Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa
File: 3138392e38392e37312e302f32342d3234203d3e203238313834.roa (raw, json)
Hash identifier: BDy11ExTuRW09Lk+X7mAeyDMKK8W91MZPZlG+nwumng=
Subject key identifier: 5B:E3:AC:C0:67:8F:B0:EF:D1:69:FC:85:BD:CB:AE:22:17:8F:24:9E
Certificate issuer: /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial: 21D24A31869EE3904DB012253FC224459FDC004B
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa
Signing time: Fri 24 May 2024 00:21:43 +0000
ROA not before: Fri 24 May 2024 00:16:43 +0000
ROA not after: Fri 23 May 2025 00:21:43 +0000
asID: 28184
IP address blocks: 189.89.71.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:d2:4a:31:86:9e:e3:90:4d:b0:12:25:3f:c2:24:45:9f:dc:00:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Validity
Not Before: May 24 00:16:43 2024 GMT
Not After : May 23 00:21:43 2025 GMT
Subject: CN=5BE3ACC0678FB0EFD169FC85BDCBAE22178F249E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:40:0c:12:81:c1:01:a0:33:4d:4e:c1:ea:
51:e7:ec:eb:5a:67:61:10:be:9c:c5:18:1c:71:70:
d2:be:4e:34:ce:66:1f:92:bf:84:09:0a:c2:42:42:
5e:6c:9f:05:d5:85:a3:08:14:1d:13:a3:2f:9c:b7:
2a:ff:f1:5f:74:5c:50:41:73:49:9e:1c:2d:d7:66:
55:5b:46:66:c7:5a:dc:04:f6:38:0b:2c:6c:d9:65:
ae:ed:28:c6:4c:d4:ab:4b:ec:25:4e:c6:7f:bd:29:
f8:9c:6f:87:3a:e5:24:8e:80:33:1f:54:ae:0c:7f:
0f:31:35:c0:4b:9b:c7:80:8f:46:07:e1:25:4f:31:
d6:59:5f:10:29:f7:93:67:a9:d8:4a:77:05:62:17:
04:5c:50:d6:d5:0b:1a:8e:2d:56:3d:d1:55:ea:bb:
b6:29:b5:df:71:c7:df:4f:55:dd:4d:e0:f1:f4:ea:
66:fe:b4:59:9b:52:eb:0a:e4:c3:c6:69:b2:02:93:
a6:c1:ca:39:48:f2:76:a2:f5:95:fc:cb:f1:f9:8d:
27:09:5b:01:30:2c:7a:21:48:5e:c7:c0:4f:a7:b5:
68:4a:b0:ba:ad:2b:9d:28:ee:e1:f1:6a:5d:00:2d:
ee:42:4a:22:81:8f:0b:b0:3f:51:d3:3d:07:87:89:
ce:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:AC:C0:67:8F:B0:EF:D1:69:FC:85:BD:CB:AE:22:17:8F:24:9E
X509v3 Authority Key Identifier:
keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37312e302f32342d3234203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.71.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4e:e5:45:3e:a0:1c:7e:ec:be:cc:4f:b3:4d:bb:f2:54:a2:
c9:7f:5f:bf:14:bf:42:82:8b:8c:26:78:71:20:44:3b:62:42:
ea:1a:1a:1f:92:71:40:5d:6f:29:7e:fc:89:f1:fe:6a:5f:78:
6f:cb:f0:29:7f:81:65:b4:11:f7:d3:6b:51:89:5f:4d:a6:68:
ce:8a:31:b9:ae:0d:d1:20:ef:ac:2d:af:11:eb:c3:93:8d:3f:
e3:64:3e:b4:5b:46:0f:2b:77:e2:53:6a:fc:f0:a6:7e:d1:ad:
e4:a3:64:30:41:2c:bf:bf:6d:9f:07:fc:78:15:2b:af:e8:ef:
60:8e:e3:03:4c:c8:44:3d:e5:ce:5c:65:d0:47:7a:18:72:4f:
5e:26:1f:3e:78:54:3d:56:77:b6:8b:c0:c3:59:b6:1b:2b:4a:
ce:b3:e3:6c:3a:a1:d6:73:d3:1f:dd:fd:ea:c8:e2:0b:f1:bf:
cd:71:ea:68:9f:86:c6:ab:31:ca:7e:c0:e0:fa:67:7f:1b:ea:
aa:c8:5b:6d:5c:e5:e6:d4:62:e0:62:db:c1:17:c7:f5:52:c6:
72:b5:5e:ad:b0:b7:b4:b4:39:a8:eb:b8:d0:b1:a1:47:68:e8:
50:fc:3a:6a:c7:d8:82:d1:59:5b:cd:12:b6:c3:3d:4e:5b:b7:
99:07:a3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 20:27:38 2024 by rpki-client on console-ams.rpki-client.org