Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
File: 3138392e38392e36382e302f32332d3233203d3e203238313834.roa (raw, json)
Hash identifier: XD5gREjghrvm8e86fStcKrq4ofLc/s46iF5unWBn8KY=
Subject key identifier: 86:22:D1:70:FC:AB:37:DA:F5:E9:67:15:2C:D8:8B:68:22:4B:9F:A8
Certificate issuer: /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial: 491C114704809BD1CD309A82EE1EABC05F03785F
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
Signing time: Fri 24 May 2024 00:20:07 +0000
ROA not before: Fri 24 May 2024 00:15:07 +0000
ROA not after: Fri 23 May 2025 00:20:07 +0000
asID: 28184
IP address blocks: 189.89.68.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:1c:11:47:04:80:9b:d1:cd:30:9a:82:ee:1e:ab:c0:5f:03:78:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Validity
Not Before: May 24 00:15:07 2024 GMT
Not After : May 23 00:20:07 2025 GMT
Subject: CN=8622D170FCAB37DAF5E967152CD88B68224B9FA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:06:27:b7:e7:c2:72:d3:2a:31:51:a0:78:
ec:0a:1d:56:fc:08:4d:06:42:d4:38:c1:ac:b9:56:
05:b6:cb:1b:33:e0:b0:3f:be:1e:3b:3e:29:9b:3d:
29:a1:84:cb:51:0b:a5:d1:ee:ec:34:52:fc:01:52:
ce:94:4e:d4:99:ce:24:eb:fe:64:e7:d3:ec:57:e2:
b8:1b:38:3e:24:5a:1c:40:43:ba:c6:94:7f:74:8e:
88:0e:09:ea:04:a5:57:79:d5:7c:dc:c5:bc:e6:0b:
dd:d6:98:99:8f:27:ad:9c:e9:1d:6c:bc:c3:ee:72:
4c:40:4b:e6:08:c4:3f:5c:c3:90:60:4e:a0:38:a0:
cf:dc:df:e4:25:ea:5a:d6:8b:0a:f7:b4:22:75:ba:
47:4f:2a:50:0f:d1:10:cb:82:8a:c0:61:ad:38:1e:
51:f3:04:de:8e:b7:05:b3:77:c0:35:c7:93:e3:5f:
b6:f0:7c:61:20:54:da:db:e5:c5:9f:93:a9:14:03:
1e:6a:a7:89:fc:47:12:af:9e:36:dc:42:70:ef:0c:
3a:ab:24:da:f2:f9:31:ca:e1:45:71:10:f3:74:c8:
95:4c:8a:f3:4a:9d:da:f1:aa:5b:4a:5f:f8:7a:cc:
b8:b3:b8:88:9d:5b:e5:a2:2b:5c:2c:4b:d6:68:cd:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:22:D1:70:FC:AB:37:DA:F5:E9:67:15:2C:D8:8B:68:22:4B:9F:A8
X509v3 Authority Key Identifier:
keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e36382e302f32332d3233203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.68.0/23
Signature Algorithm: sha256WithRSAEncryption
98:01:2f:6f:04:b1:ef:0f:25:77:fe:b2:5d:5e:b0:ec:22:3e:
f6:77:a7:78:82:a0:e0:56:02:f8:2b:6e:45:84:de:fa:e4:bb:
49:e9:2e:d8:7a:7d:f9:2a:a4:c5:c1:a6:cc:f5:6a:a0:06:36:
10:d4:77:e6:18:89:50:ab:fe:c1:f3:b9:03:ad:4b:d9:00:56:
af:20:5a:8f:e6:91:41:a8:ff:99:dd:9c:41:2f:00:d1:0d:8d:
c2:d8:b4:c1:26:80:ba:ce:4c:6b:17:ce:ae:eb:94:ec:e0:57:
92:a9:75:9b:b4:5f:63:48:7f:c1:52:fb:6e:ee:f5:a6:4b:02:
26:2a:a0:bc:c2:eb:0c:e4:65:9c:2a:21:4d:24:f7:6e:1c:33:
e4:74:6b:d6:a0:63:0e:3f:1f:5d:f9:d7:bc:9d:f3:2e:12:8c:
b4:2a:d7:db:3a:fc:04:c4:2d:c5:a0:d7:1f:f8:e6:9e:d2:55:
c8:c5:cc:77:79:39:fc:79:5a:a8:1a:07:2b:01:f5:11:af:3a:
18:98:5a:c9:a7:32:fc:44:b3:07:97:23:be:a8:85:6a:3c:17:
27:eb:7e:77:51:4b:a8:69:2a:6c:47:d0:b3:04:e7:f9:93:84:
de:38:6f:af:4b:84:84:00:77:68:fe:15:c2:17:27:47:9a:fa:
36:6a:f0:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org