Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa
File: 3138392e37362e3232342e302f32302d3234203d3e203238333630.roa (raw, json)
Hash identifier: uCSxYgQg7nPUOEDjr4Fwng803zqk8/CIjqio77tqc4U=
Subject key identifier: B5:31:6A:60:C4:C1:2C:9D:96:0B:FE:ED:DA:31:DA:84:00:BA:37:71
Certificate issuer: /CN=43DB836C2077B43ED881A065A4DC216114503CEE
Certificate serial: 4CBE32DFCA2A9937A9F2050A7B45F53368EEBDCB
Authority key identifier: 43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa
Signing time: Sat 06 Apr 2024 03:06:22 +0000
ROA not before: Sat 06 Apr 2024 03:01:22 +0000
ROA not after: Sat 05 Apr 2025 03:06:22 +0000
asID: 28360
IP address blocks: 189.76.224.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:be:32:df:ca:2a:99:37:a9:f2:05:0a:7b:45:f5:33:68:ee:bd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43DB836C2077B43ED881A065A4DC216114503CEE
Validity
Not Before: Apr 6 03:01:22 2024 GMT
Not After : Apr 5 03:06:22 2025 GMT
Subject: CN=B5316A60C4C12C9D960BFEEDDA31DA8400BA3771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fc:5a:a8:cc:d1:49:ff:67:e6:e7:60:08:0a:
97:ca:0f:76:a1:b3:18:4d:95:d0:53:06:3e:cd:0a:
f5:ae:9d:ce:9b:63:49:b4:47:ba:f1:54:07:e2:43:
2b:db:96:56:38:59:34:88:60:8a:a5:e5:00:1a:dd:
5c:6b:dd:19:3c:10:44:ba:31:cc:98:d6:49:8c:4b:
23:3f:bb:38:ab:3b:10:69:40:8b:e4:9f:69:e9:c4:
a3:24:6e:83:08:15:46:70:2b:0c:c5:2a:26:57:7b:
d4:20:cd:8d:aa:0e:e7:23:44:c8:35:28:af:93:dc:
39:35:46:d6:11:57:c5:94:cd:7e:2f:84:7e:05:3f:
40:6f:23:01:0d:4c:da:a5:57:89:0b:3d:8e:10:f0:
48:41:4e:34:55:49:0f:09:5e:19:68:23:8e:80:75:
44:b5:a1:0c:0f:b3:33:73:20:3a:d5:fe:69:56:e7:
48:a5:79:75:cf:45:67:ca:92:5a:93:00:95:9c:46:
81:31:1c:04:66:31:c0:7b:ec:f5:6e:39:23:29:63:
b4:d7:b3:43:fb:f8:f0:48:b0:34:ef:02:48:41:17:
af:2c:6c:e7:38:46:d5:4d:0a:6d:cb:69:b1:b1:98:
81:e8:01:c2:72:ef:56:5d:63:04:91:f4:57:34:06:
01:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:31:6A:60:C4:C1:2C:9D:96:0B:FE:ED:DA:31:DA:84:00:BA:37:71
X509v3 Authority Key Identifier:
keyid:43:DB:83:6C:20:77:B4:3E:D8:81:A0:65:A4:DC:21:61:14:50:3C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/43DB836C2077B43ED881A065A4DC216114503CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/43DB836C2077B43ED881A065A4DC216114503CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/1/3138392e37362e3232342e302f32302d3234203d3e203238333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.224.0/20
Signature Algorithm: sha256WithRSAEncryption
03:41:b9:1a:fa:72:55:74:0c:f7:b4:8f:5a:5c:a3:8d:27:91:
93:a8:ba:72:f7:83:92:ed:3d:23:7c:df:64:03:05:e9:6a:67:
84:49:fe:9d:de:f1:0b:15:d1:eb:a2:1a:9e:8f:f8:9e:b1:90:
da:dd:1f:83:84:6d:73:0d:5c:b0:2b:01:fe:49:e8:7b:f4:1c:
5f:7b:fc:e2:05:f4:3e:01:40:67:ea:39:22:a3:04:bd:b9:44:
cc:65:f2:cd:45:1d:9a:af:ea:38:33:bb:53:5c:f9:71:a6:b5:
8e:88:01:bc:65:75:0b:70:c1:e7:5a:e5:fa:74:77:68:a3:fd:
5a:b1:42:38:9c:d9:1a:83:1a:e5:a9:0e:c5:9f:d9:bf:2b:a8:
f9:d9:39:57:f8:a3:e9:76:e4:e2:27:bf:19:8e:31:cf:06:c2:
4f:a3:6e:34:26:47:26:2a:c6:69:ac:0d:a1:ac:78:56:7b:5e:
cf:3d:76:da:cd:39:78:37:4a:70:e1:4d:fa:e7:73:33:3d:93:
65:33:17:8c:5e:8e:97:05:8c:a8:cf:ad:e0:ad:d9:ea:dc:fc:
3c:c7:14:62:02:a6:b0:c5:5e:6c:ac:bb:e8:b1:f1:0e:8b:f8:
7e:cf:b1:f0:ed:15:55:1a:d0:27:46:b5:64:5f:15:ae:d2:67:
47:83:c3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 4 16:07:11 2024 by rpki-client on console-ams.rpki-client.org