Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32332d3233203d3e20323730333135.roa
File: 3138392e3132362e302e302f32332d3233203d3e20323730333135.roa (raw, json)
Hash identifier: XTbfsJRhMsguNBdLp4pEdCbKOOjKG4xyg9sHWf5WJ8M=
Subject key identifier: 90:0E:8D:6A:49:4D:8A:F5:EE:26:C3:8F:57:4A:15:48:C0:9E:82:E8
Certificate issuer: /CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Certificate serial: 68C56AE1A46648AFEB9304B7F5C9552A091BCBA5
Authority key identifier: E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32332d3233203d3e20323730333135.roa
Signing time: Wed 25 Sep 2024 15:13:11 +0000
ROA not before: Wed 25 Sep 2024 15:08:11 +0000
ROA not after: Wed 24 Sep 2025 15:13:11 +0000
asID: 270315
IP address blocks: 189.126.0.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:c5:6a:e1:a4:66:48:af:eb:93:04:b7:f5:c9:55:2a:09:1b:cb:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Validity
Not Before: Sep 25 15:08:11 2024 GMT
Not After : Sep 24 15:13:11 2025 GMT
Subject: CN=900E8D6A494D8AF5EE26C38F574A1548C09E82E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3c:ae:df:3c:bb:3f:5c:7c:20:42:6f:60:50:
60:23:85:37:98:ba:64:88:eb:3a:59:75:00:c1:1e:
97:ac:72:c8:8c:65:bc:44:75:49:aa:e4:d6:04:98:
26:d0:a6:b6:17:f5:e9:d5:21:68:5d:5b:4b:ce:2c:
8c:dd:8c:d9:ca:86:77:18:3a:1f:e3:bb:a4:68:ca:
46:14:35:fd:9f:cc:3f:84:a3:71:7a:c5:d7:66:ec:
86:72:fb:4b:0e:85:b1:55:d8:c2:ba:1e:87:d0:1f:
b2:d8:8c:6b:84:38:30:b4:6e:ba:c1:94:6b:35:96:
e4:7d:72:6b:88:d3:02:16:e8:f1:36:2c:3d:85:f5:
1e:f9:0e:40:b3:f2:d1:49:31:97:eb:e3:2f:fc:4e:
85:18:d4:77:eb:81:c5:4d:45:9f:11:31:8f:4d:78:
e7:91:c1:a5:1d:7d:69:9a:73:19:ea:86:3e:1a:4d:
5f:1a:8c:07:7a:d9:e9:13:23:6b:85:0b:9b:71:d4:
67:06:f9:9b:61:d4:7c:75:39:2e:52:7a:15:6e:1a:
72:34:7f:d1:dd:3b:80:b2:2f:9c:cb:4f:c4:b8:0a:
7f:b4:54:33:09:d7:ff:ac:fe:7e:15:ee:c6:ab:48:
ed:39:d9:6d:53:64:9f:7f:78:0b:c1:9e:73:af:81:
81:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:8D:6A:49:4D:8A:F5:EE:26:C3:8F:57:4A:15:48:C0:9E:82:E8
X509v3 Authority Key Identifier:
keyid:E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32332d3233203d3e20323730333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.0.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:2b:fe:4c:9a:86:5c:cb:cf:08:2d:13:fb:65:53:aa:6b:7b:
eb:bd:b8:f4:d3:57:a2:0d:c0:5d:b8:fe:83:d0:71:c8:38:cc:
83:dc:90:66:51:34:0d:80:fb:96:d3:60:7a:f9:13:e7:22:9c:
a2:f2:af:5c:2b:8e:19:88:77:be:76:59:42:e3:07:95:f5:67:
a5:a7:77:bb:71:57:11:d1:0d:10:d4:6b:ae:86:3c:3d:5d:22:
b7:40:8f:18:16:07:dc:f9:bb:05:64:96:d2:7d:8a:8d:3c:d9:
68:e9:ec:09:0f:5e:81:4f:6f:c9:0f:db:0e:31:0b:f1:83:38:
55:5b:c9:fb:d3:dd:fa:af:af:6b:d8:dc:21:37:ed:7b:70:c5:
2f:73:5b:42:73:31:a5:59:81:55:c9:be:52:37:61:dd:d3:29:
5c:0c:c9:e5:d2:d9:3a:b8:83:6b:5a:6e:3e:36:89:81:c6:b2:
7b:1a:ba:62:b2:23:be:bd:58:80:f1:87:e4:3c:c2:50:00:45:
db:6a:f2:ac:44:70:42:54:6f:40:0d:9e:6f:d3:d3:ff:6e:dd:
41:22:72:10:36:6a:93:c0:0c:ab:48:e1:28:70:93:e9:0f:e4:
a2:a8:f7:48:e1:98:a2:67:a6:7e:20:10:55:ea:d5:20:9a:60:
26:d3:a4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 10:52:30 2024 by rpki-client on console-ams.rpki-client.org