Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
File: 3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa (raw, json)
Hash identifier: +reccfPrNiM8191HLzRpGm0Fi9c78iWxkSQR12XUpck=
Subject key identifier: D5:90:F8:BC:D9:76:5C:A2:99:FB:84:BC:AC:05:D2:43:03:E0:9E:DE
Certificate issuer: /CN=14C031B5DB12666C2E130FC76F30D7C942EE390F
Certificate serial: 3196665E639A90E26DB565DCAA8619F72D69D836
Authority key identifier: 14:C0:31:B5:DB:12:66:6C:2E:13:0F:C7:6F:30:D7:C9:42:EE:39:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14C031B5DB12666C2E130FC76F30D7C942EE390F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
Signing time: Thu 04 Apr 2024 06:43:38 +0000
ROA not before: Thu 04 Apr 2024 06:38:38 +0000
ROA not after: Thu 03 Apr 2025 06:43:38 +0000
asID: 23289
IP address blocks: 200.160.208.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:96:66:5e:63:9a:90:e2:6d:b5:65:dc:aa:86:19:f7:2d:69:d8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14C031B5DB12666C2E130FC76F30D7C942EE390F
Validity
Not Before: Apr 4 06:38:38 2024 GMT
Not After : Apr 3 06:43:38 2025 GMT
Subject: CN=D590F8BCD9765CA299FB84BCAC05D24303E09EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5f:42:44:22:be:b0:ef:01:58:3d:a1:81:d4:
28:63:2f:c1:4a:45:64:f6:40:6b:58:e4:e9:b2:c2:
85:b3:9b:b8:f2:12:14:aa:48:c4:99:44:61:05:c9:
50:c6:36:16:ab:a5:8a:0c:58:6a:0d:f7:bd:cf:64:
73:b5:ec:51:c7:0e:30:ca:1f:a0:32:c5:79:8c:3b:
d8:9f:51:38:44:0f:f1:81:db:5c:bb:a8:b0:d1:d3:
f3:5d:13:ec:e1:e7:2b:cf:c7:75:bc:94:47:d7:1d:
d3:3b:31:bc:38:91:9a:cd:fc:54:02:d9:b5:a6:47:
ee:ad:85:ea:10:31:49:9e:e8:24:1f:6b:22:b8:9c:
1e:16:fa:f6:bb:e6:aa:9b:1b:90:02:e2:7d:92:e0:
0b:72:fd:ee:1c:2b:58:67:a1:4a:28:39:b8:28:2b:
6e:a4:e6:39:07:70:ed:a7:5c:b5:33:e5:df:ee:ef:
bb:c6:4a:07:d9:3d:fc:be:7b:4c:bc:0c:aa:78:2a:
74:d6:4f:70:31:6e:3b:09:67:2d:c7:8e:75:a6:81:
f4:95:b8:f1:86:0b:1f:d6:c5:88:c1:71:e1:ef:46:
62:dc:e8:29:d6:51:87:2c:ba:ac:15:bb:4f:46:81:
ce:d5:36:b2:5d:fa:59:65:08:fa:91:08:59:e2:61:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:90:F8:BC:D9:76:5C:A2:99:FB:84:BC:AC:05:D2:43:03:E0:9E:DE
X509v3 Authority Key Identifier:
keyid:14:C0:31:B5:DB:12:66:6C:2E:13:0F:C7:6F:30:D7:C9:42:EE:39:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/14C031B5DB12666C2E130FC76F30D7C942EE390F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/14C031B5DB12666C2E130FC76F30D7C942EE390F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7b4xA1A8pze1H9tYPN8Zpj5G5KBin9DFWFLRRt8d5K6c/2/3230302e3136302e3230382e302f32302d3234203d3e203233323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.160.208.0/20
Signature Algorithm: sha256WithRSAEncryption
cd:ad:3e:f3:6c:c9:d6:e1:87:e7:24:30:e0:25:be:dd:e6:3e:
48:b1:95:56:72:2d:43:19:2f:d0:79:71:dd:ec:04:12:1a:6e:
bd:0a:27:69:b8:f5:ce:93:26:8a:94:0d:62:7a:64:6e:0c:b0:
e5:b8:ba:cc:1c:df:69:25:72:78:2c:81:a6:4f:db:3d:c7:0e:
6f:e8:a2:96:55:cd:90:1f:d8:01:a8:ef:2d:31:f4:76:8e:1d:
2f:00:63:fb:54:e1:3a:68:db:e7:25:a8:0d:cd:f3:ca:22:fc:
98:0d:be:23:e3:da:e8:e9:b6:63:00:bf:93:50:c9:6e:df:58:
80:ae:b6:b8:9a:1c:00:1f:ca:5c:a5:3d:f6:d9:46:29:ec:5b:
45:f8:18:b0:d1:ed:c0:c0:f6:c3:68:2d:97:fb:64:26:34:12:
8d:10:c9:0b:62:cb:54:ae:9d:11:33:93:06:1d:e9:55:83:62:
0d:04:bb:6a:98:0c:f2:e7:0b:a8:ec:02:71:e5:2b:75:9e:88:
e9:d3:fe:d1:84:0d:8f:18:2e:61:c9:08:bf:de:5c:f6:99:8c:
2c:65:11:cc:38:a7:6a:e2:bf:5d:1e:6b:dc:81:e9:51:bc:a1:
e4:b2:d2:0b:3e:16:18:87:b4:c1:d1:c1:57:a6:65:6d:cc:ba:
fc:90:1a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 05:44:53 2024 by rpki-client on console-fra.rpki-client.org