Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
File: 3138372e36312e38382e302f32322d3234203d3e20323632343033.roa (raw, json)
Hash identifier: Mpp24YLET/oDTUddgEYX3Ao6TTUIan9We6C9ucOaG1I=
Subject key identifier: B9:0A:FC:98:41:57:A3:DC:88:1A:E8:D8:68:A1:22:E8:C2:CA:73:78
Certificate issuer: /CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
Certificate serial: 57690F4324A9E5CC8471B2A7A5842014D5D766FA
Authority key identifier: 94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
Signing time: Thu 04 Apr 2024 09:54:42 +0000
ROA not before: Thu 04 Apr 2024 09:49:42 +0000
ROA not after: Thu 03 Apr 2025 09:54:42 +0000
asID: 262403
IP address blocks: 187.61.88.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:69:0f:43:24:a9:e5:cc:84:71:b2:a7:a5:84:20:14:d5:d7:66:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
Validity
Not Before: Apr 4 09:49:42 2024 GMT
Not After : Apr 3 09:54:42 2025 GMT
Subject: CN=B90AFC984157A3DC881AE8D868A122E8C2CA7378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:86:2e:cc:42:5b:6b:8a:51:5d:bc:fd:24:92:
54:55:26:18:b7:4e:0c:b8:f2:bd:48:e3:b8:84:d2:
df:16:25:13:a5:1e:f6:b6:d7:f5:64:8a:37:25:61:
08:1d:bc:ce:09:e2:96:66:f5:04:b4:fc:32:42:88:
ff:a1:3d:fe:26:5d:7d:ed:98:d9:ee:b9:6e:ee:e1:
32:5b:ad:c1:55:c9:4b:fc:4d:66:61:65:98:27:12:
c8:05:ab:0f:e7:9c:13:39:4e:40:7b:4e:85:10:66:
9d:da:0e:dd:9c:6b:0e:eb:ad:5d:a8:04:a0:9d:cc:
b5:51:5d:3b:08:55:ba:02:71:fb:68:dc:4b:a9:83:
d7:f6:6f:4e:3f:85:44:c0:18:22:16:89:bb:0f:77:
6d:7e:5f:d9:74:ba:e5:58:0b:d1:5b:5a:57:5b:d9:
7b:8e:3c:30:ae:06:f7:41:6e:05:e5:6b:96:31:a0:
e7:26:8d:e3:fd:ff:62:f4:8c:e9:67:00:d5:a6:52:
e1:37:55:19:a1:41:db:ab:6e:ab:b7:a1:74:be:22:
09:d1:89:77:72:92:81:56:8a:be:17:3d:3f:cf:0b:
0b:52:0f:0d:b2:60:7e:05:f9:cc:8d:60:60:d0:b1:
71:b0:58:25:02:c9:d2:b5:4d:7e:f4:e8:59:47:a8:
73:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0A:FC:98:41:57:A3:DC:88:1A:E8:D8:68:A1:22:E8:C2:CA:73:78
X509v3 Authority Key Identifier:
keyid:94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3138372e36312e38382e302f32322d3234203d3e20323632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.61.88.0/22
Signature Algorithm: sha256WithRSAEncryption
be:2d:e2:77:59:92:0b:a5:0b:a5:84:e1:f8:bd:63:0a:3f:9b:
ce:ea:7b:b6:63:75:f2:b3:d1:12:ab:a0:bd:44:60:f0:0c:29:
9d:fe:73:cf:de:cc:c9:2d:43:15:e5:61:34:93:3b:d1:dd:ce:
f2:8e:ee:07:c6:09:71:91:90:32:32:2a:d5:eb:2c:f1:6e:91:
e1:a3:f1:be:1f:6c:9f:f2:2b:69:fd:d1:54:86:74:9b:b0:e9:
9d:be:99:31:d0:d4:83:1d:57:d9:78:4f:51:e6:27:48:cf:9b:
c7:f7:4c:e7:4a:0e:85:b8:d8:c1:e9:a7:90:0e:cb:07:c0:20:
99:68:94:05:95:db:b5:f7:d6:20:98:7e:99:78:2e:d3:18:9e:
21:a3:26:8b:a3:1d:62:0e:2a:4f:e2:79:be:ab:60:05:0c:f1:
a2:1d:77:0e:b0:17:92:0d:52:81:3d:4e:57:0a:de:ad:49:36:
58:8a:2e:2e:67:9e:a4:15:4b:6d:9f:ff:45:cc:44:ad:77:dc:
77:ef:d4:98:ed:47:be:16:0d:7d:df:7b:71:74:d3:14:f9:19:
09:ce:54:d3:b2:2e:2a:99:45:18:c4:5c:15:a1:94:d4:b7:e0:
fa:18:17:d2:6d:ca:1e:ca:b5:1c:a6:d9:ef:e7:c2:e7:f4:87:
4b:5c:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 22:10:15 2024 by rpki-client on console-fra.rpki-client.org