Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
File: 3136382e3139342e36302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier: 6m52SR9DRhnajh7Rh0iVsfag6adHiReFYWXlZvaOTyI=
Subject key identifier: 2E:3E:0D:1E:E5:45:F4:31:99:EE:73:77:AA:0B:72:91:32:8D:E8:36
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 141BAFC8071FE971C1285BA3849337D3C796A655
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
Signing time: Wed 12 Jun 2024 13:14:09 +0000
ROA not before: Wed 12 Jun 2024 13:09:09 +0000
ROA not after: Wed 11 Jun 2025 13:14:09 +0000
asID: 28287
IP address blocks: 168.194.60.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1b:af:c8:07:1f:e9:71:c1:28:5b:a3:84:93:37:d3:c7:96:a6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:09:09 2024 GMT
Not After : Jun 11 13:14:09 2025 GMT
Subject: CN=2E3E0D1EE545F43199EE7377AA0B7291328DE836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:00:80:f2:1c:3d:6f:1d:14:14:08:0a:fe:0f:
64:bb:f8:ac:7c:53:99:92:59:65:66:6e:60:d4:47:
0b:f4:4f:c7:1e:98:c2:51:fb:d6:a8:a7:82:2f:a4:
1a:d6:cd:f0:4e:a7:25:84:0f:36:32:db:44:e6:c7:
76:04:5e:0e:fc:bb:7a:6d:da:5c:ed:b8:f1:39:2d:
51:e4:e9:62:45:75:a9:f8:50:2c:42:3c:93:ab:1e:
bc:09:45:94:37:b6:68:ad:46:48:1b:cb:52:bd:19:
02:e0:28:aa:61:82:66:40:8b:39:8b:e5:eb:f2:6f:
9e:d9:bc:55:12:0c:5a:8d:9a:75:16:0e:41:3b:e6:
22:75:a9:5a:19:96:c9:88:fd:22:71:d2:e4:ab:61:
3b:75:66:e5:75:35:2f:54:24:89:67:7c:8a:f2:5f:
2f:86:4a:c6:d9:17:9f:09:ec:eb:84:eb:76:e1:60:
ce:e8:3a:78:db:2e:70:84:77:64:be:dc:2f:ae:a5:
5c:b5:3d:7f:0b:24:a5:3f:4d:28:75:e0:ee:d6:6d:
27:d2:7d:b5:c4:96:90:d2:3a:72:3e:96:27:93:3c:
64:c4:68:78:35:b1:2f:06:7f:74:85:69:b8:1b:ef:
a5:c3:62:57:c2:16:dc:ad:4b:37:10:be:27:09:26:
81:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:0D:1E:E5:45:F4:31:99:EE:73:77:AA:0B:72:91:32:8D:E8:36
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3136382e3139342e36302e302f32322d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.194.60.0/22
Signature Algorithm: sha256WithRSAEncryption
73:71:8f:47:fc:0c:da:55:a1:19:7e:7e:5e:46:4d:c4:d9:c1:
ab:1b:7d:20:ef:7f:f1:ab:7c:97:32:94:31:41:6d:82:1b:b2:
9c:ff:73:7a:09:24:30:34:b1:9e:20:55:91:a1:23:2c:13:0b:
94:e2:55:c5:43:ee:2f:7a:a8:d2:f7:a6:9d:68:7d:ef:b4:96:
97:48:24:55:6a:6d:d1:cb:e4:76:62:62:40:97:f0:f5:3e:8d:
19:49:2f:76:da:f5:c8:12:26:69:6d:4b:a7:71:6e:93:64:c5:
64:7f:ee:f8:23:97:e0:77:48:e8:a1:c8:9c:93:e2:08:0e:65:
cc:9f:6e:24:d0:c0:6d:4a:11:5f:f8:ba:fc:eb:0c:c3:01:0d:
de:d5:ed:9c:50:d5:ed:20:7d:96:f2:2b:26:ff:3e:62:7c:78:
f3:91:30:73:e7:e1:f8:30:a2:62:bc:28:f1:28:b3:62:1c:03:
ec:17:6a:5a:9c:76:0c:d0:3b:8f:46:0c:8e:79:bd:5d:ff:c3:
56:c4:51:2c:5d:1b:f7:c4:e5:98:a6:54:7a:fc:81:83:8f:6b:
20:97:97:ba:cf:42:b8:e4:8b:10:7b:cf:fc:82:2b:32:74:69:
18:de:53:67:34:40:47:4e:18:89:48:a4:48:5a:63:05:c4:26:
b9:c5:fd:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:18:58 2024 by rpki-client on console-fra.rpki-client.org