Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
File: 3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa (raw, json)
Hash identifier: 59IgtJAErlZC52f7Pq8tCFhQpg1+73cq6x4CUa/ObdQ=
Subject key identifier: 14:69:6D:42:A1:1B:25:3F:E0:80:D6:1A:37:58:71:A6:CD:A6:E0:1A
Certificate issuer: /CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
Certificate serial: 38861FDC54CA1FF5E81D21F340A0BD77DCBE3837
Authority key identifier: 8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
Signing time: Wed 22 May 2024 18:13:17 +0000
ROA not before: Wed 22 May 2024 18:08:17 +0000
ROA not after: Wed 21 May 2025 18:13:17 +0000
asID: 269712
IP address blocks: 190.112.156.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:86:1f:dc:54:ca:1f:f5:e8:1d:21:f3:40:a0:bd:77:dc:be:38:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD
Validity
Not Before: May 22 18:08:17 2024 GMT
Not After : May 21 18:13:17 2025 GMT
Subject: CN=14696D42A11B253FE080D61A375871A6CDA6E01A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b9:09:d8:73:58:e1:ec:36:8f:da:56:7d:0b:
52:5d:1d:7b:b2:bb:75:aa:fe:bb:c7:54:f2:0b:52:
49:67:06:ad:68:07:ba:44:c0:21:9f:c7:2c:58:a6:
54:90:eb:1e:fc:fc:28:9e:e5:b4:95:88:6e:34:6c:
0d:d2:af:5d:30:f0:0e:a9:ac:d2:0d:29:43:e5:31:
54:95:66:72:a1:ba:83:fd:3a:1e:a5:be:05:6e:77:
d7:de:36:5c:f1:0b:45:4e:16:5a:c1:a7:5d:04:22:
64:59:99:bc:7c:27:c2:15:c0:92:16:5a:96:f8:19:
a5:56:45:98:9e:af:23:c6:0f:5c:ca:7c:de:d7:ef:
e3:e0:fa:aa:72:71:c1:39:ec:8f:d2:c0:c2:e6:10:
41:c9:1b:5c:7c:01:57:1b:ae:b4:1b:67:8c:a0:92:
fa:9b:b4:70:90:6d:aa:da:b2:9b:b2:53:76:8c:54:
78:44:6d:82:b5:ec:4a:01:e1:6f:56:b0:a9:da:a8:
a6:4d:25:f1:52:67:9c:7b:e3:50:fb:fa:88:58:89:
01:d3:ca:c9:dd:ce:f6:41:d5:9a:44:02:a1:1a:bd:
6f:5b:cd:74:2c:5b:63:b5:66:9f:fa:73:d2:6e:20:
f3:aa:1c:c0:b6:b9:f6:b9:05:42:c1:7c:aa:3a:24:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:6D:42:A1:1B:25:3F:E0:80:D6:1A:37:58:71:A6:CD:A6:E0:1A
X509v3 Authority Key Identifier:
keyid:8F:CC:11:8E:9F:86:EF:9E:F1:FF:07:08:58:9C:3C:42:8A:30:BB:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8FCC118E9F86EF9EF1FF0708589C3C428A30BBFD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzNz5dBE2kMYGnAfxEsNYLv7aMT8m4yxP63Yv82Ldm2g/2/3139302e3131322e3135362e302f32322d3232203d3e20323639373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.112.156.0/22
Signature Algorithm: sha256WithRSAEncryption
09:84:43:18:8b:ae:c4:04:47:ab:d6:2b:09:b1:6f:0b:76:93:
9d:55:4e:a6:5e:99:2a:e1:c2:6a:26:21:7e:5f:f1:75:dc:9b:
8f:38:99:4b:6e:45:22:33:17:c1:bf:bb:45:66:4a:0b:ad:aa:
71:e1:fa:65:e5:93:75:9a:a0:33:e0:c4:dc:50:7b:6a:0e:04:
42:16:b8:9d:0b:d8:82:8c:4b:26:25:73:b6:24:9d:40:c8:46:
27:f8:d9:e7:6c:d4:07:e0:b4:3e:ba:8f:64:92:f1:48:c1:94:
17:5b:c9:56:7f:b9:74:0e:7f:7c:d0:ed:ce:e7:7f:5c:86:35:
d1:b3:9a:ea:5a:8f:92:4d:26:e9:66:7c:7c:a9:3a:ba:bf:dc:
b6:52:c1:d6:71:96:8c:c3:45:ae:7b:32:a8:b6:98:f6:d7:d6:
85:a4:78:a2:6c:db:08:44:d1:41:18:2b:e7:8b:54:0e:a9:75:
42:22:15:e8:29:25:b2:e1:69:6c:a6:cb:5a:8b:3c:a4:b2:cd:
75:c2:eb:c6:c1:35:79:ef:f6:ad:ed:7d:87:64:17:df:9b:a7:
37:d6:a6:80:5c:1a:66:1f:51:2e:bc:ac:14:2d:6c:a2:1f:f3:
cb:32:38:2b:52:fb:61:c6:fe:0f:72:6e:d3:cf:8f:bb:c0:5b:
e2:0e:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 06:09:55 2024 by rpki-client on console-fra.rpki-client.org