Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138372e302f32342d3234203d3e20323634393237.roa
File: 3136382e3232382e3138372e302f32342d3234203d3e20323634393237.roa (raw, json)
Hash identifier: EFf3xtw3hbEz9SYHMqlaS82IwA3TnA8T4/Tk779exxk=
Subject key identifier: FE:52:23:8E:AD:6F:99:C3:48:71:72:86:D4:91:CD:CE:09:CD:D5:C0
Certificate issuer: /CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Certificate serial: 0FBECD4FF07A0E29896C923291434C450558C9BE
Authority key identifier: 1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138372e302f32342d3234203d3e20323634393237.roa
Signing time: Wed 23 Oct 2024 17:58:09 +0000
ROA not before: Wed 23 Oct 2024 17:53:09 +0000
ROA not after: Wed 22 Oct 2025 17:58:09 +0000
asID: 264927
IP address blocks: 168.228.187.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:be:cd:4f:f0:7a:0e:29:89:6c:92:32:91:43:4c:45:05:58:c9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D588865BA2C93FF0D8E1D1874514B202B50EEB1
Validity
Not Before: Oct 23 17:53:09 2024 GMT
Not After : Oct 22 17:58:09 2025 GMT
Subject: CN=FE52238EAD6F99C348717286D491CDCE09CDD5C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:35:87:fa:81:c4:66:9c:2f:72:d9:6a:3c:49:
5b:4a:42:88:cd:62:a7:0c:9d:f6:57:dc:2b:83:28:
1a:e8:dd:16:e8:56:3e:2a:1b:3d:3d:65:fb:79:56:
08:39:8d:01:95:d6:d2:d8:b3:06:66:10:0a:c8:d7:
2c:2a:da:28:05:cb:b6:e8:4f:91:40:ad:e6:c0:00:
2e:ed:38:29:62:73:17:96:28:a7:fc:f0:63:86:88:
c1:89:6a:c7:f3:8e:07:c2:20:30:1b:16:88:5a:c0:
2d:90:a5:7f:cb:92:ed:de:2a:31:2c:59:3b:38:8c:
f3:b2:b9:22:18:c5:c7:33:6c:69:24:87:3f:0e:63:
37:e9:d8:30:57:a6:5f:28:bb:57:ca:7a:ae:57:df:
52:88:ef:0a:dd:24:13:8c:cc:25:b5:a3:3e:8c:6a:
5e:1b:10:52:be:cf:7d:66:9d:c0:85:b0:b6:8a:76:
8a:33:30:83:6e:50:d6:f2:4c:32:77:77:25:4e:b8:
82:27:85:09:4d:bf:33:7f:72:d1:49:b7:72:39:3c:
e8:4b:49:04:66:e8:d0:23:42:ac:50:14:32:f3:72:
b7:bb:a6:26:3e:98:56:42:0d:60:a1:87:04:6d:73:
af:2d:2d:8c:8e:e6:14:3e:e8:7f:8e:49:9d:49:fc:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:52:23:8E:AD:6F:99:C3:48:71:72:86:D4:91:CD:CE:09:CD:D5:C0
X509v3 Authority Key Identifier:
keyid:1D:58:88:65:BA:2C:93:FF:0D:8E:1D:18:74:51:4B:20:2B:50:EE:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D588865BA2C93FF0D8E1D1874514B202B50EEB1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfRrazhoTrVLHZEABcEpNLxzxB4mXaZrph4e2y2pTFYK/0/3136382e3232382e3138372e302f32342d3234203d3e20323634393237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:a2:94:a0:7b:6b:8e:55:b4:95:3b:35:6f:c2:42:05:eb:99:
94:d4:9b:dd:9d:4e:e8:e7:9d:38:91:03:34:cc:b1:fe:87:c5:
11:34:f8:31:f1:79:31:57:98:e6:81:c0:ac:a9:1d:11:b0:5f:
3c:cd:0d:75:79:7b:d8:ef:4e:45:62:52:a9:e3:35:96:bf:1c:
4a:2e:42:59:62:32:54:6c:53:42:f3:00:db:9e:0a:fc:5f:1c:
c9:81:ad:f8:84:d2:55:d0:a1:88:f2:63:ad:14:fa:7f:42:31:
d6:55:12:9b:28:b4:e5:9f:cf:8e:22:90:95:5e:76:b1:5c:a5:
16:88:7f:41:2b:bb:3c:52:55:cd:e0:b5:4f:79:d1:40:44:d4:
e2:da:2b:43:0c:8f:3e:b4:ce:4f:6e:7a:88:83:6f:36:0c:26:
41:dd:22:19:c4:6a:87:f9:38:fb:5e:b2:da:8c:5f:a7:25:97:
2b:38:ec:ff:2e:64:b7:f6:a2:fa:c5:e7:ef:5c:19:22:3e:74:
36:5d:e5:9e:26:d3:06:f8:af:aa:a2:8a:d6:44:72:51:f1:7c:
1d:1f:74:24:c2:82:e7:e6:3c:d4:ce:1d:dd:cb:22:27:e9:2e:
54:17:ea:44:ea:66:32:1d:ac:ea:27:d6:9a:bf:7a:b3:af:0e:
0a:56:4c:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 17:45:25 2024 by rpki-client on console-ams.rpki-client.org