Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32302e302f32322d3234203d3e203238313235.roa
File: 3138372e31392e32302e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier: Zeq+GJHQymOCtmazGSZVuklQX21YjYm1FhkKx1rB8wU=
Subject key identifier: 09:4C:E6:09:EC:60:64:EE:FF:F1:6A:FC:52:AB:59:C6:8C:B1:0E:28
Certificate issuer: /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial: 12494B505BD1DC9D9107000E6C166F92F107B89D
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32302e302f32322d3234203d3e203238313235.roa
Signing time: Wed 03 Apr 2024 20:20:50 +0000
ROA not before: Wed 03 Apr 2024 20:15:50 +0000
ROA not after: Wed 02 Apr 2025 20:20:50 +0000
asID: 28125
IP address blocks: 187.19.20.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:49:4b:50:5b:d1:dc:9d:91:07:00:0e:6c:16:6f:92:f1:07:b8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Validity
Not Before: Apr 3 20:15:50 2024 GMT
Not After : Apr 2 20:20:50 2025 GMT
Subject: CN=094CE609EC6064EEFFF16AFC52AB59C68CB10E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:cb:14:85:f9:74:df:ac:6a:fb:0b:9f:34:92:
ba:46:87:8b:3f:74:e1:0b:2a:3c:f2:e7:dc:80:5b:
19:9d:ba:01:a9:70:26:ba:f2:25:7d:02:ad:f2:97:
b6:48:f5:8c:21:45:87:f2:a4:40:55:a2:37:71:60:
9b:0a:f7:9d:46:d9:be:ea:0e:b0:09:13:22:0a:b4:
19:c0:54:63:74:f3:23:be:d9:13:c5:15:e4:c7:fa:
b3:ac:bf:2d:dd:46:fa:56:e7:ba:a2:a9:ee:45:43:
a0:0d:01:67:c2:36:66:72:c7:08:51:d4:ed:ea:fc:
35:ea:c7:44:59:57:b2:e0:9a:90:98:9a:43:8f:b4:
3f:f2:bd:ec:5d:57:d0:e3:c3:3f:63:eb:87:84:db:
4b:37:89:96:a2:22:d4:80:93:fa:5c:c2:a5:57:f5:
65:3b:0a:41:2b:e2:13:68:cf:a1:ee:0b:86:6d:cb:
2a:b1:c5:70:37:04:a6:09:ec:fc:fb:ec:80:eb:a2:
e4:0a:5a:02:c5:be:80:a9:3a:94:49:3e:3d:63:ed:
dd:0c:72:ee:7b:9a:94:ff:7c:01:26:83:d8:b3:5a:
60:b5:12:17:da:91:6a:2a:a3:b3:d0:bc:32:67:54:
12:7a:e2:0a:5a:62:ed:14:e1:a2:89:a4:6a:70:84:
14:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4C:E6:09:EC:60:64:EE:FF:F1:6A:FC:52:AB:59:C6:8C:B1:0E:28
X509v3 Authority Key Identifier:
keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3138372e31392e32302e302f32322d3234203d3e203238313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.19.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:db:d1:20:e0:fb:5e:1d:33:ed:85:98:6f:38:d9:df:3f:8c:
df:e8:52:0a:4d:42:a1:46:b6:f4:dc:07:35:a6:90:dd:52:fa:
db:6e:5a:1a:76:88:22:ed:a8:46:b9:c1:e9:6b:39:36:a0:d9:
a4:e5:a5:7f:5f:2c:fc:b6:5b:6b:11:e9:5e:ee:ea:8a:af:99:
db:8d:5b:57:a8:ac:31:57:48:de:81:a1:75:2f:ae:49:7a:28:
dc:25:c7:bc:ae:70:db:44:4c:6a:71:ef:77:8b:de:a3:be:23:
f6:d4:b5:f2:66:67:0e:a6:6f:10:a8:23:54:cc:89:c8:60:d4:
6e:e6:13:26:0e:b5:89:ff:83:d8:b9:bf:32:11:bf:36:77:be:
9d:0b:3e:c5:bd:a2:bc:8a:8b:72:12:27:81:5e:6e:c4:9e:e6:
77:a2:1a:2d:6d:c7:2f:e1:06:4b:cf:c9:45:1a:16:9a:74:79:
aa:e5:ad:a1:2a:96:ac:25:de:f8:73:55:62:df:4d:78:20:f4:
70:5c:88:ab:83:48:9c:24:22:ef:53:ef:82:7e:6b:c6:98:2b:
89:ca:fb:6f:d5:07:ad:c1:b4:64:ae:75:6e:f5:b6:c3:43:a7:
8b:f3:4c:be:4c:f8:c4:46:14:bf:c4:c5:7d:fb:02:ff:33:ce:
da:73:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 14:35:15 2024 by rpki-client on console-ams.rpki-client.org