Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32322d3332203d3e20323730353139.roa
File: 32342e3135322e3130342e302f32322d3332203d3e20323730353139.roa (raw, json)
Hash identifier: +TDvyeuR6znpWL6GIUF1CXxRmwpPyCTMrtx48A7lTn4=
Subject key identifier: 1B:EC:38:EB:21:01:9E:54:69:87:2A:39:B7:86:03:98:A8:43:C2:C2
Certificate issuer: /CN=AFEA1A7CF9C1AD8364343BBA784B46BA7112B068
Certificate serial: 2D3E756674327A93EE9A3CA3A21172CB3F39A1DD
Authority key identifier: AF:EA:1A:7C:F9:C1:AD:83:64:34:3B:BA:78:4B:46:BA:71:12:B0:68
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFEA1A7CF9C1AD8364343BBA784B46BA7112B068.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32322d3332203d3e20323730353139.roa
Signing time: Thu 06 Jun 2024 19:19:52 +0000
ROA not before: Thu 06 Jun 2024 19:14:52 +0000
ROA not after: Thu 05 Jun 2025 19:19:52 +0000
asID: 270519
IP address blocks: 24.152.104.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:3e:75:66:74:32:7a:93:ee:9a:3c:a3:a2:11:72:cb:3f:39:a1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFEA1A7CF9C1AD8364343BBA784B46BA7112B068
Validity
Not Before: Jun 6 19:14:52 2024 GMT
Not After : Jun 5 19:19:52 2025 GMT
Subject: CN=1BEC38EB21019E5469872A39B7860398A843C2C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:54:21:e9:21:7e:a6:4f:ea:f6:c9:3d:19:
5c:3f:69:7f:b2:b6:90:fb:eb:b8:60:2e:66:9b:19:
2e:27:01:1f:66:56:f9:af:34:eb:e1:33:56:15:fb:
a6:1c:7c:c9:4c:32:64:87:ba:79:63:19:89:c2:0a:
a6:1e:1a:00:01:5c:6a:65:32:79:e8:55:2b:3d:46:
80:85:73:d3:f6:74:1e:36:79:01:25:1b:d8:a3:92:
c2:66:ae:68:ee:a2:f6:bc:8f:ef:b8:ea:16:3f:16:
f3:f6:3f:98:ca:ce:86:1e:bf:37:1d:7e:08:dd:b6:
4f:ca:04:01:47:34:f5:00:14:3c:25:04:f7:9e:69:
ea:5b:4f:4c:75:29:7f:ea:96:b0:f5:1d:51:0a:49:
5c:d0:4d:f8:d6:d2:8d:65:77:37:c3:85:af:66:1b:
9a:b8:81:a1:f8:f8:c3:9a:c3:25:2a:ab:df:4c:3b:
71:e7:f8:15:d8:b8:bb:34:87:ea:20:51:0a:c0:46:
8d:b0:e5:97:c2:14:e4:57:52:b2:55:9e:3c:f1:82:
76:fd:04:7e:d5:96:ee:14:0e:1f:c1:a2:07:b5:62:
04:ee:91:20:4c:18:d0:77:c6:c7:25:4d:b9:76:bb:
9d:b3:c7:0e:99:4d:52:4b:d8:cb:18:62:34:c8:07:
c7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:EC:38:EB:21:01:9E:54:69:87:2A:39:B7:86:03:98:A8:43:C2:C2
X509v3 Authority Key Identifier:
keyid:AF:EA:1A:7C:F9:C1:AD:83:64:34:3B:BA:78:4B:46:BA:71:12:B0:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/AFEA1A7CF9C1AD8364343BBA784B46BA7112B068.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFEA1A7CF9C1AD8364343BBA784B46BA7112B068.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C8AvG6aLNSUYHMAc3bK1GZN4eAmzKCyPYuRLPvNfxzhj/0/32342e3135322e3130342e302f32322d3332203d3e20323730353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.104.0/22
Signature Algorithm: sha256WithRSAEncryption
05:0e:cc:8c:6e:65:df:f8:45:6d:e3:88:57:fc:f6:56:47:40:
50:c8:76:db:c1:ea:31:a0:4c:0e:71:57:87:37:dd:b4:dc:90:
c6:28:dc:2d:b8:e3:35:25:76:52:b3:1e:41:07:14:b1:85:c8:
88:61:01:87:e3:6d:fa:8b:df:62:70:91:63:4c:44:ae:4d:6c:
ef:8a:47:cc:d1:2a:ba:a6:a3:04:14:1d:c6:bb:77:ba:82:fb:
47:65:8f:5d:a8:aa:3e:4a:9f:97:ec:58:af:0c:d1:67:a1:7f:
86:e5:af:a0:3a:c5:8a:3b:60:f8:a9:ba:55:3c:76:05:39:78:
5e:91:bd:b7:5d:34:ac:7c:5f:49:c9:ea:f8:f4:9d:41:08:d7:
39:1c:bf:6d:74:ca:cc:77:ed:46:2e:bf:23:65:7c:26:20:95:
a5:a0:f8:dd:8b:9d:8f:15:dd:71:cb:b7:3f:0d:5e:ef:99:a1:
7d:e5:cf:96:2e:aa:b9:0d:c0:db:91:c6:95:a6:fb:ac:ca:8c:
d8:ef:1d:74:9e:45:dc:36:52:59:88:a5:42:97:07:fb:8f:be:
a5:b3:67:94:78:9e:26:a4:3f:29:ae:68:70:03:6d:55:c8:23:
c9:e1:52:b8:67:d9:0b:00:39:e8:1f:28:e2:54:73:ca:24:82:
d5:f9:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 28 00:35:28 2024 by rpki-client on console-ams.rpki-client.org