Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32322d3232203d3e20323730333135.roa
File: 3138392e3132362e302e302f32322d3232203d3e20323730333135.roa (raw, json)
Hash identifier: v1aGw5n4sYA7w3qSBH6xHQwVvkXWpWwW+GbRO6lrPdQ=
Subject key identifier: C0:59:CD:CB:75:25:89:3D:CE:A0:07:68:4F:A2:1F:75:45:6F:03:77
Certificate issuer: /CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Certificate serial: 6B1ECB343EB3CC5074DFA43ADB7DF07318C7AE4B
Authority key identifier: E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32322d3232203d3e20323730333135.roa
Signing time: Wed 25 Sep 2024 15:13:11 +0000
ROA not before: Wed 25 Sep 2024 15:08:11 +0000
ROA not after: Wed 24 Sep 2025 15:13:11 +0000
asID: 270315
IP address blocks: 189.126.0.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:1e:cb:34:3e:b3:cc:50:74:df:a4:3a:db:7d:f0:73:18:c7:ae:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Validity
Not Before: Sep 25 15:08:11 2024 GMT
Not After : Sep 24 15:13:11 2025 GMT
Subject: CN=C059CDCB7525893DCEA007684FA21F75456F0377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:1a:f0:1c:5e:07:b6:fe:af:77:da:de:c3:
bf:50:c1:12:99:23:99:9d:0c:8a:df:47:26:38:f3:
28:f5:20:5b:7e:0d:64:bd:7d:2e:4d:2e:42:c9:b5:
f0:ad:75:20:d1:81:b3:b8:ee:22:6f:0c:1e:97:8b:
fb:d6:74:44:1d:da:1f:50:e1:5e:6e:dc:76:94:6d:
22:ed:c4:8a:d5:36:6c:6e:50:96:49:ee:1d:ae:b4:
36:3e:2e:50:2b:13:1c:5e:c9:22:18:93:65:30:32:
45:6a:6d:19:08:d6:b2:eb:22:76:de:50:eb:48:54:
c7:5d:48:ba:73:1d:66:5e:d0:97:59:09:04:c1:00:
8b:63:79:5b:45:ac:3a:9b:21:49:7f:79:8a:34:d9:
1d:e9:da:74:7e:32:0e:b6:ec:54:b3:de:43:a2:e9:
66:73:13:84:89:d9:c0:cb:ff:2f:49:f2:cc:7e:43:
89:1b:4f:ff:a3:0e:dd:72:26:75:ec:dc:db:69:7f:
1b:21:08:f0:13:39:0b:cf:80:91:a1:94:e0:1a:17:
86:17:17:39:2a:df:e0:77:9e:1d:47:9e:ef:7d:8c:
4e:ee:9e:93:fa:61:d4:4d:31:9f:26:32:85:f1:bd:
50:a5:e4:11:b4:f6:0c:27:1d:0f:98:e2:9f:7c:82:
02:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:CD:CB:75:25:89:3D:CE:A0:07:68:4F:A2:1F:75:45:6F:03:77
X509v3 Authority Key Identifier:
keyid:E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32322d3232203d3e20323730333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.0.0/22
Signature Algorithm: sha256WithRSAEncryption
68:e7:94:47:8a:4e:a3:96:42:a7:e1:5d:30:7b:df:ba:00:12:
21:1e:8e:c4:44:6b:d1:b1:8d:06:94:16:d4:b4:f7:1e:31:64:
55:80:90:9e:6d:46:74:36:cc:c2:91:b6:91:6c:3d:2e:c0:9d:
b8:49:66:ba:6c:1f:77:7c:01:aa:eb:07:98:93:8d:61:fe:aa:
ed:dc:de:77:46:a5:86:40:c9:41:b8:8a:21:08:c5:f1:16:eb:
bf:c7:d7:d2:32:a2:06:30:8c:5f:e8:8c:13:de:fa:bb:09:41:
42:4a:75:95:6e:44:a1:75:ec:48:8e:73:eb:d0:07:13:09:7a:
79:ae:77:9b:6e:9d:e9:c3:d2:d1:f2:3f:55:e1:4f:5d:c9:5f:
6e:b1:da:65:79:fb:a0:4f:5f:9f:56:ab:df:40:42:8c:77:47:
68:f5:c0:7c:a3:11:66:77:70:75:77:91:54:c2:06:d2:73:7c:
dd:1c:16:5f:3f:e1:f3:85:0c:9d:29:7d:41:f8:ec:b7:6a:12:
73:bb:a3:dd:84:e7:00:f3:7c:7c:92:27:e5:76:d5:e8:0e:b2:
55:35:64:ab:79:71:84:0f:b0:8c:53:9d:b1:b5:ea:51:c2:c6:
9f:24:be:41:d9:c6:ef:02:ea:aa:66:40:5c:b0:c0:0b:b3:8d:
05:0f:a6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 13:25:51 2024 by rpki-client on console-fra.rpki-client.org