Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
File: 3138392e312e3137362e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: fiyIAft/JZjWuQNkjzsXGijS/rM3Cl5tSiS4+hLCv/w=
Subject key identifier: 85:2C:EB:DF:A0:CD:EA:35:58:F1:F6:80:AD:F4:85:28:88:6B:DA:C7
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 6448E18A579A1FE8A9B85F400252743B78590EA4
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
Signing time: Thu 31 Oct 2024 17:26:40 +0000
ROA not before: Thu 31 Oct 2024 17:21:40 +0000
ROA not after: Thu 30 Oct 2025 17:26:40 +0000
asID: 28667
IP address blocks: 189.1.176.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:48:e1:8a:57:9a:1f:e8:a9:b8:5f:40:02:52:74:3b:78:59:0e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:21:40 2024 GMT
Not After : Oct 30 17:26:40 2025 GMT
Subject: CN=852CEBDFA0CDEA3558F1F680ADF48528886BDAC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:24:97:d7:a6:ae:3b:17:02:a5:01:d1:4b:
16:a8:1c:d2:46:97:4f:a3:d2:a2:90:fa:e7:36:60:
d8:f4:fa:69:44:91:96:f1:32:ab:57:cc:d5:7d:da:
2d:86:46:60:6c:e0:5c:c3:ed:29:c6:51:e5:0e:51:
cd:05:52:33:a8:2e:ad:64:e8:fc:f7:7b:29:ad:2e:
28:9c:59:ec:3f:9a:15:16:a8:f8:74:e0:05:ea:f5:
cc:56:75:d8:3b:a7:94:9e:ae:0e:5e:b5:b8:7b:42:
9d:53:90:3e:1b:28:fc:40:ce:fd:cb:93:80:71:71:
4f:8f:9b:ed:40:0e:32:a8:b6:c9:c6:c7:6a:7e:f1:
c6:d8:f2:8c:0b:30:39:f4:db:73:64:1a:15:33:e3:
89:3f:00:3b:3c:4f:dd:c7:fc:52:4c:06:76:a8:33:
c9:bf:bb:0b:9b:c1:a5:db:12:8f:70:84:d9:b1:75:
c4:41:71:23:fa:1b:50:1e:88:39:78:09:a0:fb:e5:
70:9b:e1:5c:b0:0a:44:25:59:d2:6d:89:95:ba:ed:
fd:95:f5:6d:51:16:ef:f8:f1:45:82:7c:19:5e:36:
a0:f5:1d:0c:e0:d7:89:4f:c6:d8:2e:e0:1d:f6:83:
90:35:ce:5c:ed:67:fb:1f:fa:6d:19:57:61:28:aa:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:2C:EB:DF:A0:CD:EA:35:58:F1:F6:80:AD:F4:85:28:88:6B:DA:C7
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3138392e312e3137362e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.1.176.0/20
Signature Algorithm: sha256WithRSAEncryption
3a:4b:92:96:b4:26:a5:f3:d5:7b:ad:73:4f:1d:4c:20:12:8d:
fd:01:86:e6:7e:f6:28:e9:b8:9e:2b:e2:19:7a:9c:9e:de:38:
0e:42:ef:8e:0f:fe:c2:ce:b6:2c:3e:ad:b0:b3:9d:89:da:7d:
cc:7e:a9:85:0b:9f:ba:69:26:6e:0a:d4:1c:6f:cd:bc:82:44:
7b:ab:f2:78:16:86:1d:b7:d2:0f:0c:ce:7f:e7:ab:16:9e:3b:
b4:11:79:d0:79:76:33:b4:02:5e:4d:49:4e:d1:3d:9b:e5:3e:
df:65:ee:77:bb:e0:ed:57:14:b0:f8:60:86:9a:94:1d:53:7d:
65:0e:6e:20:f1:54:43:44:a8:8c:46:16:a9:cd:37:14:71:48:
10:5c:d1:ed:7b:26:28:58:a2:f8:32:d7:36:b4:f1:b5:86:83:
f3:aa:ed:bc:fc:3a:c2:d5:fd:e7:3a:06:8d:1c:6a:fc:8d:34:
32:1b:da:c4:4a:ae:c4:96:80:08:32:de:ba:fe:8c:11:7c:4e:
98:31:eb:b0:41:a7:84:5b:d6:19:b4:e5:a2:8e:7c:c7:4f:ad:
24:5f:ad:8d:26:7a:46:44:98:a9:c7:19:7a:08:f2:4d:a8:d4:
3e:08:34:8c:4a:8d:81:4c:52:b9:6a:16:2c:3b:e6:c4:5f:3f:
aa:c8:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org