Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32342d3234203d3e20323730333135.roa
File: 3138392e3132362e302e302f32342d3234203d3e20323730333135.roa (raw, json)
Hash identifier: zgl3jxVbz5PhalThwXd2gz9fM92V1fK9F97O2EI5JUs=
Subject key identifier: 1B:AE:AD:86:1A:06:F8:3C:64:B4:BB:5F:10:75:B5:19:C4:91:B3:B2
Certificate issuer: /CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Certificate serial: 7FAF9781120CFD3BEE84175745D1EFD09F6C37FD
Authority key identifier: E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32342d3234203d3e20323730333135.roa
Signing time: Wed 25 Sep 2024 15:13:12 +0000
ROA not before: Wed 25 Sep 2024 15:08:12 +0000
ROA not after: Wed 24 Sep 2025 15:13:12 +0000
asID: 270315
IP address blocks: 189.126.0.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:af:97:81:12:0c:fd:3b:ee:84:17:57:45:d1:ef:d0:9f:6c:37:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Validity
Not Before: Sep 25 15:08:12 2024 GMT
Not After : Sep 24 15:13:12 2025 GMT
Subject: CN=1BAEAD861A06F83C64B4BB5F1075B519C491B3B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:f0:26:6a:ab:94:31:e7:a3:6d:09:08:62:b5:
2b:6c:cd:59:a2:1c:f8:06:c6:bd:a8:63:6a:e3:0a:
f6:3b:4b:43:63:96:90:f8:60:7c:10:06:7e:ab:a9:
ff:af:d9:2f:4c:b0:0b:78:2d:e7:49:f3:e9:0f:9c:
f0:53:c9:eb:dc:cb:fa:b7:da:b4:d4:74:d7:b8:f2:
31:2f:b0:7b:e1:bc:17:73:fa:02:8d:cc:f7:06:98:
72:73:18:74:3b:1e:fb:45:28:67:b2:5b:49:2f:37:
1f:8f:8d:26:11:4b:2d:7c:9b:51:48:e9:b4:c1:54:
e9:db:da:36:54:3b:23:fb:37:19:8e:7c:68:f4:5f:
d9:c1:60:f2:0a:7d:36:60:20:1d:19:c3:c2:7b:98:
98:67:90:f6:11:12:cb:a4:62:bd:e2:31:a7:74:31:
01:38:e3:97:e4:4d:80:82:43:76:96:e7:57:7a:ad:
4e:9f:8d:9f:34:42:42:40:50:3a:77:0f:08:a6:b9:
5a:a8:b7:4f:3a:de:c4:45:63:4b:89:99:a4:65:97:
64:db:a9:28:46:d9:02:d6:97:d7:f7:07:ae:4c:35:
26:6d:a5:bd:3c:af:f5:aa:ef:3d:d8:a0:71:35:86:
ca:76:38:c2:43:d0:69:de:2a:c2:87:ae:f6:b0:f6:
68:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AE:AD:86:1A:06:F8:3C:64:B4:BB:5F:10:75:B5:19:C4:91:B3:B2
X509v3 Authority Key Identifier:
keyid:E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e302e302f32342d3234203d3e20323730333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:dd:c9:88:ed:85:66:42:84:28:41:7d:cd:a0:e6:2f:ed:24:
78:7c:4e:21:11:40:e2:65:6e:a9:5d:80:11:76:74:13:d1:7a:
da:c3:dd:57:e3:8f:da:d7:2b:89:12:54:2c:a1:51:45:95:39:
df:50:4c:9f:7c:be:6a:bb:3e:e1:4a:37:a1:66:25:47:35:6e:
f9:0f:19:58:5c:f1:5b:14:5d:09:86:ed:1e:06:92:9d:24:3d:
1f:24:18:c8:f4:05:c4:fd:4c:b2:90:62:c8:4b:9e:6c:5d:16:
f5:45:69:b3:3c:3c:e6:d3:a4:fc:33:25:a8:0e:1d:10:3b:81:
65:e2:96:66:55:5c:5e:a9:2d:58:ac:94:77:6f:70:15:64:60:
64:23:e0:c1:2e:b4:fd:5f:f0:c1:91:e0:71:71:d9:97:19:38:
ed:c4:8b:47:84:ab:f0:ac:90:09:e0:bd:94:83:24:88:f2:8f:
da:ff:d2:17:da:0c:3e:a0:af:dd:f6:06:5c:b7:a5:44:c4:71:
84:c7:91:ec:89:28:fd:05:23:04:a8:2e:61:08:ac:e5:0e:ab:
d6:36:4c:7f:d6:45:51:46:86:9c:06:40:38:da:06:cc:59:fb:
c6:a6:c9:f3:c7:77:d8:40:13:9b:69:86:00:65:31:b1:2f:6d:
58:f3:5a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 10:52:30 2024 by rpki-client on console-ams.rpki-client.org