Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136342e302f32322d3234203d3e203238313235.roa
File: 3139312e33362e3136342e302f32322d3234203d3e203238313235.roa (raw, json)
Hash identifier: RUrjhJzPv9o2L2tFT8NLy3U85Xe3sUI0QVFXU7gcPmA=
Subject key identifier: 71:DE:44:A7:37:16:3B:63:99:1D:40:F2:F2:E0:9F:F5:B4:52:61:D7
Certificate issuer: /CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Certificate serial: 6F6D804C81C0C203A0D54FBFC373B7219BC58FD6
Authority key identifier: CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136342e302f32322d3234203d3e203238313235.roa
Signing time: Wed 03 Apr 2024 20:20:50 +0000
ROA not before: Wed 03 Apr 2024 20:15:50 +0000
ROA not after: Wed 02 Apr 2025 20:20:50 +0000
asID: 28125
IP address blocks: 191.36.164.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:6d:80:4c:81:c0:c2:03:a0:d5:4f:bf:c3:73:b7:21:9b:c5:8f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA
Validity
Not Before: Apr 3 20:15:50 2024 GMT
Not After : Apr 2 20:20:50 2025 GMT
Subject: CN=71DE44A737163B63991D40F2F2E09FF5B45261D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:08:4d:6d:ec:eb:33:c2:a2:a8:cf:9e:56:
8d:4d:46:0f:55:46:df:79:a4:3e:8a:05:e0:23:d9:
ed:0b:ee:21:1c:fb:fb:ba:d3:a2:65:87:1d:2b:65:
81:21:0c:b1:14:b8:39:19:d0:68:fd:70:b6:c8:fb:
3b:a0:95:e8:66:b8:43:db:1a:da:86:bc:99:05:2f:
93:e2:31:62:c3:a2:fa:dd:52:8f:3c:97:b9:9e:a8:
db:12:e0:11:90:8f:e4:8a:7d:91:b7:1c:02:25:10:
81:5c:8d:3c:93:cb:c5:88:cc:26:c1:94:7b:d5:82:
12:71:aa:68:d4:5a:da:bb:57:d1:95:19:b8:76:f2:
5f:bd:e1:b0:88:3f:fc:05:b1:18:9d:5b:16:cf:10:
01:1b:b6:43:d2:ce:cd:60:b2:56:1a:8c:5d:4f:43:
0b:1f:07:55:b8:d3:b6:e2:09:94:a4:24:a0:ec:57:
ae:06:16:b5:96:a4:4a:e9:63:01:4a:27:c5:8a:1f:
61:89:8a:bb:d9:e4:d4:9f:63:74:f6:82:43:33:1d:
4d:95:c5:23:aa:5e:5c:33:ec:d0:e1:e7:51:e8:3d:
a8:99:19:28:1d:7c:07:f4:48:fa:72:48:79:5c:07:
f4:25:75:65:2e:dc:f3:2b:8d:30:fa:f5:82:d6:52:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DE:44:A7:37:16:3B:63:99:1D:40:F2:F2:E0:9F:F5:B4:52:61:D7
X509v3 Authority Key Identifier:
keyid:CB:E4:C6:7A:3A:BB:A9:2F:30:95:F9:4E:12:28:F0:63:65:E6:AE:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CBE4C67A3ABBA92F3095F94E1228F06365E6AEEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/1/3139312e33362e3136342e302f32322d3234203d3e203238313235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.36.164.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b2:a3:6d:b5:8d:7f:1f:fb:f9:96:19:b2:84:ba:ab:af:30:
9f:ee:f5:ea:c8:51:d9:45:f9:10:eb:95:a6:d0:ef:5d:fa:71:
03:6d:b3:97:f1:13:01:d9:4f:d7:e3:66:69:de:f2:56:d9:4e:
d3:2b:0a:4e:a0:2c:e3:bd:ea:e0:08:5a:cc:cf:1d:42:9b:63:
df:7f:e4:17:fb:ad:28:48:e0:76:a5:76:82:fe:8e:23:7d:38:
75:f2:30:1a:fe:b5:f0:ed:c7:81:6e:b3:05:55:fe:16:c0:26:
59:5c:ce:ac:17:dc:f1:64:59:55:19:89:38:d5:70:fd:ce:74:
b1:ef:d6:6d:84:ab:5c:f5:ea:ab:5d:9f:d5:fc:0d:3a:f8:19:
58:ab:c8:c6:b4:ca:4f:ac:28:f9:60:2d:10:d2:45:b2:da:a3:
28:48:05:92:85:49:68:57:3b:1a:56:b7:75:7a:3d:7b:a6:90:
a0:17:ef:99:fa:02:b0:a4:88:30:ac:c3:92:13:7c:c0:55:3d:
7e:59:86:d3:a2:7a:e0:af:db:f5:a3:52:e0:83:90:16:84:02:
4a:35:5a:c0:ee:bf:30:4d:d5:eb:af:fe:89:1b:26:f9:b4:20:
7a:26:39:08:0c:d1:9c:14:e0:89:bf:e0:2c:2a:cc:c5:a4:50:
0c:3a:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 14:35:15 2024 by rpki-client on console-ams.rpki-client.org