Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32342d3234203d3e20323632353639.roa
File: 3134332e3133372e36302e302f32342d3234203d3e20323632353639.roa (raw, json)
Hash identifier: 7bW6Bo7NZ/85pMvkQf+lY+i3EMy/DdI9YVux0eQElAQ=
Subject key identifier: B2:43:FC:A3:E2:02:35:49:4C:23:5F:A4:E4:F4:21:C1:9E:05:73:F7
Certificate issuer: /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial: 08A4868FC08C6B432DB051C88290684D62B69941
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32342d3234203d3e20323632353639.roa
Signing time: Thu 04 Apr 2024 07:20:40 +0000
ROA not before: Thu 04 Apr 2024 07:15:40 +0000
ROA not after: Thu 03 Apr 2025 07:20:40 +0000
asID: 262569
IP address blocks: 143.137.60.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:a4:86:8f:c0:8c:6b:43:2d:b0:51:c8:82:90:68:4d:62:b6:99:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
Validity
Not Before: Apr 4 07:15:40 2024 GMT
Not After : Apr 3 07:20:40 2025 GMT
Subject: CN=B243FCA3E20235494C235FA4E4F421C19E0573F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:23:ff:ed:46:bf:fa:58:02:1d:de:6f:24:68:
dd:3a:a3:c0:4d:62:61:15:da:09:7e:1b:81:e9:1b:
55:8f:9f:33:7b:fa:57:a2:ee:a4:0b:56:8e:98:f1:
50:43:a9:26:a3:b3:59:c9:8c:dd:84:89:0d:95:14:
b5:4b:5d:e5:0c:df:00:78:69:ea:c0:72:db:2d:8d:
0c:3c:22:a9:ea:f5:7d:30:1f:fe:09:01:c9:47:b2:
bf:27:36:41:12:c5:95:ba:6b:a2:58:d7:9d:9f:42:
d0:eb:59:01:c9:75:05:1c:06:68:26:28:9f:c3:a6:
b1:0a:c8:b1:38:84:5d:02:6d:5b:ec:d2:d0:ed:5d:
b6:d4:48:92:44:f1:8c:aa:0f:81:8e:3d:5f:e6:0a:
40:b2:3e:d0:42:69:a0:ac:f0:60:1e:15:7a:81:26:
59:2b:a0:32:78:d6:02:0c:89:dc:3d:36:10:9b:58:
63:d7:24:3b:27:7f:ef:1b:dc:d6:46:bc:c8:d6:c7:
d3:10:e0:18:21:78:a4:51:8d:ba:7e:d1:12:79:12:
a2:ac:de:8f:c8:0d:2d:af:f4:4a:88:c0:48:6a:9a:
42:d0:6f:ea:2e:86:ed:d3:87:0d:5a:8d:a1:6c:e6:
28:c1:d2:23:22:b8:61:43:3d:6f:56:54:03:7f:8b:
2d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:43:FC:A3:E2:02:35:49:4C:23:5F:A4:E4:F4:21:C1:9E:05:73:F7
X509v3 Authority Key Identifier:
keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/3134332e3133372e36302e302f32342d3234203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4e:6f:1c:7e:f6:5d:b3:37:43:59:b3:96:60:d9:e3:12:22:
54:a8:54:de:7c:16:dc:7f:74:c5:39:fd:d6:8f:da:f4:cc:51:
15:7b:0e:ad:34:3a:83:58:88:4a:05:1d:20:fb:28:25:bc:ff:
e8:78:d0:50:33:26:69:8a:82:a2:3e:06:56:87:90:e2:07:b0:
07:5b:95:e9:5a:b2:b1:2f:6a:01:e9:13:3b:bd:7e:1d:bc:37:
29:31:66:43:51:60:f1:d3:99:2c:5a:44:73:6e:f7:d1:6c:f3:
5c:48:ea:a1:85:97:9d:88:40:ed:32:7f:20:24:6d:f9:5d:85:
ba:af:ed:d2:e3:24:b6:04:2d:79:77:c6:4e:26:94:73:61:24:
c5:56:4d:cf:74:49:63:e0:d3:a9:80:8b:58:50:64:8e:c4:64:
6b:59:be:7b:da:a7:a3:32:a6:6b:6f:46:1a:89:1b:a3:a9:f5:
65:47:4c:ea:05:90:3f:4f:c8:a8:99:b9:3f:0d:c0:ad:a9:c9:
e1:57:a1:21:a2:a1:e7:45:20:7c:95:fd:ec:26:76:f7:77:f9:
a8:48:65:1f:a6:69:f2:a1:1c:4c:64:dd:11:f5:a8:a8:71:2d:
36:a8:0b:f9:1e:8c:9b:fe:fe:82:f1:2f:b2:4a:12:5f:8d:c6:
1c:41:4d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org