Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3234203d3e20323637343639.roa
File: 3139322e3134312e3135362e302f32322d3234203d3e20323637343639.roa (raw, json)
Hash identifier: 3pibpcah3VxAivcovlsLzdhJPT/JD/Yg/QJs2uvHZJ4=
Subject key identifier: C3:09:75:64:97:9B:A1:D9:A8:74:E1:A6:8C:47:E2:53:B8:23:B6:8E
Certificate issuer: /CN=AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49
Certificate serial: 4BE0560B4B0DAF3BD0DC45EEA018225A48554396
Authority key identifier: AE:40:E9:82:14:EC:BD:AC:0F:3A:75:9A:ED:2D:D7:6B:1B:A5:6B:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3234203d3e20323637343639.roa
Signing time: Tue 16 Apr 2024 19:25:56 +0000
ROA not before: Tue 16 Apr 2024 19:20:56 +0000
ROA not after: Tue 15 Apr 2025 19:25:56 +0000
asID: 267469
IP address blocks: 192.141.156.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e0:56:0b:4b:0d:af:3b:d0:dc:45:ee:a0:18:22:5a:48:55:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49
Validity
Not Before: Apr 16 19:20:56 2024 GMT
Not After : Apr 15 19:25:56 2025 GMT
Subject: CN=C3097564979BA1D9A874E1A68C47E253B823B68E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f4:2f:40:b6:1c:6c:f8:42:06:13:05:23:09:
ce:6a:2e:3e:f0:a3:04:73:c3:39:55:33:6e:93:3f:
12:77:44:b9:b4:03:4d:c2:a6:5a:30:84:84:f1:a4:
fe:5d:c3:0d:1b:e3:91:f5:40:9f:19:b4:ad:fb:49:
5d:43:8b:20:48:ec:69:7d:9e:ef:6d:d0:c6:e3:ec:
d1:f1:10:8b:3a:36:17:13:58:b3:23:87:79:51:59:
ce:df:21:b0:56:5b:90:71:42:75:a8:40:4a:81:97:
f7:56:20:08:b1:13:50:22:48:4a:e0:30:1f:05:af:
b9:c4:65:5f:42:bc:45:7d:6a:bb:da:4b:fa:0b:79:
b5:0c:4d:e7:34:2d:aa:20:ad:05:fd:df:1d:3a:dd:
8a:6d:29:58:1b:16:77:12:b2:ee:f4:88:f7:ef:b5:
83:ca:57:a8:93:67:4a:cd:ab:b9:17:0f:e2:95:81:
a6:37:ce:8b:5f:2f:40:4e:df:d3:d4:ad:54:9b:c1:
50:57:e9:2f:19:1d:0f:cf:76:91:c3:42:3b:6f:41:
09:f3:7c:35:31:3b:c1:ea:d0:d3:35:ae:ad:30:1a:
fa:0d:56:86:8f:33:7b:74:1f:ee:04:a3:a0:9d:fd:
2c:d5:77:35:ad:80:84:86:d0:01:b3:5f:29:08:a0:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:09:75:64:97:9B:A1:D9:A8:74:E1:A6:8C:47:E2:53:B8:23:B6:8E
X509v3 Authority Key Identifier:
keyid:AE:40:E9:82:14:EC:BD:AC:0F:3A:75:9A:ED:2D:D7:6B:1B:A5:6B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AE40E98214ECBDAC0F3A759AED2DD76B1BA56B49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rVkiz6yCb4bSN525zaaGCVuCe7gS5kmFdN8Pckgykkn/0/3139322e3134312e3135362e302f32322d3234203d3e20323637343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.156.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:c8:55:a7:f7:b3:dc:c9:0a:f9:6e:9c:98:26:31:c6:b2:7a:
87:34:bc:bf:56:cb:6d:ed:33:a7:ac:20:50:34:2b:b7:06:18:
82:77:f5:16:d1:e1:64:48:88:a1:67:bb:63:4b:8a:68:63:1a:
96:73:1a:c2:e0:ad:09:4a:cd:8c:ab:be:3b:0c:d8:b3:a6:87:
64:38:1b:fb:0f:a0:bd:9a:fc:26:47:97:f6:e3:a7:25:2c:38:
55:de:30:61:49:09:b1:46:a7:65:1c:85:91:ea:2c:fe:07:5b:
6e:9f:68:d9:41:2f:ec:4d:e5:b5:06:9f:e5:2a:11:86:05:cc:
88:51:b9:72:e0:07:f3:b3:f8:16:ea:11:b2:6e:0e:b9:58:d3:
73:34:5b:02:5e:f3:b2:b2:c6:53:dc:ed:3e:45:32:13:d3:02:
45:3b:de:a5:3d:b5:2e:fd:1e:1a:92:f5:0b:38:b5:95:9d:51:
a6:0e:22:2f:a0:53:7d:e3:c3:04:ab:43:57:68:9e:c7:5c:58:
b8:3e:b0:ae:7e:3c:6b:82:87:36:3a:d4:0e:b7:ec:25:6b:f2:
ce:c3:37:de:4f:d5:ce:d8:06:2b:5a:4c:79:29:81:09:dd:fe:
e5:ec:a5:6c:8c:bc:e3:ca:49:cb:70:b7:70:b1:99:0f:43:66:
60:54:44:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 08:59:50 2024 by rpki-client on console-fra.rpki-client.org