Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e312e302f32342d3234203d3e20323730333135.roa
File: 3138392e3132362e312e302f32342d3234203d3e20323730333135.roa (raw, json)
Hash identifier: JM2GqbeH1RGsPZalTEp8W2S20KpQtRY0yi4LMaqCC0k=
Subject key identifier: C9:1B:69:71:8B:5B:A8:3E:10:D6:7A:86:60:37:A8:14:91:ED:17:DE
Certificate issuer: /CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Certificate serial: 5BB5E2ACDE74A34087302E8BB7D2DBE6E8A1C8E3
Authority key identifier: E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e312e302f32342d3234203d3e20323730333135.roa
Signing time: Wed 25 Sep 2024 15:13:12 +0000
ROA not before: Wed 25 Sep 2024 15:08:12 +0000
ROA not after: Wed 24 Sep 2025 15:13:12 +0000
asID: 270315
IP address blocks: 189.126.1.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:b5:e2:ac:de:74:a3:40:87:30:2e:8b:b7:d2:db:e6:e8:a1:c8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Validity
Not Before: Sep 25 15:08:12 2024 GMT
Not After : Sep 24 15:13:12 2025 GMT
Subject: CN=C91B69718B5BA83E10D67A866037A81491ED17DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:76:19:eb:2f:1c:d8:80:b2:39:da:a6:93:
7f:02:7e:75:8e:e9:4c:f3:44:c5:c5:7a:52:83:48:
59:63:f1:fb:5f:60:d6:1a:75:3b:0b:da:da:11:66:
65:4d:fe:a5:a4:2e:4b:59:7d:3f:f8:af:e0:04:a1:
8f:03:7c:0f:e3:64:f2:a7:a7:e5:c9:d1:70:de:5f:
5a:e6:ec:54:40:1a:cf:5f:2c:95:09:bd:6c:30:30:
f3:93:52:a2:f6:2d:19:4b:8e:1d:82:ca:fe:92:1e:
f3:ba:fa:7b:05:7b:81:a4:ab:48:93:f2:80:62:67:
5e:51:b9:5b:6e:ac:9f:7d:d2:58:69:68:26:23:f3:
a0:a1:af:73:ae:b5:bf:d9:9e:0e:01:02:2b:8b:7c:
62:ff:c2:0c:b4:e5:05:b2:6e:3f:cb:d7:ea:90:5b:
8e:db:b4:f7:97:bb:b5:ee:86:ff:6b:70:35:3f:63:
6c:50:7d:2c:64:53:44:f8:a9:37:e3:41:72:f1:89:
71:01:ef:20:06:57:1e:2c:2f:79:dc:4f:52:ce:f2:
47:05:b1:8e:51:5c:f9:47:97:a4:55:5e:12:79:64:
3d:cb:38:c5:43:6d:af:a8:09:ad:96:1e:aa:53:8a:
d6:f0:b2:ef:d8:0d:87:ed:63:98:ec:86:c0:15:cf:
95:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1B:69:71:8B:5B:A8:3E:10:D6:7A:86:60:37:A8:14:91:ED:17:DE
X509v3 Authority Key Identifier:
keyid:E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e312e302f32342d3234203d3e20323730333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.1.0/24
Signature Algorithm: sha256WithRSAEncryption
50:82:00:0c:97:4e:b5:b2:b0:85:55:08:cc:94:96:19:b6:46:
2b:9a:6a:a7:a8:fc:98:ff:6d:7d:43:f9:d7:5c:71:6f:64:4d:
17:f9:e2:28:f1:cc:ca:33:d1:03:14:6b:3c:df:ee:81:03:ba:
57:de:b9:e4:d7:90:85:03:6a:09:ae:63:1f:b0:cf:81:f8:68:
68:8c:56:78:36:c3:6c:b7:ba:3b:25:16:9f:0d:fe:03:da:f0:
84:42:ff:7f:5c:61:f0:28:71:02:97:a1:40:56:f6:78:b7:86:
11:c6:aa:91:fd:9b:42:f7:fb:15:eb:3b:fb:28:90:11:60:d3:
b8:8e:45:b4:3f:c8:7b:f0:a8:eb:72:31:47:66:13:63:ea:13:
43:39:0a:86:eb:d2:97:e6:13:01:0a:fe:78:b0:d7:5b:0c:a0:
cf:ad:d7:de:d5:a3:eb:54:bb:d3:91:0d:eb:36:13:b6:5b:3f:
de:5e:6f:85:11:da:51:34:e2:0a:97:19:eb:94:a3:7d:25:67:
a2:8b:47:0f:ab:a1:be:af:bd:81:a0:c3:a2:ff:0b:c1:b4:bc:
98:48:27:fe:f3:00:d5:e5:e8:b7:b2:1d:2f:f9:2d:4e:a5:f5:
94:65:31:e6:95:16:f5:f6:65:5f:c4:31:54:53:e9:e2:c9:2e:
15:b1:a6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 13:25:51 2024 by rpki-client on console-fra.rpki-client.org