Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
File: 3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier: 0c2BbDmiDCL6SJYl0mXdLuaUCwikf9p09wdXyX7a63Y=
Subject key identifier: 87:96:F9:29:39:D4:4F:38:73:44:43:09:A9:B2:E7:87:D2:2A:7E:29
Certificate issuer: /CN=D094BD14767790CF0B4A79F0DA251694C06C2C7E
Certificate serial: 671E14DA5C0853E7FA943C933B9A8AFA1B03F0D1
Authority key identifier: D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
Signing time: Thu 04 Apr 2024 10:20:37 +0000
ROA not before: Thu 04 Apr 2024 10:15:37 +0000
ROA not after: Thu 03 Apr 2025 10:20:37 +0000
asID: 264404
IP address blocks: 131.161.228.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:1e:14:da:5c:08:53:e7:fa:94:3c:93:3b:9a:8a:fa:1b:03:f0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D094BD14767790CF0B4A79F0DA251694C06C2C7E
Validity
Not Before: Apr 4 10:15:37 2024 GMT
Not After : Apr 3 10:20:37 2025 GMT
Subject: CN=8796F92939D44F3873444309A9B2E787D22A7E29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:eb:40:44:52:bf:75:47:5c:98:f5:84:40:
c6:8e:67:4f:48:8c:e3:38:22:3d:6f:e3:0c:c9:84:
ec:a4:b5:45:72:a2:ba:9c:05:6c:37:21:51:c9:cd:
17:ae:14:84:c7:ea:6f:69:ef:59:d9:bf:af:13:84:
bd:d0:ed:5f:9b:46:0d:3d:e7:a9:86:8f:be:88:aa:
bf:94:ec:b8:8d:35:e7:c2:5e:35:08:1a:96:4c:eb:
d7:3d:10:d2:51:27:81:90:45:87:89:9e:82:9a:23:
03:4b:18:1b:03:23:e1:6d:db:ee:2e:42:f5:ec:5e:
1c:8b:69:49:37:23:ce:65:67:fc:8e:b8:a3:25:ea:
5a:72:74:d5:a7:a9:8d:ea:56:6d:3e:e9:b5:3e:f7:
b4:35:55:a4:fa:45:41:a9:84:bb:a6:75:3c:b4:f2:
9d:66:ba:d1:f0:17:25:f5:a6:d4:ec:4b:90:42:8a:
ad:dd:a3:25:04:73:17:4b:f0:20:8d:05:54:8f:c2:
0d:c7:6f:c0:9a:c7:de:d7:1a:12:a9:10:91:a7:38:
50:b1:af:4a:fa:64:9f:1a:09:a1:e1:e2:e2:19:53:
38:c2:66:3f:5d:68:d1:cf:7a:dd:02:ea:fb:f9:2c:
21:80:fe:ee:b1:ce:89:e5:0a:19:31:b2:79:df:3d:
4c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:96:F9:29:39:D4:4F:38:73:44:43:09:A9:B2:E7:87:D2:2A:7E:29
X509v3 Authority Key Identifier:
keyid:D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/3133312e3136312e3232382e302f32322d3332203d3e20323634343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.228.0/22
Signature Algorithm: sha256WithRSAEncryption
65:fd:63:b5:c4:9d:7a:c9:fd:52:6c:7b:bb:18:37:b9:1a:43:
a1:05:d8:02:8c:5b:2c:27:6d:5a:21:8a:34:81:36:00:e1:a0:
73:c1:10:f1:6b:90:3d:ba:a2:34:b1:76:fc:7c:a3:6f:49:1b:
7e:e4:e8:ab:a6:a5:40:bb:8f:f8:e3:13:70:61:f9:63:53:0e:
9e:09:3c:6e:07:3e:c8:f1:4e:f0:2a:56:5b:11:98:49:ec:d5:
49:17:20:f0:8c:a6:c4:22:6c:6b:84:9b:29:29:c3:51:45:45:
be:75:e4:c3:95:d9:89:84:62:0d:20:f2:11:31:5c:44:7d:32:
49:13:30:fc:7c:60:50:a1:ef:6f:39:7a:e9:36:a1:b5:3a:3e:
48:30:86:fa:cf:5f:5b:18:c7:01:fb:21:32:50:ab:16:9a:e4:
d5:c0:fb:8a:7d:ab:52:04:64:0f:5d:70:17:4f:1e:b3:3a:61:
d7:31:3f:f1:5c:01:9b:4b:04:f9:53:76:21:89:38:8a:ab:b9:
ed:ad:90:eb:5a:d6:b9:9b:81:a0:40:1e:97:1c:26:34:b0:9a:
50:b7:1b:07:28:5d:5f:1e:53:ea:fc:55:4e:fa:d0:86:57:5c:
5e:f0:36:fb:41:a6:ed:bc:15:5e:a5:ae:2c:1b:6d:c2:75:aa:
68:09:11:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:09:55 2024 by rpki-client on console-ams.rpki-client.org