Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa
File: 3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa (raw, json)
Hash identifier: LfOw3fMC2YoG4yGR41mW78cFu9L9HgHV2hHtLlxmopQ=
Subject key identifier: 34:BF:F4:88:7F:15:FD:86:13:33:1D:B0:20:CB:92:92:A9:8B:F2:B4
Certificate issuer: /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial: 12AE8B8D625301CBE0F322D223D1B0E87CF8B155
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa
Signing time: Thu 04 Apr 2024 07:20:43 +0000
ROA not before: Thu 04 Apr 2024 07:15:43 +0000
ROA not after: Thu 03 Apr 2025 07:20:43 +0000
asID: 262569
IP address blocks: 143.137.60.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:ae:8b:8d:62:53:01:cb:e0:f3:22:d2:23:d1:b0:e8:7c:f8:b1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
Validity
Not Before: Apr 4 07:15:43 2024 GMT
Not After : Apr 3 07:20:43 2025 GMT
Subject: CN=34BFF4887F15FD8613331DB020CB9292A98BF2B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2c:0c:8e:20:cc:dd:3c:b5:44:33:a6:ba:b8:
35:c8:d5:23:da:7c:10:c3:b6:f2:86:b2:1e:0b:a6:
dd:ca:f1:a8:80:94:cc:4a:19:6e:68:df:c6:fe:38:
56:84:16:ba:13:77:2a:f7:d1:cd:14:95:98:2a:1e:
dd:2f:32:c9:12:95:50:04:cc:69:9d:24:4d:09:9e:
39:7c:b4:19:a3:ce:1c:23:1d:45:88:0e:61:e4:1c:
bd:b6:f0:69:70:bb:8e:a3:d7:53:25:a1:d8:e4:52:
8c:59:af:5d:74:12:8d:a6:af:40:f7:f0:57:50:63:
e2:ce:67:43:eb:87:da:11:30:29:5e:43:e5:d0:e1:
f6:cd:14:00:2b:18:3c:15:a1:62:78:32:a1:49:6f:
d8:b7:e1:ca:75:32:9f:1c:e8:4b:f2:d1:d5:88:cd:
47:ae:cf:cc:4c:6f:d6:64:c2:01:1b:e3:89:bf:05:
d3:6c:32:4e:5c:30:34:bc:f8:c6:4b:6e:95:c6:e7:
7d:df:18:33:8e:c6:4b:19:18:b8:39:f8:f1:57:d2:
f0:5c:22:b3:23:65:d3:f7:65:74:5f:4f:b4:4c:64:
be:b4:69:87:00:dc:08:85:4c:bc:5b:b5:03:02:6f:
8a:73:5f:20:65:cb:f9:e1:f5:5b:b6:8d:54:e0:24:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BF:F4:88:7F:15:FD:86:13:33:1D:B0:20:CB:92:92:A9:8B:F2:B4
X509v3 Authority Key Identifier:
keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32332d3233203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.60.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:92:b0:fb:98:a6:98:58:36:de:53:64:ff:6a:dc:90:2f:75:
86:8e:c2:96:89:b0:e5:b7:96:97:24:7a:3c:0f:1d:94:62:72:
19:70:21:aa:64:15:f9:65:e1:60:6c:c5:6c:ab:85:39:8f:82:
2f:20:df:89:5e:25:81:75:f9:ab:d2:e0:87:b2:6d:6c:4a:af:
bb:9a:76:48:c2:7f:ab:b7:af:27:37:cb:1c:e2:9a:47:3a:b8:
0e:e4:a9:d8:32:69:53:3b:3d:8c:63:f0:8c:eb:9d:2e:d8:0c:
dd:49:a9:6e:34:39:d8:cf:5a:0d:1b:e6:43:ec:0a:e5:15:02:
94:16:20:db:da:41:6a:f9:67:ee:76:30:69:66:b7:2b:d0:a6:
4b:57:0f:ad:c3:09:66:ea:0a:e3:d3:88:0b:e5:e7:55:04:97:
91:d3:0a:14:5f:8d:3a:a4:e0:21:c3:bc:e2:a0:09:c9:cc:b7:
62:eb:9d:36:d6:36:29:56:7f:5c:29:15:e7:9c:62:ec:8c:8d:
01:eb:06:79:cf:b6:95:20:1d:08:18:e1:1a:de:65:39:1d:37:
6f:b3:41:85:92:b2:43:3f:7f:5b:e5:4b:96:57:2c:6c:f3:80:
d6:de:77:89:ff:33:c8:d3:f8:0c:a0:74:ba:f2:10:30:92:c2:
de:64:a0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org