Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3135382e302f32332d3233203d3e203238313635.roa
File: 3139312e3234302e3135382e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier: l61GJa8mLrB3zwaCxn/p8apRY7ZkZBifPLA+hScft0c=
Subject key identifier: B8:C2:3E:20:BB:B7:36:11:DD:71:52:00:D5:2D:0E:DF:46:2F:B9:2A
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 4DFA9135BDBB88DA22B7F7C833BB1BE4365C03
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3135382e302f32332d3233203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 19:22:49 +0000
ROA not before: Mon 01 Jul 2024 19:17:49 +0000
ROA not after: Mon 30 Jun 2025 19:22:49 +0000
asID: 28165
IP address blocks: 191.240.158.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fa:91:35:bd:bb:88:da:22:b7:f7:c8:33:bb:1b:e4:36:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 19:17:49 2024 GMT
Not After : Jun 30 19:22:49 2025 GMT
Subject: CN=B8C23E20BBB73611DD715200D52D0EDF462FB92A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:35:2f:08:c3:d2:03:c2:b6:af:3e:43:ce:03:
42:14:09:99:09:fc:3f:02:94:ee:cd:47:01:15:d8:
ab:17:a0:5a:54:71:db:6b:d8:fe:9e:c4:01:ed:07:
d4:7a:69:f2:b8:ec:76:92:56:f0:e7:69:33:a3:ed:
64:e2:42:87:31:ca:4c:c0:e7:ec:a8:f9:e3:b4:7d:
eb:ce:ee:dd:b5:f8:3c:43:ca:54:99:34:75:da:ec:
18:1c:26:71:65:f4:5d:db:40:93:0d:d2:42:77:d0:
db:29:9e:db:b8:28:bc:de:35:5a:e4:72:ac:a3:22:
4a:8e:58:98:ff:d1:32:af:5c:17:e3:a2:65:30:5e:
8b:2e:40:60:08:2f:b9:a6:ae:63:51:39:64:bf:eb:
4a:8b:fc:4c:c4:1b:d1:42:bf:2f:91:8f:c5:60:3b:
8c:95:bb:81:e2:b0:78:0a:81:87:77:6d:5a:7e:d6:
d6:41:e9:0c:ab:eb:e7:d7:c9:95:41:3a:f5:b4:40:
50:92:4f:eb:7f:0b:ab:20:30:48:28:e0:2b:89:bc:
59:94:07:a7:0b:55:68:5f:45:4e:4d:8d:c5:aa:bf:
30:ba:1b:64:d7:a7:59:df:7b:ff:bc:8d:96:f3:09:
48:82:7c:06:ff:81:1d:e3:1c:93:4d:a5:1b:cf:70:
8b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:C2:3E:20:BB:B7:36:11:DD:71:52:00:D5:2D:0E:DF:46:2F:B9:2A
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3139312e3234302e3135382e302f32332d3233203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.240.158.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:20:61:53:77:c7:26:6e:95:80:04:05:7f:82:6d:97:31:be:
a9:04:c6:92:6b:77:b8:ff:07:99:bb:2c:50:bb:b8:e1:b9:57:
97:99:18:88:62:ac:19:c9:9a:e5:1f:f1:45:72:ac:d4:d0:55:
8b:8d:49:71:5a:13:4d:49:f2:64:04:04:09:05:90:6c:a7:88:
8c:69:24:6c:9f:99:98:de:6b:b7:3e:de:78:78:90:9f:f2:f6:
c2:57:0c:32:61:a9:d1:e4:2b:9e:ef:98:16:d5:de:7a:f1:de:
df:67:4b:2a:cc:2b:dd:48:be:f8:0b:7c:fc:f5:8f:73:fa:49:
ca:29:d1:ef:ca:d1:37:e6:ee:51:82:05:4b:47:16:04:6a:3d:
fc:69:3b:61:e4:1a:8b:32:d9:fd:1a:89:bb:f1:7f:b4:de:71:
78:b6:be:b7:71:45:2d:55:a7:09:67:21:51:7f:97:e7:2c:fa:
61:ec:6f:8b:df:73:1c:aa:43:a3:d5:c0:72:f4:85:97:96:2d:
84:9e:61:6f:ba:55:84:53:a1:ed:62:33:45:bc:5b:02:ee:64:
ef:a7:57:f5:ed:e2:a6:ea:4e:fe:cd:af:d8:b0:a3:06:22:25:
34:48:6d:1d:ee:8d:5b:e1:6c:39:d5:d5:5b:3a:73:20:4e:7c:
02:f7:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org