Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
File: 3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier: ZQ7qabCcuHVWEwia5EU55Et7dfmzEGYgzflJNO7mE78=
Subject key identifier: 03:F4:3E:4D:11:76:54:0E:D5:61:C5:E5:D3:6F:CF:33:ED:9C:8B:D7
Certificate issuer: /CN=5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB
Certificate serial: 248AE0F19087B22A768B9CBAD860A4BE8171A2EA
Authority key identifier: 5B:7E:96:5B:FA:F5:D4:3B:B9:34:AF:7C:B9:2B:6D:9E:B9:DF:94:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
Signing time: Thu 24 Oct 2024 18:51:21 +0000
ROA not before: Thu 24 Oct 2024 18:46:21 +0000
ROA not after: Thu 23 Oct 2025 18:51:21 +0000
asID: 28360
IP address blocks: 189.76.224.0/20 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:8a:e0:f1:90:87:b2:2a:76:8b:9c:ba:d8:60:a4:be:81:71:a2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB
Validity
Not Before: Oct 24 18:46:21 2024 GMT
Not After : Oct 23 18:51:21 2025 GMT
Subject: CN=03F43E4D1176540ED561C5E5D36FCF33ED9C8BD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6f:c8:f3:36:ea:37:84:f6:ed:a7:78:bc:66:
5f:5a:ec:b0:69:7e:1b:c4:28:cf:59:09:54:7b:8f:
95:b2:b8:69:bb:50:d1:e7:c3:68:4f:f6:03:8d:03:
af:e3:ee:a9:50:3d:e7:7f:74:84:fd:4a:d9:4a:f5:
7a:b6:c1:3d:24:d0:0d:b4:9c:fc:9f:9a:fb:58:4c:
87:40:4e:7c:b5:8b:a3:32:60:a5:d5:b8:a4:2f:5c:
b9:eb:18:9f:af:b7:09:3c:ae:a1:78:f6:3a:c3:71:
9c:ca:a0:f0:6b:d1:ef:07:3a:9b:17:a2:8e:ec:ab:
af:01:43:a0:0e:55:1a:79:55:d2:82:3f:d5:b7:29:
4f:3c:b8:59:36:33:13:29:6d:ad:93:0e:92:54:87:
e2:53:f3:99:2d:e2:3f:4a:50:75:b5:24:15:6b:0d:
73:05:7d:db:b0:2d:d5:60:e0:db:46:ba:b7:29:e0:
6c:39:b7:75:1f:a6:58:9d:28:c5:0a:2e:55:b9:ed:
ac:3a:af:1a:3e:ba:94:a1:c6:45:1a:2b:41:41:ed:
e6:e2:71:56:50:22:9c:61:55:b0:09:ed:6c:44:bf:
51:a5:97:b0:9e:60:d2:bc:5b:87:33:10:ee:fd:92:
08:0a:7d:3d:7c:08:c1:bf:66:ed:f9:78:b1:8d:88:
9d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F4:3E:4D:11:76:54:0E:D5:61:C5:E5:D3:6F:CF:33:ED:9C:8B:D7
X509v3 Authority Key Identifier:
keyid:5B:7E:96:5B:FA:F5:D4:3B:B9:34:AF:7C:B9:2B:6D:9E:B9:DF:94:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B7E965BFAF5D43BB934AF7CB92B6D9EB9DF94BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.224.0/20
Signature Algorithm: sha256WithRSAEncryption
4f:4c:6d:e6:34:b1:25:54:c4:bb:40:70:09:b1:7d:b2:1e:ec:
78:f4:0b:71:5e:52:e8:60:b1:a3:c0:09:0f:65:a8:6b:e1:35:
8c:84:2e:2c:82:f6:52:5b:aa:31:fa:81:88:14:bb:1d:ed:96:
54:e3:6a:dd:fa:3b:45:43:6c:41:c3:b5:a8:5c:89:92:73:fc:
0a:7c:e6:25:0e:cd:3f:b8:f8:93:b2:b6:fd:5c:11:00:ae:02:
00:5a:05:ec:13:c4:3b:71:49:72:74:56:43:69:91:6d:91:28:
3e:6f:ca:c6:6a:cc:01:1d:24:60:12:92:4d:32:30:86:5f:52:
53:9d:20:2f:ac:4e:35:54:7a:2e:9e:84:f7:b2:ac:60:fb:c4:
ba:5a:67:03:03:c7:22:e8:84:86:8a:e8:c0:ea:16:73:06:a3:
18:25:ee:35:37:55:c2:fc:73:34:14:67:e4:f3:c7:65:d4:e6:
74:35:76:bf:e7:bf:1f:19:23:de:75:5c:0b:9f:ae:93:83:51:
ea:9d:64:8d:85:80:6f:89:39:56:0f:ee:ca:bd:a1:ac:b1:1a:
51:8e:ac:92:6d:27:52:b6:dd:fc:71:ce:0f:0c:88:96:4b:3b:
07:ca:0a:ad:53:d5:9d:e6:b5:7c:94:7c:f7:b6:1f:90:6e:a8:
4f:b5:93:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 22:25:48 2024 by rpki-client on console-fra.rpki-client.org