Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3230312e3135302e3132302e302f32322d3232203d3e203631383632.roa
File: 3230312e3135302e3132302e302f32322d3232203d3e203631383632.roa (raw, json)
Hash identifier: YGTheVSXKsgFHw6lxsDpm+ktVY7Is0VBjXdi6fBiLp8=
Subject key identifier: 91:B4:EF:59:8A:04:17:AB:8D:3D:DF:6A:21:38:FF:0B:8C:52:A8:56
Certificate issuer: /CN=DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B
Certificate serial: 7380F3AEEF9426229A72049232759722923F938A
Authority key identifier: DD:BE:CC:AC:2A:F7:7D:D5:05:3A:F7:9B:57:C1:DE:38:14:E6:3E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3230312e3135302e3132302e302f32322d3232203d3e203631383632.roa
Signing time: Tue 24 Sep 2024 18:03:15 +0000
ROA not before: Tue 24 Sep 2024 17:58:15 +0000
ROA not after: Tue 23 Sep 2025 18:03:15 +0000
asID: 61862
IP address blocks: 201.150.120.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:80:f3:ae:ef:94:26:22:9a:72:04:92:32:75:97:22:92:3f:93:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B
Validity
Not Before: Sep 24 17:58:15 2024 GMT
Not After : Sep 23 18:03:15 2025 GMT
Subject: CN=91B4EF598A0417AB8D3DDF6A2138FF0B8C52A856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:8a:4e:0a:14:9f:60:2e:90:17:10:48:d8:
cb:80:39:6f:3f:18:cf:60:43:6e:eb:2b:73:7b:cc:
93:ec:2a:19:73:c7:fb:9b:3d:13:25:99:33:60:2a:
88:0b:56:75:cf:8d:20:86:da:fa:de:d0:b4:df:f3:
cb:2a:3f:6b:cf:c8:88:a3:2e:52:40:da:67:f4:1b:
2f:72:20:21:4c:9f:bf:0a:a1:ff:fc:7b:df:54:14:
c2:57:ba:5d:dc:63:e4:3f:9b:2b:cf:4c:eb:65:b4:
ec:6e:f5:f5:64:c2:19:a0:77:3f:89:5a:aa:34:b9:
85:bd:de:6a:88:b2:ae:ab:e1:b7:8e:99:ef:9c:66:
73:2d:b4:3f:14:79:0d:23:01:da:05:a3:cc:aa:fc:
da:44:0b:c9:15:d3:9d:d7:23:10:4c:67:58:bb:1e:
b9:8f:25:4b:11:c9:16:cc:49:55:f3:53:79:ac:5b:
d7:9f:27:4b:1a:63:11:bf:b0:f9:4c:2c:9b:a2:25:
9b:1e:13:a3:ae:40:8b:bd:70:d8:d8:3e:8d:b1:f0:
01:1c:40:31:cb:7e:46:d0:42:cc:59:e0:87:f1:c6:
f0:c5:f8:51:f1:4a:59:d7:72:cf:a3:65:9a:34:a0:
87:70:85:6c:56:70:65:0f:9a:3c:06:23:d1:8b:f4:
a6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B4:EF:59:8A:04:17:AB:8D:3D:DF:6A:21:38:FF:0B:8C:52:A8:56
X509v3 Authority Key Identifier:
keyid:DD:BE:CC:AC:2A:F7:7D:D5:05:3A:F7:9B:57:C1:DE:38:14:E6:3E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBECCAC2AF77DD5053AF79B57C1DE3814E63E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/SohvjFHKXppkNQk7QbqyejN5fPkZ2cGrP49r6uAQvcs/0/3230312e3135302e3132302e302f32322d3232203d3e203631383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.150.120.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:ad:d2:41:d5:a6:f8:f4:ed:21:2b:87:6a:4b:64:33:cc:d3:
a9:c8:54:f3:2c:eb:ba:48:99:57:0e:87:de:d3:8b:19:82:ac:
05:bd:1a:c4:fd:e0:67:1b:bf:76:5d:76:0f:d0:b5:49:25:80:
01:f3:73:49:12:eb:f9:80:c9:fc:36:50:47:7d:d7:b2:e7:0f:
f5:6f:71:df:e5:52:8b:7e:b1:1c:e4:08:ba:f6:ba:92:5c:d1:
af:27:75:5b:e6:0d:c1:03:9f:0f:c3:0c:f3:76:7a:e9:0f:51:
d7:d8:37:1d:c4:41:49:90:30:a1:76:26:dd:64:4b:e4:67:f9:
fc:ac:0c:ff:f6:ed:84:96:ae:b2:cd:56:ea:db:6e:f7:8f:76:
dd:d1:63:38:63:f3:a6:f8:fc:4e:a9:12:1e:a0:82:cb:34:13:
1e:06:b3:88:89:28:0d:4a:54:41:3e:aa:a1:1e:fd:b8:83:e4:
46:b2:e1:6f:64:e6:f2:7d:ba:dd:1f:c7:cb:2f:96:6b:59:df:
fc:ea:d9:dd:55:2c:31:0b:e8:31:cb:41:30:c5:3b:e0:c9:a7:
76:20:91:31:28:6c:5c:ca:94:29:f4:93:52:e9:5c:d6:f1:9a:
a2:76:3e:6a:6b:f5:ea:ab:6e:b9:06:62:5a:5c:36:2b:57:1e:
77:ed:10:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 2 12:47:48 2024 by rpki-client on console-fra.rpki-client.org