Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32312d3231203d3e203238313834.roa
File: 3138392e38392e37322e302f32312d3231203d3e203238313834.roa (raw, json)
Hash identifier: 8jOtQswSj+IwZcKsjj2Vn/TxOHdYbbmLDvpY2ynAGzE=
Subject key identifier: 33:B5:7D:38:D6:B8:86:71:57:EE:D8:71:AF:0F:FE:4F:F1:0D:2B:DC
Certificate issuer: /CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Certificate serial: 16FCA6D215DB99C0C856233CB4CF6AE84833561E
Authority key identifier: E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32312d3231203d3e203238313834.roa
Signing time: Fri 24 May 2024 00:21:46 +0000
ROA not before: Fri 24 May 2024 00:16:46 +0000
ROA not after: Fri 23 May 2025 00:21:46 +0000
asID: 28184
IP address blocks: 189.89.72.0/21 maxlen: 21
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:fc:a6:d2:15:db:99:c0:c8:56:23:3c:b4:cf:6a:e8:48:33:56:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E624FE33C9F73B65471DFA93BA8DE921E4FA1166
Validity
Not Before: May 24 00:16:46 2024 GMT
Not After : May 23 00:21:46 2025 GMT
Subject: CN=33B57D38D6B8867157EED871AF0FFE4FF10D2BDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:9e:10:05:d2:8c:e6:cf:53:25:4f:46:57:
90:cf:18:15:39:fe:a4:08:97:3b:2f:9e:5b:6b:56:
bf:94:78:3c:02:64:69:e7:23:31:2e:e6:42:88:40:
a7:9d:67:13:65:4f:cb:5b:8e:66:33:dd:28:a0:2a:
b8:c7:1d:58:47:d3:de:65:19:c0:1d:d2:1f:ac:27:
bd:42:09:53:43:2c:8f:5b:d6:a3:4b:e8:66:aa:51:
2d:ff:f8:a4:9a:68:53:6e:9d:8d:aa:e5:c6:58:aa:
7f:34:b0:8d:6d:dc:65:85:72:85:64:63:9f:e8:74:
58:31:62:1e:a9:16:ea:c3:46:b1:28:50:58:a1:60:
7f:66:22:e8:13:25:ab:05:86:d3:63:db:61:95:a7:
b8:3b:2c:94:42:02:17:e9:6d:5f:e6:53:70:df:db:
95:54:31:53:80:c7:87:40:f5:c5:19:95:9b:73:aa:
0e:1d:91:cd:27:a5:6c:a3:36:1c:26:b7:91:2a:88:
58:28:0c:a7:75:4f:96:7e:69:c7:80:62:ef:c7:38:
bd:f0:46:06:c7:68:b3:c3:84:74:d7:18:0a:f9:4e:
f6:56:02:2d:7f:19:0f:bd:af:68:d2:1b:e7:df:63:
e5:ae:d8:a8:7a:8a:fa:fc:82:90:16:9c:56:82:d9:
e5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B5:7D:38:D6:B8:86:71:57:EE:D8:71:AF:0F:FE:4F:F1:0D:2B:DC
X509v3 Authority Key Identifier:
keyid:E6:24:FE:33:C9:F7:3B:65:47:1D:FA:93:BA:8D:E9:21:E4:FA:11:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E624FE33C9F73B65471DFA93BA8DE921E4FA1166.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKuVh62sehnGrn4egwFVQPVVktjmodtPw5qpPKVkRKze/0/3138392e38392e37322e302f32312d3231203d3e203238313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.89.72.0/21
Signature Algorithm: sha256WithRSAEncryption
3e:12:3c:4c:b9:fd:e9:7f:a3:c1:9b:f1:8d:8a:3f:b7:72:d1:
8c:c5:7a:9b:dd:cb:58:10:d5:c1:2b:12:0b:4e:55:1b:49:d5:
fd:84:79:dc:9d:a0:33:5b:2d:1d:8b:00:99:5a:7e:60:78:73:
c5:fe:f5:ca:e4:4a:7d:5c:38:af:a1:54:d9:22:8f:72:90:f7:
fa:d0:c4:04:31:a4:21:fb:63:71:6f:cf:7a:74:5a:6f:1a:ff:
1f:17:21:2f:a5:70:86:33:fd:c9:5c:44:7d:2f:a0:3b:6a:ea:
45:25:51:6b:f8:3b:b7:60:09:ad:80:cf:aa:77:8f:22:16:35:
45:be:02:e2:17:70:cb:5e:56:88:69:49:a0:75:a1:b6:5f:87:
2b:fa:15:46:26:7b:2f:be:45:5d:6d:92:b7:af:7e:7e:cc:95:
58:fc:ca:3f:da:b8:79:fc:d5:cf:c7:7e:a1:10:d9:7d:59:37:
5b:e2:08:d9:1b:52:27:2e:b7:3a:97:1e:a7:70:e5:14:ee:dd:
f0:9e:b4:17:18:2e:14:c1:9b:3c:9c:08:66:7a:5d:7f:d8:1a:
7e:0f:6c:86:bd:47:eb:85:9e:df:9e:d6:23:0f:ad:cc:6c:a3:
90:8f:69:17:ea:8f:8c:3c:6f:2a:a0:d4:8b:4c:60:d7:11:22:
e6:17:85:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 16:45:55 2024 by rpki-client on console-fra.rpki-client.org