Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa
File: 3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa (raw, json)
Hash identifier: E36NA+jOiUOrMYl1gbWXTj3EzlyZC7wN0BOSu/87x/4=
Subject key identifier: AA:E7:EF:0B:A4:AE:A0:F1:04:DD:0D:86:03:F6:06:9B:93:20:59:67
Certificate issuer: /CN=6857F0F3AF899445947CD4D6ED497776C359881F
Certificate serial: 5E108B9ACE4035F24350902F5AC86D64274E956D
Authority key identifier: 68:57:F0:F3:AF:89:94:45:94:7C:D4:D6:ED:49:77:76:C3:59:88:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6857F0F3AF899445947CD4D6ED497776C359881F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa
Signing time: Fri 01 Nov 2024 20:05:18 +0000
ROA not before: Fri 01 Nov 2024 20:00:18 +0000
ROA not after: Fri 31 Oct 2025 20:05:18 +0000
asID: 264862
IP address blocks: 168.181.132.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:10:8b:9a:ce:40:35:f2:43:50:90:2f:5a:c8:6d:64:27:4e:95:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6857F0F3AF899445947CD4D6ED497776C359881F
Validity
Not Before: Nov 1 20:00:18 2024 GMT
Not After : Oct 31 20:05:18 2025 GMT
Subject: CN=AAE7EF0BA4AEA0F104DD0D8603F6069B93205967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:04:fc:c1:f1:fd:d4:12:11:e3:b1:2e:18:c9:
4b:e9:0d:3b:6e:e3:52:89:b1:fe:7a:7b:82:55:32:
32:9c:53:54:65:b0:99:54:80:60:cd:5e:69:ef:92:
99:7b:81:6f:15:ca:cd:20:45:f2:06:ed:a4:4a:e5:
24:28:2a:86:b2:8d:98:5e:e3:fa:f4:06:4f:3e:98:
7e:14:c8:68:a8:aa:9e:77:08:22:b6:e5:51:f6:5b:
b0:5f:1d:7a:c1:71:74:e7:2b:b6:b5:56:45:00:ee:
49:dc:05:02:94:5a:aa:c9:bc:bf:cc:21:20:08:a6:
a7:52:50:03:60:56:f9:42:19:1e:e9:d5:0f:f4:8d:
a2:5b:36:3f:bc:7d:71:19:1d:c0:54:b7:42:d9:2c:
c3:20:a6:04:79:22:1f:64:bd:4a:6c:15:03:cc:5b:
d8:97:9f:9b:5f:a0:ff:0a:ec:79:8e:3c:00:44:48:
f2:46:b3:29:88:7a:22:cb:2b:09:5c:b5:2b:a0:68:
1b:dd:b2:a4:d8:09:e4:3c:40:c6:85:60:eb:d6:25:
cf:a6:1b:b2:e2:b0:38:2c:6e:14:53:56:1b:a6:ec:
9d:68:80:45:32:b0:81:77:25:27:ca:3d:48:08:b5:
d5:b0:d3:15:a3:75:3f:34:c4:f9:5a:e0:4d:29:a3:
63:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E7:EF:0B:A4:AE:A0:F1:04:DD:0D:86:03:F6:06:9B:93:20:59:67
X509v3 Authority Key Identifier:
keyid:68:57:F0:F3:AF:89:94:45:94:7C:D4:D6:ED:49:77:76:C3:59:88:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/6857F0F3AF899445947CD4D6ED497776C359881F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6857F0F3AF899445947CD4D6ED497776C359881F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/3136382e3138312e3133322e302f32322d3332203d3e20323634383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.181.132.0/22
Signature Algorithm: sha256WithRSAEncryption
67:97:32:a5:07:f5:3f:c0:e5:8a:02:12:b5:fe:04:7e:64:d3:
5b:a6:be:68:3e:a6:9e:b6:cf:c2:be:0a:40:e2:82:1d:1b:7f:
33:14:dd:62:fb:1e:6c:ac:68:41:fd:d1:aa:1c:b6:74:d3:83:
8b:09:2c:65:9a:f7:43:19:a9:86:c5:7a:97:e8:2e:84:d7:32:
2e:85:77:58:37:9c:27:26:92:b2:63:cc:bf:5a:1f:cf:c5:a7:
99:52:e4:c4:bf:ec:01:78:fc:d8:f5:b7:a4:9e:d3:36:3b:07:
46:ca:09:87:9e:b0:83:67:85:b8:94:6f:de:35:6f:45:40:f3:
7c:c3:3f:89:a3:1d:68:7b:6c:c0:34:54:35:19:51:c1:47:a0:
ba:1c:77:13:d9:b5:97:6a:9b:cc:37:86:84:e5:ca:5c:1a:a9:
25:2e:3d:d8:31:67:70:84:43:90:81:e6:48:8b:ef:98:bf:68:
80:d6:b3:10:ae:9f:68:34:1f:40:c7:74:ec:ca:42:ff:02:bc:
72:64:32:c3:98:d5:6e:f6:76:05:fc:74:76:3a:fa:00:b9:d2:
ba:08:ef:36:c1:f8:45:0e:9e:f8:60:2d:83:00:23:c2:0a:bf:
ae:35:d4:2e:2b:39:4e:0d:b1:6a:0c:37:d6:9a:16:20:84:c1:
af:69:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:26 2024 by rpki-client on console-ams.rpki-client.org