Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32332d3234203d3e20323632353930.roa
File: 3137302e3233312e3137322e302f32332d3234203d3e20323632353930.roa (raw, json)
Hash identifier: gnysEClXhqDXvH0LPsl+XntV6uK1zhM97VRPv9EMzpo=
Subject key identifier: A6:7B:1D:A6:FC:04:5B:C9:85:20:7E:7A:B5:E6:50:6A:B8:57:2B:9A
Certificate issuer: /CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Certificate serial: 681551739194119C81EF6E11A04D9922869A59E1
Authority key identifier: E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32332d3234203d3e20323632353930.roa
Signing time: Sat 08 Feb 2025 00:56:13 +0000
ROA not before: Sat 08 Feb 2025 00:51:13 +0000
ROA not after: Sat 07 Feb 2026 00:56:13 +0000
asID: 262590
IP address blocks: 170.231.172.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:15:51:73:91:94:11:9c:81:ef:6e:11:a0:4d:99:22:86:9a:59:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02
Validity
Not Before: Feb 8 00:51:13 2025 GMT
Not After : Feb 7 00:56:13 2026 GMT
Subject: CN=A67B1DA6FC045BC985207E7AB5E6506AB8572B9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b3:8a:43:5c:55:cb:5d:86:1f:40:f5:75:98:
00:f3:43:bd:2a:45:0b:b3:19:38:ea:19:df:fa:2c:
b3:98:25:5c:d5:5d:f7:3c:56:81:eb:64:91:21:d3:
f1:42:fb:2f:ab:ed:ea:b1:ed:75:1e:9f:a3:72:1c:
a9:98:02:c6:a4:f6:81:67:00:e5:48:4e:c6:3d:d7:
82:89:2d:9d:8e:a5:01:99:c7:2a:1a:a5:b1:31:bb:
19:f5:f7:b4:ae:3e:00:1e:c8:21:bc:b2:b6:5c:ff:
cc:a9:c0:5b:a5:ef:5e:76:25:41:d7:ea:66:bf:46:
94:c1:25:e4:3b:f9:f7:42:f2:fb:30:84:4f:d4:04:
d5:6a:bf:d8:4f:9b:95:e8:2d:c2:c2:3a:64:71:ec:
52:cd:7d:be:78:f1:2d:64:85:d4:fe:f0:34:b4:27:
84:e9:fb:38:e0:ef:55:e1:04:48:f0:12:97:fe:ca:
bd:1e:4f:ec:6f:b4:37:ca:75:00:4e:5f:fd:43:c7:
2d:71:c4:d3:e9:4c:de:9d:e1:7d:f2:3f:04:b7:66:
3a:24:d5:43:67:04:fa:79:d3:ce:a1:43:a7:3e:1a:
64:69:6e:15:31:a5:2e:c8:f2:07:ab:3a:e5:22:1c:
ba:4b:7b:30:f7:9d:be:49:5b:15:a5:af:d1:9d:95:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7B:1D:A6:FC:04:5B:C9:85:20:7E:7A:B5:E6:50:6A:B8:57:2B:9A
X509v3 Authority Key Identifier:
keyid:E5:DB:C8:B1:97:4C:06:30:B4:F7:05:A3:FC:14:49:B3:F4:FE:AC:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E5DBC8B1974C0630B4F705A3FC1449B3F4FEAC02.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1L1grakzfreepv5Ydoqn2JBrWyyRPvYUJ1v1XmrzA1G/0/3137302e3233312e3137322e302f32332d3234203d3e20323632353930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.231.172.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:52:45:45:23:06:c8:b1:dd:2d:f6:3d:7c:29:64:98:a7:4e:
87:e1:52:6a:5c:01:22:fd:5b:8c:fb:a9:48:ed:91:35:a0:41:
19:27:1d:28:6a:0e:37:5a:e3:a2:ff:8c:a0:77:78:c8:c8:03:
88:4d:13:2b:37:56:75:c1:3f:5f:82:da:fa:c8:52:01:8d:4c:
37:14:dd:aa:8b:2f:eb:cd:fd:a8:9f:5c:71:36:9e:0a:ff:7e:
aa:85:17:09:7a:b4:de:03:38:9f:8e:fe:7f:eb:c3:d5:1a:33:
a2:c3:38:20:ee:08:d4:40:27:2f:01:75:59:f8:22:f5:b1:7c:
7c:31:77:52:95:7b:ea:3c:e4:ca:3f:e1:01:7d:1f:96:f9:c7:
56:c9:a5:6b:c4:39:f8:fc:75:12:f8:ea:2c:bc:01:48:46:f3:
91:53:40:a0:c6:04:11:24:4a:2f:2b:13:8d:34:a4:e5:a3:80:
f9:23:79:d1:89:93:31:fa:0b:aa:ef:7e:1e:a6:3c:9a:48:ec:
f7:2e:04:7f:97:3d:8e:e2:3f:a7:06:46:d5:d2:69:59:df:84:
42:e5:ed:b4:2b:b4:0f:31:3d:f1:0b:7a:a8:50:c2:df:08:ab:
5d:8b:8a:46:ae:18:04:66:7d:6d:9c:f6:6a:b6:51:69:ea:da:
d0:d1:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 27 03:43:20 2025 by rpki-client on console.sobornost.net