Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa
File: 3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa (raw, json)
Hash identifier: QVdsGYvQzxSHUQAsXLmGOpHsmAKwC8jXsaC9voLXpkQ=
Subject key identifier: 63:C0:FF:75:18:6D:A4:E3:D9:3C:70:2D:51:08:E7:CC:54:65:10:38
Certificate issuer: /CN=D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A
Certificate serial: 1E96B3FD256820CBEBEC430AEB51D01D7CCA23F9
Authority key identifier: D6:92:6C:4B:4A:CD:BF:FD:6E:E3:F1:0B:70:25:53:EC:A2:7D:77:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa
Signing time: Wed 03 Apr 2024 20:20:55 +0000
ROA not before: Wed 03 Apr 2024 20:15:55 +0000
ROA not after: Wed 02 Apr 2025 20:20:55 +0000
asID: 263498
IP address blocks: 168.195.140.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:96:b3:fd:25:68:20:cb:eb:ec:43:0a:eb:51:d0:1d:7c:ca:23:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A
Validity
Not Before: Apr 3 20:15:55 2024 GMT
Not After : Apr 2 20:20:55 2025 GMT
Subject: CN=63C0FF75186DA4E3D93C702D5108E7CC54651038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8c:3b:f5:90:ca:d3:04:37:69:2d:1f:e7:8e:
07:07:49:61:74:ee:fa:32:29:f7:70:36:88:e9:8e:
08:3c:2d:21:70:52:38:e6:fa:c8:f8:a5:db:b9:52:
d1:ee:24:fb:c5:d0:72:e2:35:c0:78:de:6f:ab:2c:
e6:91:4a:f4:d8:f6:c2:e0:d6:60:75:d4:f0:64:69:
b7:2c:40:23:a4:5a:16:75:ee:30:7f:f7:d3:28:04:
47:fd:36:6a:ba:ca:4e:a2:c7:09:bb:2d:bc:61:a5:
11:af:af:e7:68:85:ee:e8:c8:39:86:53:da:d3:de:
a4:e8:01:7b:e2:e0:44:e6:86:17:7f:04:d1:f4:0a:
a3:fe:67:0c:d1:e8:51:19:28:9d:c3:e0:3b:21:be:
af:81:f8:79:e5:40:12:e7:21:8b:11:55:ca:88:e3:
bc:9f:22:0e:b0:84:fd:f2:7d:4d:cb:b2:b0:86:77:
76:4f:26:68:25:1b:71:00:53:51:fd:51:28:73:5e:
b5:29:44:8d:f1:02:7b:a2:0c:81:12:c6:a4:40:5a:
7e:1e:21:49:e6:2d:aa:88:03:1b:df:1b:c3:16:40:
91:0b:a2:9a:a0:ea:8f:9b:0a:10:ec:59:c8:fe:f3:
a0:60:eb:39:b7:f1:1b:00:06:9a:80:f3:cf:76:4a:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C0:FF:75:18:6D:A4:E3:D9:3C:70:2D:51:08:E7:CC:54:65:10:38
X509v3 Authority Key Identifier:
keyid:D6:92:6C:4B:4A:CD:BF:FD:6E:E3:F1:0B:70:25:53:EC:A2:7D:77:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6926C4B4ACDBFFD6EE3F10B702553ECA27D773A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rZrzyrf4ksRs5pyrvkusLNBb811r8fpPhmwcdZBmn6H/1/3136382e3139352e3134302e302f32322d3332203d3e20323633343938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.195.140.0/22
Signature Algorithm: sha256WithRSAEncryption
03:e9:7b:b6:6b:46:f2:24:65:3a:fe:b9:39:b7:71:7b:10:c5:
3c:f5:2b:1b:2e:8e:fe:25:2d:a7:2c:6a:de:78:e3:1e:74:1c:
77:d9:37:ef:ed:67:ce:46:5c:0d:9c:d6:1a:41:35:6a:c5:15:
77:8e:29:75:56:03:13:20:d0:dc:45:01:54:88:3b:e1:31:6f:
26:e2:0d:fb:26:32:1b:26:5b:7e:6d:37:e8:5d:41:93:91:28:
dd:ca:f2:63:54:35:a0:83:ca:0d:7b:4e:01:a7:12:11:d0:80:
96:4a:07:26:0a:94:68:5a:8f:08:77:76:0b:bd:0e:76:3d:c2:
ce:71:bd:72:32:d8:c7:cb:6d:7b:1b:98:56:ab:d0:7f:56:af:
23:26:f1:c0:36:82:b2:12:75:61:98:59:ca:3d:9e:7d:32:1a:
30:46:51:3e:18:b4:89:9b:4d:78:29:a5:49:a3:e8:47:53:f3:
a2:7a:66:45:90:c9:b5:25:5a:7c:c1:6e:60:85:de:30:4a:7a:
16:8d:d3:e3:95:bd:06:32:36:e1:13:3c:da:d4:7a:0d:e5:17:
c4:08:56:66:e7:1a:3e:d3:b0:ca:a0:ba:e2:e3:2b:76:f8:f1:
00:41:f1:a6:24:d4:d7:36:68:3e:19:b6:3e:a0:b3:99:65:49:
fa:36:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 6 14:56:08 2024 by rpki-client on console-fra.rpki-client.org