Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e34342e302f32322d3232203d3e203238323630.roa
File: 3138372e39352e34342e302f32322d3232203d3e203238323630.roa (raw, json)
Hash identifier: QMpqrf0wTH9X2wCKOU5QMozli9rd25tYQMmhi2ssGW0=
Subject key identifier: 18:06:90:69:BA:30:2B:AC:FF:9E:3F:9F:7C:29:40:83:5C:6A:7C:45
Certificate issuer: /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial: 12D33072754031B11634A96BD4AD5A1CE310EA30
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e34342e302f32322d3232203d3e203238323630.roa
Signing time: Thu 09 Mar 2023 20:17:47 +0000
ROA not before: Thu 09 Mar 2023 20:12:47 +0000
ROA not after: Thu 07 Mar 2024 20:17:47 +0000
asID: 28260
IP address blocks: 187.95.44.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:d3:30:72:75:40:31:b1:16:34:a9:6b:d4:ad:5a:1c:e3:10:ea:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Validity
Not Before: Mar 9 20:12:47 2023 GMT
Not After : Mar 7 20:17:47 2024 GMT
Subject: CN=18069069BA302BACFF9E3F9F7C2940835C6A7C45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:57:2c:b2:4d:0f:04:21:e7:49:ed:13:b5:
93:bb:a9:b8:d4:b6:30:53:c9:da:da:7c:8e:e7:03:
31:2f:04:63:9d:00:6e:4f:49:10:06:40:7c:d1:d7:
b2:11:16:07:80:4d:3b:21:b6:24:bf:e7:09:0e:b5:
05:61:dd:f9:91:0f:e4:bd:8f:b8:94:a6:7c:72:0a:
d4:ab:c3:9d:30:63:e5:f6:4a:9b:43:ee:26:35:0c:
0b:b8:d9:dd:93:cb:4b:42:af:c0:ae:26:1e:2f:68:
3b:41:29:0c:0a:c7:ba:f0:a7:24:00:93:03:06:1a:
00:fc:31:e6:e2:b2:10:80:74:60:21:b7:6e:01:71:
ec:2a:de:e9:05:4f:e1:ba:16:67:6c:5c:84:d6:6f:
2d:da:0e:ad:77:33:ca:f5:b2:74:41:2a:36:ce:60:
e8:04:2e:c9:82:72:63:be:bd:7f:d2:65:d3:e2:a1:
a7:f2:9b:dc:36:81:88:43:d5:a0:65:1f:c3:b5:60:
85:36:0a:c7:95:71:b9:c4:ea:f9:9e:c3:00:08:13:
d7:60:a5:36:96:95:01:8a:04:38:b5:1c:0c:ca:d9:
28:e1:8e:53:1c:bf:b7:dc:93:00:75:f0:9f:8c:09:
bb:28:34:66:87:e1:3f:fb:51:02:c8:07:8c:37:7d:
bd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:90:69:BA:30:2B:AC:FF:9E:3F:9F:7C:29:40:83:5C:6A:7C:45
X509v3 Authority Key Identifier:
keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e34342e302f32322d3232203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.44.0/22
Signature Algorithm: sha256WithRSAEncryption
33:d4:e4:f6:97:b6:67:f5:66:6e:f0:01:4a:38:ac:fe:8e:c0:
9c:d7:d1:f7:db:b7:61:ca:f7:c6:f7:34:5a:9d:d5:9a:dd:49:
11:dd:bd:2e:ab:6a:98:fc:e4:1c:de:a6:11:6e:da:40:90:d5:
25:ea:35:01:8e:a2:24:46:59:31:a6:fa:2a:9e:41:15:81:d9:
f8:ff:3f:d5:f3:b1:28:75:d3:88:c1:0a:d3:b0:60:ef:b7:9a:
37:53:0d:c4:7b:28:e8:76:4b:ce:e1:1a:ed:d7:9c:29:32:7b:
9b:81:42:ce:60:98:07:6f:8a:cd:7e:7b:a8:c7:2d:68:b3:cd:
74:f3:44:f1:13:93:30:a3:67:7b:3b:b3:05:49:15:3c:25:0f:
38:8c:a3:c2:5a:e5:21:e3:58:f1:58:66:8a:59:95:69:c4:cd:
3b:2c:32:d0:09:2a:2e:b4:93:d9:5d:dd:c2:e7:7a:ee:61:3a:
41:1b:78:fa:c8:15:7c:11:32:a5:64:9c:1a:8b:85:a9:e2:46:
d5:ce:9a:0f:85:9d:29:d1:68:c3:b0:90:fd:62:da:20:87:12:
66:4c:d3:32:d2:3c:76:50:54:fc:38:f7:a1:ba:d9:a6:e7:26:
80:b4:b5:83:07:bd:2d:80:0a:af:14:b4:d9:04:90:73:0d:1d:
3d:f0:e2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 14:32:51 2024 by rpki-client on console-ams.rpki-client.org