Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
File: 3136382e39302e32382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier: d/y67iPgyHfrZchr3UsCsH3kbZMjj5nCPI4W/1C4G8Q=
Subject key identifier: 1C:62:50:D3:DF:0C:34:E2:FE:4F:0C:14:6B:38:9F:EE:87:80:C2:64
Certificate issuer: /CN=950A0A5A0F2C11779076736FBBCA766C37783653
Certificate serial: 141B5ED04C8A29515ED568BB0CF4310BE4BA44F8
Authority key identifier: 95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
Signing time: Thu 04 Apr 2024 23:55:03 +0000
ROA not before: Thu 04 Apr 2024 23:50:03 +0000
ROA not after: Thu 03 Apr 2025 23:55:03 +0000
asID: 262417
IP address blocks: 168.90.28.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1b:5e:d0:4c:8a:29:51:5e:d5:68:bb:0c:f4:31:0b:e4:ba:44:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=950A0A5A0F2C11779076736FBBCA766C37783653
Validity
Not Before: Apr 4 23:50:03 2024 GMT
Not After : Apr 3 23:55:03 2025 GMT
Subject: CN=1C6250D3DF0C34E2FE4F0C146B389FEE8780C264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:54:ec:10:49:96:d0:2a:b3:ad:4b:8d:e7:
3d:11:8d:48:e3:40:53:95:56:db:1d:fc:f3:24:27:
58:b3:b5:f0:0a:b5:cd:7b:76:9a:76:66:46:e9:df:
07:77:ca:ca:32:07:56:bd:39:0c:88:7c:9a:00:d5:
b2:28:1a:95:82:cb:69:7a:30:50:dd:a2:3b:fc:9f:
dc:5d:2c:4f:54:be:45:e6:4c:a5:22:26:e5:57:de:
c4:ad:24:5d:58:70:c8:69:15:49:ba:6b:a5:09:a0:
2f:31:d8:91:01:18:0e:26:74:f1:6a:13:87:ba:ad:
88:93:a0:60:2c:14:ee:30:4d:6e:52:3c:e4:b0:92:
1d:c4:48:20:71:9c:e8:f0:4e:7d:0e:e3:7a:c1:36:
ee:1f:e8:f8:25:c6:86:65:8f:13:38:cf:12:ac:4f:
3c:6f:2b:c8:73:93:84:df:cd:3c:0b:28:90:96:46:
a4:48:b9:9f:df:c6:53:de:c2:f9:52:41:32:4f:14:
10:be:45:27:e9:46:87:28:d5:aa:ed:53:16:fc:e5:
c7:2b:0f:ef:bf:35:fc:97:f0:8c:97:45:83:80:5f:
78:5b:45:4a:03:23:5d:c1:4b:53:50:dc:69:82:3a:
20:87:7e:87:9a:cc:db:fc:bd:e6:98:5b:43:92:b2:
ec:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:62:50:D3:DF:0C:34:E2:FE:4F:0C:14:6B:38:9F:EE:87:80:C2:64
X509v3 Authority Key Identifier:
keyid:95:0A:0A:5A:0F:2C:11:77:90:76:73:6F:BB:CA:76:6C:37:78:36:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/950A0A5A0F2C11779076736FBBCA766C37783653.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/950A0A5A0F2C11779076736FBBCA766C37783653.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/1/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:23:6b:d7:fa:cd:c3:8b:a9:35:a1:ba:5c:e5:07:07:22:51:
5f:11:43:34:dc:db:c3:9d:e4:e9:9f:07:b9:21:b5:e5:d3:ba:
84:8d:0e:75:e8:45:37:b1:aa:67:2f:89:58:b9:12:25:ed:e3:
af:e3:30:c8:23:94:e9:35:9b:97:70:de:55:2d:eb:0b:63:59:
65:94:70:45:78:32:e1:22:39:fd:b6:8a:85:89:57:6a:d1:12:
e0:b7:9f:fe:f9:7a:88:bc:f6:b8:09:b3:fd:c8:f4:43:eb:1f:
14:0a:07:19:5b:89:d0:74:d8:10:da:3f:e8:57:0f:d4:b6:07:
73:e9:58:8f:eb:1e:9c:72:7d:75:98:0a:15:c5:25:93:1a:51:
81:64:3c:36:9e:50:8a:9f:c5:9f:74:cb:e3:15:f4:4e:1a:3c:
c2:36:65:d7:23:c3:f2:f9:ec:f2:b9:07:69:dc:03:00:f4:b3:
2d:1f:9a:b4:f6:5a:a4:be:61:ec:68:1c:74:d0:f4:ad:a3:36:
a0:74:34:06:e0:c4:f3:66:be:18:8a:a8:5e:04:ef:42:d4:23:
1e:ad:06:55:4f:e3:d4:d4:64:ce:55:c2:78:f9:c7:87:41:64:
a0:76:e5:de:46:25:70:c0:91:ba:d4:b3:ad:c0:ed:62:a3:e4:
6b:cb:c0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 8 18:46:30 2024 by rpki-client on console-fra.rpki-client.org