Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa
File: 3230312e34392e3139322e302f32302d3234203d3e203238323837.roa (raw, json)
Hash identifier: Y2qTn4Vmrca2p5XTIKu42doh1+KlnVfn4tI7stlWDF0=
Subject key identifier: 44:A5:EF:9D:E4:91:74:CF:12:80:1A:EB:12:F5:19:85:E3:F4:12:CB
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 722AE896E8DE14ADFE4163C6A5E1C149650D63C9
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa
Signing time: Wed 12 Jun 2024 13:12:49 +0000
ROA not before: Wed 12 Jun 2024 13:07:49 +0000
ROA not after: Wed 11 Jun 2025 13:12:49 +0000
asID: 28287
IP address blocks: 201.49.192.0/20 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:2a:e8:96:e8:de:14:ad:fe:41:63:c6:a5:e1:c1:49:65:0d:63:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:07:49 2024 GMT
Not After : Jun 11 13:12:49 2025 GMT
Subject: CN=44A5EF9DE49174CF12801AEB12F51985E3F412CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:39:cb:ce:ec:b9:38:97:87:5f:0a:62:ac:ec:
20:ea:4d:2f:a8:06:25:00:06:c7:b6:4e:96:e7:f6:
c3:d1:c8:b4:16:ce:4e:1c:78:73:c5:53:75:4b:45:
09:ca:7a:c0:18:a5:37:1c:b2:1b:36:02:31:86:13:
33:6f:30:e8:49:c8:f2:60:b8:83:74:8c:10:c0:d6:
d6:2c:55:8c:e4:89:06:d3:2b:01:6d:16:4a:0e:0d:
22:b3:b4:de:67:3b:29:93:a6:c5:2e:09:71:2a:38:
20:44:88:ef:6f:e7:ab:d1:7b:7d:61:1c:72:37:95:
13:7f:ae:18:d2:c8:10:fa:a1:d5:d4:36:89:50:ee:
73:32:c5:48:5b:bb:93:d3:2f:f4:13:ce:b7:1f:ad:
92:ef:54:0c:2d:ed:27:92:9c:01:ce:c6:27:2f:f8:
c1:60:69:d9:8b:a1:25:e6:b2:3e:b2:5f:57:3a:70:
43:3c:b5:8d:45:56:77:7e:bb:70:ea:68:65:6f:6f:
f7:79:9e:59:51:05:06:26:2c:b5:74:bc:f2:07:75:
a1:1f:17:1b:82:0f:1e:31:d2:fb:4a:03:8b:58:dc:
42:5c:45:04:5a:cf:9a:2c:1a:0e:91:3e:99:21:1e:
a6:d6:c2:88:38:88:ff:af:d8:58:5d:b3:49:e8:15:
6d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A5:EF:9D:E4:91:74:CF:12:80:1A:EB:12:F5:19:85:E3:F4:12:CB
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3230312e34392e3139322e302f32302d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.49.192.0/20
Signature Algorithm: sha256WithRSAEncryption
05:59:ed:58:ae:7e:77:06:e2:e5:3e:c4:9a:02:75:1a:95:c9:
f4:43:b5:dc:7d:de:d7:c4:ae:58:a6:cb:53:8e:36:44:cc:f5:
c5:95:06:37:22:e9:5b:3f:2c:e8:f6:7e:1e:3d:40:72:0a:bb:
9e:c2:e2:c4:34:0d:b6:10:70:b1:c7:ae:d4:d8:75:1f:ac:55:
64:8f:22:86:cd:33:df:c2:ca:b2:ce:82:c6:50:58:5c:af:f1:
38:91:4b:a0:c5:d3:10:6d:a2:22:51:16:a5:db:d6:ea:ef:86:
6e:9d:51:bb:60:88:dd:2f:53:d1:59:79:d2:24:8f:0b:93:a9:
dd:b6:da:41:a8:32:b8:0e:1d:90:d2:d0:ec:7c:da:6b:49:90:
a9:28:73:29:9c:89:43:a6:09:42:38:b6:eb:b5:08:c1:1e:2f:
c2:9e:47:26:71:01:0b:92:ba:74:9b:e5:96:6a:33:b0:fb:0d:
a7:e0:d5:0d:6c:98:63:13:f6:67:31:f4:3c:30:c6:fb:5b:f0:
48:91:0e:a4:09:26:3f:73:d2:cb:1e:33:e5:e0:73:96:52:a5:
c8:a3:5a:18:85:37:2b:34:2a:e8:6e:46:09:5c:4c:0f:15:dd:
9a:a5:de:92:69:ed:66:2f:11:1c:67:e6:31:44:7f:9b:a0:0a:
36:d5:3b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:18:58 2024 by rpki-client on console-fra.rpki-client.org