Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
File: 3138372e38352e36302e302f32322d3234203d3e20323632343033.roa (raw, json)
Hash identifier: fBO9mzX6EKZgUbRBzNiztcnHljE6owlqiSAV6516iB0=
Subject key identifier: 34:BB:0E:8B:A2:00:1D:A4:80:F7:2D:29:D3:59:25:16:08:98:4E:85
Certificate issuer: /CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
Certificate serial: 1FE6E1B97169F5BF9040F01346AE3287DC754746
Authority key identifier: 94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
Signing time: Thu 04 Apr 2024 09:54:41 +0000
ROA not before: Thu 04 Apr 2024 09:49:41 +0000
ROA not after: Thu 03 Apr 2025 09:54:41 +0000
asID: 262403
IP address blocks: 187.85.60.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:e6:e1:b9:71:69:f5:bf:90:40:f0:13:46:ae:32:87:dc:75:47:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F
Validity
Not Before: Apr 4 09:49:41 2024 GMT
Not After : Apr 3 09:54:41 2025 GMT
Subject: CN=34BB0E8BA2001DA480F72D29D359251608984E85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:98:61:6e:6d:3b:30:d7:a0:99:f7:a5:11:
b7:42:b7:c8:0d:54:04:8f:e4:fd:8c:6a:0b:a6:d5:
f0:26:dc:ab:3d:5e:70:23:8f:6d:49:8b:f2:e3:67:
57:23:ef:2a:bf:7d:69:ee:bd:2d:89:5b:65:52:b9:
62:9d:7e:aa:ef:20:f7:d4:00:e5:25:9c:e6:63:d5:
df:41:ae:f7:50:e2:3b:62:64:f1:55:82:02:80:8c:
77:d6:c3:ee:82:98:63:fb:57:8d:99:6c:8b:ba:6f:
00:5b:d0:56:89:93:a8:3d:f9:f4:10:f6:2e:70:ab:
eb:ff:a8:1a:62:7b:88:49:9f:53:73:d6:ea:15:07:
b1:0c:05:bf:11:34:c0:cc:62:ac:bc:44:ef:2e:23:
78:61:e7:48:09:df:e9:0f:4e:25:b6:f9:11:94:2d:
a8:17:2d:97:96:89:84:39:e2:c8:00:e2:ce:86:0b:
7e:1f:99:17:f5:6a:6e:8a:37:f5:f6:0c:6d:7f:04:
3e:84:e9:22:6b:68:fd:b0:11:7e:3b:37:e0:91:47:
eb:12:0c:6f:72:b5:2c:e8:fc:57:5f:44:00:59:1b:
06:3e:19:a8:f1:8f:5e:c9:41:80:89:85:7c:49:65:
a8:6a:ac:69:58:cd:85:e6:17:62:44:7c:86:a6:e2:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BB:0E:8B:A2:00:1D:A4:80:F7:2D:29:D3:59:25:16:08:98:4E:85
X509v3 Authority Key Identifier:
keyid:94:8B:70:67:C8:4F:B5:B2:FC:1B:E3:CC:E1:DE:F3:62:98:BF:93:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/948B7067C84FB5B2FC1BE3CCE1DEF36298BF939F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/1/3138372e38352e36302e302f32322d3234203d3e20323632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.85.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:9c:db:9d:cb:60:36:8f:13:aa:a3:17:3f:3c:52:76:c9:5b:
e3:bd:7a:fc:53:75:19:a9:aa:78:ed:fe:cf:3f:7a:ba:dc:aa:
b8:36:c1:c1:34:ea:0c:2f:7c:be:7b:02:73:3e:cc:37:14:07:
76:a3:7e:c5:33:83:b6:a8:98:f9:84:f7:9e:45:82:9a:8b:63:
bd:b9:94:51:ca:6f:32:08:6c:00:61:c2:8a:6e:f8:0e:23:47:
71:ec:bd:46:e1:80:1c:28:c3:54:1e:4d:59:cd:1d:f9:6f:7c:
15:c4:3e:45:ba:52:b1:44:cc:2e:fb:8d:8f:98:9e:40:bd:90:
dc:51:e7:69:00:8c:48:36:6e:53:11:a4:45:d4:ec:ba:b2:60:
18:03:d1:99:7b:28:3d:3b:de:3a:68:7b:b3:15:3c:f0:7e:b8:
9f:67:9c:26:10:09:05:ad:0f:6a:46:7d:70:03:dd:e5:4e:df:
19:23:cb:ba:c7:c9:c6:08:36:4e:97:04:92:80:07:34:4a:fb:
b9:8c:f8:cf:bc:93:9a:be:31:2d:f5:4a:53:e4:e0:0f:a4:0e:
a4:b9:83:16:b8:12:bd:23:8a:d7:7e:df:40:d7:16:cd:52:22:
00:26:8f:3d:28:06:07:9a:ac:c3:52:37:84:57:44:fd:79:43:
0c:4c:1b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 22:10:15 2024 by rpki-client on console-fra.rpki-client.org