Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3138392e3132342e38302e302f32302d3234203d3e203238323837.roa
File: 3138392e3132342e38302e302f32302d3234203d3e203238323837.roa (raw, json)
Hash identifier: hWvwvQCpCGZNnrZ4/AlvKAgTmjzcgwABH+dIAXsK6XU=
Subject key identifier: D8:FE:FF:41:F7:F7:1A:A5:89:40:9F:0B:F7:15:1A:2E:3A:35:2B:7D
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 717BD6B17FEA002F9E1D5AFF039FC683FA289740
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3138392e3132342e38302e302f32302d3234203d3e203238323837.roa
Signing time: Wed 12 Jun 2024 13:12:58 +0000
ROA not before: Wed 12 Jun 2024 13:07:58 +0000
ROA not after: Wed 11 Jun 2025 13:12:58 +0000
asID: 28287
IP address blocks: 189.124.80.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:7b:d6:b1:7f:ea:00:2f:9e:1d:5a:ff:03:9f:c6:83:fa:28:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:07:58 2024 GMT
Not After : Jun 11 13:12:58 2025 GMT
Subject: CN=D8FEFF41F7F71AA589409F0BF7151A2E3A352B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d6:c9:c0:52:8c:14:df:61:fb:be:fb:73:72:
4c:0f:f2:6b:9b:1f:46:fc:92:91:01:44:61:c6:da:
b2:90:b0:98:52:d7:fa:df:1a:29:5a:55:dc:80:88:
50:3e:c1:95:69:62:4e:0f:b6:67:86:7a:9a:8b:b8:
eb:2f:67:26:bd:f0:2d:e1:a9:82:6e:f5:61:2d:eb:
db:4f:52:03:d8:7a:ff:32:e2:0f:26:2c:fa:1f:e0:
1c:76:c4:16:3e:f0:bd:27:ee:f3:b2:ab:32:de:0f:
4e:83:b1:68:4a:f1:50:f5:5f:56:35:a8:16:7f:19:
1e:69:fd:77:74:ae:8d:55:ba:d2:16:ca:9d:62:63:
21:15:b5:c9:83:eb:69:4a:69:6e:61:31:1b:9f:54:
38:19:ad:12:cd:b2:2d:0c:48:80:4a:cf:6d:ce:a9:
18:5a:bc:3b:98:ac:b6:2c:0b:8f:1e:72:8d:2b:74:
f2:0b:18:71:ff:44:94:41:cf:11:75:03:14:67:4c:
81:45:e8:67:22:7c:60:05:20:34:67:88:ac:97:d0:
5d:6b:50:40:0f:81:df:92:f5:a3:74:bb:54:85:b3:
6c:f8:ca:65:b9:76:a2:69:a4:15:12:59:f4:f2:08:
68:0e:16:7a:49:93:25:b7:1e:e9:94:33:97:30:ca:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FE:FF:41:F7:F7:1A:A5:89:40:9F:0B:F7:15:1A:2E:3A:35:2B:7D
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3138392e3132342e38302e302f32302d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.124.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a4:c0:c6:e5:28:bc:2f:52:4a:e8:12:a3:8c:9c:26:75:6f:2e:
d6:06:03:d4:3c:9b:ff:5b:f4:51:cd:7b:3c:1c:ad:f1:00:c7:
ea:81:4f:87:c3:df:1b:d7:5f:97:5a:19:20:d1:ca:78:6c:42:
56:bf:1e:04:c6:3b:11:42:4e:58:4c:24:c0:54:01:25:84:ac:
5e:2b:b8:2d:d3:71:15:79:35:0e:07:64:c8:8d:b2:c0:c9:bb:
3a:fb:35:e6:2d:94:5f:1f:ad:af:d0:f7:b9:f3:c9:0e:bd:bf:
c3:9d:a6:7a:8b:f3:98:10:ac:1a:07:0d:f9:2c:82:45:7b:89:
60:89:f3:b3:b1:94:fb:fa:dc:66:d8:b3:f4:f4:7f:8a:74:66:
de:9f:c2:a2:69:b3:17:52:b1:48:f3:fa:db:73:6f:1e:70:aa:
b8:bc:6a:f7:38:6e:d6:c8:bc:7c:3f:fc:ae:c4:1b:69:04:31:
1b:68:38:c0:59:e8:48:d3:35:08:d2:2f:06:b3:10:65:e4:4c:
92:40:6d:cb:f4:d1:d3:67:4d:54:a7:bf:f8:73:f2:aa:97:90:
f2:10:f3:53:99:2f:6f:ed:3e:d4:05:4c:be:56:c4:86:fc:4f:
3e:94:ff:7f:36:a4:21:ad:69:a8:3e:a9:ab:38:0a:f9:8b:7a:
a6:31:f3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:40:59 2024 by rpki-client on console-ams.rpki-client.org