C4461A5E09F38F8B46B33
Authority key identifier: A5:D7:1B:E2:C3:B9:16:04:1D:EE:4A:7C:A0:95:46:42:EB:D3:A3:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/3137302e37382e3135362e302f32322d3234203d3e203532383630.roa
Signing time: Thu 11 Jul 2024 14:18:43 +0000
ROA not before: Thu 11 Jul 2024 14:13:43 +0000
ROA not after: Thu 10 Jul 2025 14:18:43 +0000
asID: 52860
IP address blocks: 170.78.156.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:d0:67:a4:c3:bd:38:ee:96:6c:44:61:a5:e0:9f:38:f8:b4:6b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E
Validity
Not Before: Jul 11 14:13:43 2024 GMT
Not After : Jul 10 14:18:43 2025 GMT
Subject: CN=5124A407649C8678EEA965F756E648EAA842CE8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:c6:ea:ee:8e:0a:35:62:95:2d:d5:31:e8:
8e:c8:12:3b:2c:8f:99:e5:ba:7f:fd:87:df:a7:cb:
c5:ba:7b:05:17:a9:37:4a:81:2a:4b:d4:9d:97:41:
ec:3e:65:fe:66:c4:ef:74:2f:1f:11:36:fd:aa:b2:
e0:c0:a4:c3:26:dd:13:13:fe:76:2c:02:95:ef:0a:
a9:1e:ce:e1:16:d6:63:18:37:8b:96:7e:1f:33:cb:
01:ec:bb:7b:d7:e2:ff:bb:f6:36:83:2b:f4:de:35:
ab:33:d6:97:af:8d:aa:00:d5:32:ea:d4:d5:57:b1:
45:2f:fe:6d:af:8e:ec:22:d8:f3:25:8f:5b:45:27:
04:5e:d6:c9:76:1f:37:f1:8b:82:e6:11:be:1d:bb:
05:0b:ac:ce:fc:c6:f5:86:65:46:ff:77:84:3e:0d:
68:3f:f9:5a:19:d3:75:9e:83:5c:9d:12:dc:4e:e3:
53:69:cc:0e:3f:eb:2d:91:4e:3b:9e:05:6f:3b:52:
11:40:ff:00:c3:33:34:4c:3b:ee:95:1a:7f:ed:ab:
04:83:f3:6f:d9:a0:07:61:03:99:bd:b6:78:22:3e:
97:a5:f7:c1:bf:fa:b2:45:f7:77:48:a4:93:66:09:
7f:20:9c:04:72:9e:d4:6d:c9:0d:d5:65:48:33:f1:
6d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:24:A4:07:64:9C:86:78:EE:A9:65:F7:56:E6:48:EA:A8:42:CE:8E
X509v3 Authority Key Identifier:
keyid:A5:D7:1B:E2:C3:B9:16:04:1D:EE:4A:7C:A0:95:46:42:EB:D3:A3:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5D71BE2C3B916041DEE4A7CA0954642EBD3A35E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hr4iSriPvYjL9gMAoZ3w2iMpgo3WxFsZ4y8aG1rKCZuv/0/3137302e37382e3135362e302f32322d3234203d3e203532383630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.78.156.0/22
Signature Algorithm: sha256WithRSAEncryption
23:36:16:9c:12:40:47:db:4a:6f:3d:24:fe:29:4e:bd:11:20:
3d:e2:91:86:db:ff:c2:72:a1:31:45:51:1b:84:3b:88:29:17:
ca:5f:c7:8b:63:89:91:d8:56:f0:aa:46:2b:c1:55:93:73:c1:
a5:c5:8c:35:94:92:bb:c0:a1:2c:6e:8f:17:6f:5d:16:1c:63:
f2:25:19:eb:f5:d3:89:1f:69:41:b9:b4:72:42:b7:e7:5d:19:
0d:6e:8e:07:79:a3:ce:72:00:8e:50:dc:eb:4e:3a:55:e9:80:
b8:06:03:35:55:e6:56:fd:8f:44:2d:33:44:b3:68:50:11:1c:
0d:00:83:01:16:9c:06:84:44:41:b2:0e:b2:d8:4e:c6:5b:52:
de:70:32:58:d1:cc:78:a2:1e:8b:d0:c6:b9:99:85:2e:17:04:
f4:93:a8:b8:ba:03:ed:99:8e:64:b2:9a:2c:37:3d:da:02:b4:
04:2d:07:3d:fb:1e:f5:2c:6b:0a:b5:41:d2:f1:e9:be:ce:92:
f2:95:04:9d:47:43:c9:38:08:f5:13:a8:93:9b:6f:8a:c0:f8:
fe:9e:4f:d1:9f:c0:bd:c1:37:eb:3e:be:90:14:c8:70:70:e6:
12:7e:38:e8:9c:1d:75:a7:87:37:75:d8:f5:3d:26:dc:e9:ca:
4b:92:70:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:33 2024 by rpki-client on console-fra.rpki-client.org