Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa
File: 3138392e37362e3132382e302f32302d3234203d3e203238363637.roa (raw, json)
Hash identifier: Jm7XXBjwFHHG7GXMSZI1w2YdKNWEtV8DEn+4gpt3F9s=
Subject key identifier: 87:5E:D2:2E:62:B4:A7:3B:65:46:06:FB:0A:0B:66:14:65:91:18:5B
Certificate issuer: /CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Certificate serial: 403FCF3026B4503FC0DF1FBA348BD920C9B037DE
Authority key identifier: 9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa
Signing time: Fri 03 May 2024 20:10:58 +0000
ROA not before: Fri 03 May 2024 20:05:58 +0000
ROA not after: Fri 02 May 2025 20:10:58 +0000
asID: 28667
IP address blocks: 189.76.128.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:3f:cf:30:26:b4:50:3f:c0:df:1f:ba:34:8b:d9:20:c9:b0:37:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3
Validity
Not Before: May 3 20:05:58 2024 GMT
Not After : May 2 20:10:58 2025 GMT
Subject: CN=875ED22E62B4A73B654606FB0A0B66146591185B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:f3:64:11:bd:10:2d:79:df:6c:54:06:cc:
fc:87:96:d1:17:87:50:9e:e2:87:4a:06:ca:47:51:
68:c7:e2:f3:b5:3d:3d:8a:43:78:f6:ec:fe:e7:cd:
67:c5:61:74:1f:61:89:87:e8:52:b2:f1:0a:27:93:
b7:83:9e:ba:1d:9a:29:bf:74:fe:fa:3e:02:de:98:
e2:23:d2:99:df:dc:d4:f9:65:f5:41:eb:32:51:e3:
a0:59:69:30:5d:24:2c:47:f5:b7:b4:a1:46:99:67:
46:65:db:5a:1b:11:d7:e7:c1:79:d6:28:fe:02:07:
ea:98:33:c1:2d:7d:c0:30:ed:f9:e7:e2:d7:04:57:
91:06:b5:6b:85:24:40:74:75:07:5a:5e:8c:1d:fc:
b4:94:a4:d8:ec:6d:3f:c7:0f:11:10:b9:52:09:7c:
24:dc:77:fb:cd:e1:4f:84:6e:30:65:b5:82:42:65:
95:cd:22:60:4b:d9:a9:b0:a5:42:a0:54:ae:29:2d:
26:75:77:76:33:66:17:2b:78:bb:0e:43:11:17:a6:
dd:6c:c0:dd:83:81:a2:36:a0:31:5d:60:52:fb:4f:
ff:87:66:7b:d1:c6:06:70:26:df:65:29:7e:14:a2:
ef:48:7b:d3:dc:4b:69:86:e8:d5:d8:e3:18:01:61:
83:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:5E:D2:2E:62:B4:A7:3B:65:46:06:FB:0A:0B:66:14:65:91:18:5B
X509v3 Authority Key Identifier:
keyid:9C:0B:4F:E2:8E:0B:B8:DF:CB:32:FF:27:FD:74:EE:DE:F3:63:42:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B4FE28E0BB8DFCB32FF27FD74EEDEF36342D3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DaFywqLKtZfEYLU6fmSyQiWc4SWjU4QE4R4SJBjQxN8h/0/3138392e37362e3132382e302f32302d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.76.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:c7:f4:47:2a:51:9d:ab:e5:25:c7:77:9c:9b:8f:92:1c:3d:
1d:56:41:ad:dc:1c:46:d5:2f:5e:7e:f6:b1:2d:bd:1e:df:86:
3f:be:39:ec:f5:aa:91:e1:48:66:45:8b:e6:eb:7b:49:95:6a:
a2:00:71:c4:77:a2:bc:05:b6:2b:d9:0f:60:39:41:6c:ad:09:
e4:c9:bf:ea:b4:0f:13:eb:de:ec:01:3d:e8:7f:98:49:54:37:
de:f3:af:de:85:83:a5:e4:86:f1:c2:10:ac:be:9e:7a:5f:22:
48:48:fc:7f:c0:35:71:19:3c:82:c5:ae:27:1d:97:d7:05:a8:
70:c9:dc:fa:53:ea:62:1b:73:be:1d:46:c1:14:f9:32:54:28:
3f:43:96:6e:d4:8b:41:10:36:7d:05:60:0f:71:4e:b3:db:6c:
04:c7:2e:be:60:dc:b5:ef:81:dc:f1:4a:f6:b6:98:d9:78:16:
f2:58:3b:32:26:14:e8:46:ef:4f:1e:2d:c3:fb:20:ac:cf:b2:
92:95:3c:c5:ea:f3:79:b9:af:91:73:3c:1a:10:26:76:c8:60:
fe:20:ad:01:a1:44:aa:05:96:b1:b2:80:26:f8:27:45:dd:cb:
34:6b:68:b9:a4:cc:a2:39:e9:12:36:98:24:19:a3:65:0b:fc:
6a:02:dd:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 10:55:50 2024 by rpki-client on console-fra.rpki-client.org