Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/3138392e382e3132302e302f32322d3234203d3e20323730373332.roa
File: 3138392e382e3132302e302f32322d3234203d3e20323730373332.roa (raw, json)
Hash identifier: ultZeL8C5rNX4x2BaSX0u0wbkUpb9X/4OGvY/i9sb2Y=
Subject key identifier: 1D:01:85:B9:CF:DD:A6:A2:A8:0E:E6:28:32:0C:46:E0:8E:FF:E6:D3
Certificate issuer: /CN=23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E
Certificate serial: 2941A6B3B3A6FB51EB721EDB3311BDC8446E9E8F
Authority key identifier: 23:EE:0E:8B:65:48:40:C9:A3:B2:F5:BA:ED:A9:19:31:23:C0:8C:0E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/3138392e382e3132302e302f32322d3234203d3e20323730373332.roa
Signing time: Wed 10 Apr 2024 13:20:15 +0000
ROA not before: Wed 10 Apr 2024 13:15:15 +0000
ROA not after: Wed 09 Apr 2025 13:20:15 +0000
asID: 270732
IP address blocks: 189.8.120.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:41:a6:b3:b3:a6:fb:51:eb:72:1e:db:33:11:bd:c8:44:6e:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E
Validity
Not Before: Apr 10 13:15:15 2024 GMT
Not After : Apr 9 13:20:15 2025 GMT
Subject: CN=1D0185B9CFDDA6A2A80EE628320C46E08EFFE6D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e7:1b:b0:8a:b9:87:a0:3f:35:cf:5a:74:bf:
da:06:14:d4:aa:10:02:6f:2f:21:82:65:12:55:cc:
43:d8:fb:85:0a:3d:9f:e1:45:ae:00:0f:cd:38:48:
90:56:20:47:1a:21:87:40:e0:dc:74:67:34:2d:3e:
ea:6b:23:ce:6a:5a:8e:44:8f:ba:5a:99:eb:74:18:
8f:ae:6f:b0:49:55:36:5f:69:2c:af:48:f2:a5:15:
62:85:15:ab:be:1c:30:f4:f1:76:3b:af:0b:33:2d:
1e:75:9a:11:79:13:bb:0f:d6:bd:57:23:9f:fa:9e:
fa:72:0d:75:ca:f8:a6:43:6f:41:f2:11:12:d5:bd:
1b:a9:a6:cc:dd:0a:e0:22:6b:95:18:5e:49:12:86:
89:7f:a7:6e:a9:91:f5:82:65:5c:14:a3:4c:12:cc:
49:e4:40:50:a0:ce:4a:66:06:55:1a:09:25:b1:87:
13:2f:4d:3c:87:b9:4d:d5:75:66:51:55:a3:06:67:
6b:e0:80:3c:84:cd:2e:92:c0:2e:f4:1e:d2:01:a6:
d4:92:28:24:84:6a:d8:d8:cd:83:e6:91:c0:74:0f:
95:6e:d7:eb:dd:1f:22:69:3a:18:ce:da:f2:95:b2:
b4:1f:e8:10:6e:d6:06:17:3d:24:2b:1a:d3:02:33:
b2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:01:85:B9:CF:DD:A6:A2:A8:0E:E6:28:32:0C:46:E0:8E:FF:E6:D3
X509v3 Authority Key Identifier:
keyid:23:EE:0E:8B:65:48:40:C9:A3:B2:F5:BA:ED:A9:19:31:23:C0:8C:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23EE0E8B654840C9A3B2F5BAEDA9193123C08C0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/1/3138392e382e3132302e302f32322d3234203d3e20323730373332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.8.120.0/22
Signature Algorithm: sha256WithRSAEncryption
66:5e:73:6f:c2:21:8b:67:93:06:e5:dd:a7:f7:c3:ac:66:60:
87:44:e9:5b:49:50:1a:2c:29:b2:0b:3a:90:46:09:09:3f:f4:
01:ef:c1:8f:53:33:04:e5:ee:5f:5b:b9:f5:57:21:08:cf:58:
b4:3a:82:3c:07:72:68:55:96:21:4a:01:95:0a:de:9d:28:8d:
28:ce:e8:0b:dd:7a:95:ca:10:7f:62:ca:5e:a7:bd:e5:db:72:
4a:18:db:a6:e0:9b:db:73:b0:01:73:50:4f:58:36:6b:d8:38:
43:63:d2:5e:8d:a6:b2:86:ab:ea:f1:bf:ec:51:13:65:8f:3d:
2a:c9:eb:56:62:27:27:28:dd:8d:72:95:3f:4a:61:a3:c0:ce:
55:c1:1a:26:c3:21:49:f6:15:dd:2b:f6:10:8d:d6:f0:c1:73:
03:64:f8:69:e6:b9:71:7f:af:e2:8a:1b:9d:c7:32:16:73:5c:
37:04:fb:58:26:63:1b:5b:94:17:65:15:f5:7a:e8:9a:be:f5:
8a:5e:7a:10:eb:5e:ab:2e:24:10:3c:ff:44:08:0d:66:1b:0c:
0a:4c:ec:5d:dd:75:6c:81:77:8f:9e:ed:fd:ae:e5:f8:c0:aa:
18:61:3e:bc:a3:82:04:1e:d2:30:10:01:da:e4:85:13:48:f3:
da:0c:aa:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 17:08:19 2024 by rpki-client on console-fra.rpki-client.org