Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e322e302f32332d3233203d3e20323730333135.roa
File: 3138392e3132362e322e302f32332d3233203d3e20323730333135.roa (raw, json)
Hash identifier: nRDgJSNo4wmC/6rHsh+txOmG9cEFsEAzWCmcuhkMv7w=
Subject key identifier: 03:89:7D:57:B7:4D:75:21:63:C9:15:0F:8D:AB:90:21:0B:87:A3:9D
Certificate issuer: /CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Certificate serial: 6AE3AD4BDE72D348A64668B31D71CB275BB47C25
Authority key identifier: E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e322e302f32332d3233203d3e20323730333135.roa
Signing time: Wed 25 Sep 2024 15:13:11 +0000
ROA not before: Wed 25 Sep 2024 15:08:11 +0000
ROA not after: Wed 24 Sep 2025 15:13:11 +0000
asID: 270315
IP address blocks: 189.126.2.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:e3:ad:4b:de:72:d3:48:a6:46:68:b3:1d:71:cb:27:5b:b4:7c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261
Validity
Not Before: Sep 25 15:08:11 2024 GMT
Not After : Sep 24 15:13:11 2025 GMT
Subject: CN=03897D57B74D752163C9150F8DAB90210B87A39D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c6:fb:35:ab:05:6e:ad:6d:32:ba:dc:47:65:
18:9e:5d:54:b3:11:b5:9f:93:a3:66:18:b9:98:90:
92:98:58:67:57:e7:dc:52:cc:7e:33:34:df:cc:a5:
a5:f2:01:73:91:14:6f:e8:d4:b7:58:b1:71:30:dc:
e0:28:9c:d7:c3:8e:e0:ae:9d:37:d1:ac:43:48:f3:
0f:46:1c:a3:84:75:46:0b:c0:53:5b:a0:7b:33:77:
f9:bc:a4:1e:4f:8d:b9:22:f1:a8:29:57:48:37:3b:
db:40:91:28:5c:ad:10:99:e9:0c:c6:dd:8e:49:40:
15:27:0f:d9:f0:45:dd:61:7c:f2:01:af:d0:f8:f1:
73:16:5c:06:d6:c8:d5:13:ef:c8:67:07:d5:25:50:
cf:b7:16:4d:99:6e:d7:16:53:4a:89:f0:06:5e:ea:
ec:c1:1f:59:93:d0:1d:63:86:6d:06:68:4f:c9:89:
0c:74:7d:ab:2d:13:61:95:26:8c:3d:37:f1:d5:e1:
d8:ed:a6:98:f1:ee:99:bc:a8:72:cd:8e:a2:9b:24:
8f:cb:a3:ee:3e:e0:bf:f1:08:3e:2a:12:5d:87:71:
52:43:fb:08:60:7e:ec:d7:fb:22:fc:da:ce:a0:82:
2a:b3:df:05:64:8f:9c:69:f7:fb:f4:c6:23:1f:49:
2d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:89:7D:57:B7:4D:75:21:63:C9:15:0F:8D:AB:90:21:0B:87:A3:9D
X509v3 Authority Key Identifier:
keyid:E9:FD:3C:86:AF:3F:0C:4C:3D:09:41:B8:C7:47:A4:83:5B:8A:62:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9FD3C86AF3F0C4C3D0941B8C747A4835B8A6261.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqFJvcWMStduX9q8LGyde5EdQCWxAuGfz22A8StqsN54/0/3138392e3132362e322e302f32332d3233203d3e20323730333135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.126.2.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:cb:de:f4:84:6b:4b:df:50:88:b2:c1:00:8c:e7:f5:24:69:
d6:22:54:80:a4:96:54:6f:c8:b9:6a:58:03:9e:00:6e:3d:be:
a5:b4:5f:e6:53:23:a2:e1:88:5a:9f:cb:ec:dc:0d:f1:40:10:
12:10:c2:57:59:66:c6:84:a9:61:43:b6:0d:d1:dc:f4:1a:5d:
b1:72:dc:3f:c3:88:a2:16:71:6b:f8:63:a0:52:63:09:bc:88:
2a:02:5e:68:15:68:47:dd:fb:ca:75:1e:f4:0c:26:e2:0e:8c:
be:b5:95:6c:1f:ba:7d:cf:0a:cb:d3:19:65:bd:0c:bb:c5:69:
cb:8c:5c:d1:b4:5a:28:93:9c:f4:3c:bd:91:23:dd:1b:a3:a9:
43:b7:f1:ca:33:bb:66:cb:a5:4a:13:67:3d:7a:b1:fe:f8:16:
14:af:20:bb:6b:d0:ea:79:d9:f9:ab:4e:ff:be:de:d3:09:cb:
eb:cc:3f:86:06:26:be:1c:f3:1d:e2:19:62:71:ba:31:b9:4a:
44:5b:2a:86:59:4b:2c:da:7f:e8:0e:16:09:85:80:bc:ba:82:
da:f9:67:0b:4c:a7:2b:1d:2a:09:cd:01:e5:75:99:8b:7a:bf:
00:c1:8a:49:f1:bd:46:e2:ea:35:bb:0c:2c:96:f9:2c:67:96:
11:88:2c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 10:52:30 2024 by rpki-client on console-ams.rpki-client.org