Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa
File: 3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa (raw, json)
Hash identifier: hf/XXRFmc2m8U4Gig266i3u+bn9D2hZ604MLQpJru5c=
Subject key identifier: 14:EF:FC:0D:24:B7:1C:97:67:5C:EA:6A:AF:FF:58:AD:38:BB:96:0D
Certificate issuer: /CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Certificate serial: 1BDAE0773B9C121D8A71CAD2B06ECB0283C9E01C
Authority key identifier: 68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa
Signing time: Thu 04 Apr 2024 10:58:33 +0000
ROA not before: Thu 04 Apr 2024 10:53:33 +0000
ROA not after: Thu 03 Apr 2025 10:58:33 +0000
asID: 263500
IP address blocks: 177.223.60.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:da:e0:77:3b:9c:12:1d:8a:71:ca:d2:b0:6e:cb:02:83:c9:e0:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=688CFC6ED295D85CCEC2EEE0687D7F1077721DC1
Validity
Not Before: Apr 4 10:53:33 2024 GMT
Not After : Apr 3 10:58:33 2025 GMT
Subject: CN=14EFFC0D24B71C97675CEA6AAFFF58AD38BB960D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:2d:c5:96:c0:28:24:19:80:7d:02:b9:8b:
71:76:74:e8:88:1b:6f:93:b9:75:e8:57:a4:61:60:
9e:9d:eb:b3:f7:7b:95:77:93:ac:11:86:3b:11:59:
00:d9:fc:ce:50:e1:3e:88:98:ec:20:a4:ad:a7:e2:
03:cb:50:4d:33:05:a1:de:cd:92:01:f9:16:b4:47:
6f:c5:23:2a:41:bb:32:4b:ea:9c:2d:8a:98:16:15:
ef:4d:5f:49:60:f3:a8:60:ba:75:9a:8f:ab:89:e9:
9a:3e:46:cd:f8:6a:41:8d:3c:ba:a6:16:f4:66:12:
60:fd:6a:a6:2a:16:36:cd:e8:62:d3:24:ce:3a:d4:
9c:c0:4d:47:31:7f:47:c3:9f:35:fe:1c:42:f0:8c:
2b:c7:77:42:6f:50:f7:ed:dc:3e:0d:47:d4:1d:2e:
b7:96:b4:f4:7a:f9:a3:bf:f5:f8:1a:a6:c0:72:28:
f2:2c:98:d8:86:3b:37:2d:71:42:e2:dc:89:d1:46:
06:d8:9d:f5:22:46:a3:3c:f8:e3:8b:60:7a:8f:a3:
7a:e9:c5:6e:da:35:88:39:5d:ca:26:cb:13:3d:89:
cb:75:84:90:76:4c:63:17:e5:be:10:f3:83:d2:75:
22:af:70:59:46:ae:ca:60:66:86:00:eb:a0:47:e6:
83:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:EF:FC:0D:24:B7:1C:97:67:5C:EA:6A:AF:FF:58:AD:38:BB:96:0D
X509v3 Authority Key Identifier:
keyid:68:8C:FC:6E:D2:95:D8:5C:CE:C2:EE:E0:68:7D:7F:10:77:72:1D:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/688CFC6ED295D85CCEC2EEE0687D7F1077721DC1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfgwUDQt9odgQzmaAbdMSnFWjeZw3KCBnX8Ee9f2pXdt/1/3137372e3232332e36302e302f32342d3234203d3e20323633353030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.223.60.0/24
Signature Algorithm: sha256WithRSAEncryption
93:f1:26:13:09:13:44:12:c2:21:4b:61:32:65:dd:6d:10:0f:
50:e2:ef:15:3d:f2:60:c3:36:aa:68:38:62:f8:cd:bc:bb:ce:
8c:8b:b3:80:fa:b2:b3:3c:88:26:06:c9:db:3b:c9:2c:96:51:
da:d5:cc:b3:6c:80:c5:8d:f8:66:88:fb:01:1c:0e:b4:7f:9c:
04:e8:19:57:3e:dc:51:7f:e7:65:36:a7:b8:fd:3f:8c:19:a3:
ad:85:c1:b3:ac:fe:c5:61:e1:d9:2a:17:ae:33:2c:92:c6:cd:
41:64:ff:5f:97:15:da:c9:3d:ef:bd:fa:e0:99:79:67:04:8e:
ce:3a:13:34:40:6a:ff:3f:88:77:ba:a9:c9:74:ce:e7:bf:e4:
e7:07:36:d8:cf:e9:7a:6f:d8:0c:af:34:bc:0a:a3:05:14:fb:
56:ce:ff:0a:e6:27:e9:ec:2d:2e:91:4f:0d:8b:16:93:5c:4d:
2a:29:d9:4e:8c:ea:96:65:19:5f:21:13:c0:49:a7:0f:d5:d8:
64:cf:df:20:de:d4:32:56:1d:9e:93:18:ef:b5:b8:77:24:5b:
b6:06:e7:e6:2e:36:5b:07:7f:6c:41:58:0f:00:89:bf:d4:53:
75:8b:47:80:ef:f9:94:b3:ce:2d:7c:37:06:40:b2:af:a9:fe:
c5:c1:93:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 3 09:47:01 2025 by rpki-client on console.sobornost.net