Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3234203d3e20323633353039.roa
File: 3139312e3234332e3138342e302f32322d3234203d3e20323633353039.roa (raw, json)
Hash identifier: Ha8mwOYhSKk2CndCcZ00bcrGRJk/Q+HDMoHwu4wr1jI=
Subject key identifier: AB:25:C7:2B:4F:D6:9B:29:31:44:A4:2C:FE:25:01:5A:E6:F4:2C:50
Certificate issuer: /CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Certificate serial: 1F8670A9546256675C70B54C234810354016D5BE
Authority key identifier: D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3234203d3e20323633353039.roa
Signing time: Sun 15 Oct 2023 06:34:14 +0000
ROA not before: Sun 15 Oct 2023 06:29:14 +0000
ROA not after: Sun 13 Oct 2024 06:34:14 +0000
asID: 263509
IP address blocks: 191.243.184.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:86:70:a9:54:62:56:67:5c:70:b5:4c:23:48:10:35:40:16:d5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D
Validity
Not Before: Oct 15 06:29:14 2023 GMT
Not After : Oct 13 06:34:14 2024 GMT
Subject: CN=AB25C72B4FD69B293144A42CFE25015AE6F42C50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7b:5c:0b:84:de:a5:0d:bc:39:49:33:a0:79:
83:14:97:f8:b5:87:65:20:8a:ff:f5:c7:45:5d:9e:
f4:31:ca:3c:02:dc:cc:5d:5c:38:55:e8:72:6e:79:
eb:67:42:6f:e9:9e:70:5d:4d:95:89:ee:ae:d3:90:
03:1b:0d:7b:cd:94:bb:27:2f:e0:14:1c:8a:1e:49:
d1:57:0e:65:10:02:1c:92:2a:b3:19:ba:c1:70:ad:
cd:0a:ee:6d:54:e0:0c:e1:7c:77:08:10:6a:c9:bc:
04:e3:96:c8:ae:23:77:78:8f:6a:48:f9:a6:ff:84:
69:39:f2:b3:48:8b:4a:b5:b2:ad:1f:2d:74:84:e1:
68:18:9c:af:1f:58:01:e2:bd:ae:89:0a:f0:de:ce:
24:b7:5c:bd:65:84:47:72:7d:ba:43:05:0b:ec:67:
3a:22:4a:b1:2d:6d:8b:39:34:4f:67:85:19:85:83:
7a:83:ee:31:cd:ab:4d:6d:24:f9:28:d4:67:a5:03:
df:42:72:6c:a6:3f:1e:48:59:4e:59:b7:ae:bd:87:
db:b9:e0:1d:1c:64:f6:f3:9c:87:f1:24:2d:92:4c:
eb:06:84:72:77:42:74:01:2c:fd:41:11:6b:8c:38:
ea:b1:fe:54:d1:04:f3:cc:df:ac:86:7f:42:0e:1b:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:C7:2B:4F:D6:9B:29:31:44:A4:2C:FE:25:01:5A:E6:F4:2C:50
X509v3 Authority Key Identifier:
keyid:D4:F6:67:83:B8:16:2E:6E:EF:49:FB:BF:2B:38:D9:A7:3D:AD:34:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4F66783B8162E6EEF49FBBF2B38D9A73DAD342D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1UfijZUrTzvC2AsesQSkVkF1zSvohG8Zq1MPqGByHTi/0/3139312e3234332e3138342e302f32322d3234203d3e20323633353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.243.184.0/22
Signature Algorithm: sha256WithRSAEncryption
26:b0:de:41:42:35:11:17:26:df:c1:2b:a9:85:d1:f2:87:9e:
b4:8c:b1:74:ad:61:66:17:b3:56:63:fe:65:7a:ac:46:d5:21:
ba:dc:d2:cf:fb:d0:79:82:d3:64:43:14:2e:f5:ec:21:ce:41:
15:c9:8a:90:4d:83:08:51:32:03:e4:15:ad:3a:d6:0f:72:f9:
dd:1a:4f:d5:21:fc:7f:23:ac:9b:b1:9b:ef:a6:45:58:98:25:
8c:a4:8f:6a:55:de:f6:de:2b:42:f0:60:63:c6:ec:28:76:b8:
a1:4e:69:8d:59:28:aa:07:50:b6:bd:ee:4e:e5:f3:c3:b8:c9:
c6:65:95:bd:d3:35:c6:28:c8:65:1a:7a:4b:8b:8c:6b:84:12:
01:0b:1b:bd:71:98:b9:53:3b:af:e1:88:bc:02:3a:19:96:2a:
4a:aa:a0:67:b0:53:6b:7b:d1:c6:6b:a5:46:42:c7:7f:0c:cf:
5e:51:dc:9c:a1:2a:a7:e6:8b:29:91:8d:36:a2:30:c5:b2:57:
93:ca:6d:30:9b:e9:9d:3f:1d:28:a0:ad:50:41:d9:8f:fe:dd:
49:eb:c4:e8:d2:3f:5f:ec:10:63:20:8d:35:0c:5e:91:b2:c9:
4d:98:d1:f2:1c:b0:00:85:88:5b:2f:88:a7:ec:53:21:e4:69:
f3:ad:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 8 19:53:55 2024 by rpki-client on console-ams.rpki-client.org