Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3137302e3234362e382e302f32322d3332203d3e20323635313731.roa
File: 3137302e3234362e382e302f32322d3332203d3e20323635313731.roa (raw, json)
Hash identifier: os0kLnk17fLwUhQRa9rsx1P7eOQ8XiUQLFnIdTgs2Cc=
Subject key identifier: D5:F2:03:03:8B:5F:43:D7:FA:AD:80:55:9E:88:27:4B:83:CC:36:CA
Certificate issuer: /CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
Certificate serial: 1BA7DD301001490A674BA9003D52CFFECB22332B
Authority key identifier: 29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3137302e3234362e382e302f32322d3332203d3e20323635313731.roa
Signing time: Wed 21 Aug 2024 14:59:44 +0000
ROA not before: Wed 21 Aug 2024 14:54:44 +0000
ROA not after: Wed 20 Aug 2025 14:59:44 +0000
asID: 265171
IP address blocks: 170.246.8.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:a7:dd:30:10:01:49:0a:67:4b:a9:00:3d:52:cf:fe:cb:22:33:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294E43ABE5D56723EB3F797DAEEEBE78EC276DE8
Validity
Not Before: Aug 21 14:54:44 2024 GMT
Not After : Aug 20 14:59:44 2025 GMT
Subject: CN=D5F203038B5F43D7FAAD80559E88274B83CC36CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:79:9d:61:24:e4:1f:38:7c:19:b4:9f:bb:78:
db:5b:28:b7:ff:f3:aa:ea:bc:c5:18:64:59:14:47:
bc:e0:c6:6b:86:52:81:ce:ca:8a:30:f6:f7:84:0c:
25:01:43:c3:9b:78:22:a8:39:fc:f9:0a:fe:7d:ac:
c7:78:29:13:df:27:98:30:11:a6:14:cc:fa:53:4b:
bc:7b:ee:07:21:8d:da:4d:40:8f:af:4a:16:9c:9b:
da:51:2a:2c:a0:75:2c:63:34:da:b3:15:34:a7:b1:
e9:f9:cf:8b:75:b6:55:fc:c3:0d:4f:f5:f1:f3:91:
05:9d:60:3b:82:9b:10:6c:3b:7b:53:dd:d2:39:5f:
88:11:eb:1b:a0:5d:9c:7d:59:37:b4:91:4b:de:f1:
dc:cc:51:05:a5:d7:85:c1:34:f9:6e:43:e4:41:ec:
89:ab:31:34:53:5f:64:3a:ff:3b:91:c7:2d:14:4c:
c3:46:37:d5:12:15:bd:eb:cd:11:d2:6c:17:38:5b:
6d:a3:bb:9f:e4:4b:79:09:59:a6:e9:5e:7b:a7:1e:
30:38:04:91:be:07:95:93:9d:95:48:5b:b5:22:b1:
f4:66:ea:d9:05:aa:c4:6c:39:12:57:5c:43:ac:91:
b2:6e:90:c1:41:04:83:4d:a8:9b:76:12:ae:bb:11:
c9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F2:03:03:8B:5F:43:D7:FA:AD:80:55:9E:88:27:4B:83:CC:36:CA
X509v3 Authority Key Identifier:
keyid:29:4E:43:AB:E5:D5:67:23:EB:3F:79:7D:AE:EE:BE:78:EC:27:6D:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/294E43ABE5D56723EB3F797DAEEEBE78EC276DE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J45f7hkJPYxGviQ9D1rdz5xTykdU6eBKsMmJnjZwXutN/0/3137302e3234362e382e302f32322d3332203d3e20323635313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.246.8.0/22
Signature Algorithm: sha256WithRSAEncryption
13:4e:33:f4:be:d6:cc:41:7f:46:cd:5f:b0:8f:89:37:8e:9a:
70:fc:40:51:cf:d7:53:66:3f:f7:5d:9f:d4:0b:04:c8:31:f4:
77:f1:3e:38:44:e5:c3:fb:68:fb:89:dc:b0:0c:40:0d:a5:9d:
e6:de:07:c1:ea:b6:41:f4:7d:25:86:f2:ee:95:f6:6a:bd:67:
06:18:33:ea:3a:df:0f:53:d7:a5:13:63:2e:19:d0:c0:b8:53:
9c:0c:7e:61:ac:57:74:ff:b0:b6:a4:f1:6a:74:e4:5e:83:a4:
7e:2f:fc:ca:ab:21:e5:2e:7f:bf:b2:5e:5e:3f:5b:9f:e0:45:
ca:93:58:ba:d8:7f:1b:20:33:25:44:f5:47:68:cc:59:0f:dd:
d6:40:3c:5a:29:3a:56:c2:81:a0:6a:b2:e8:52:19:52:75:f9:
d4:7e:3a:24:7f:2e:bf:fb:58:df:63:c5:07:b3:c8:d0:18:c0:
fd:4b:b5:69:09:cc:a5:b9:cb:6e:b0:58:38:e3:9c:24:77:aa:
73:db:06:3e:60:6f:f2:c9:81:cb:b0:b2:f2:58:93:d1:8d:3b:
84:e0:44:26:67:33:d3:6f:c3:3f:f5:b7:9b:4d:b6:fa:2d:df:
d3:9f:c5:0e:1d:b8:14:6c:43:b9:80:8b:4c:b8:ba:20:71:be:
ca:93:c3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 13:23:02 2024 by rpki-client on console-ams.rpki-client.org