Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa
File: 3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa (raw, json)
Hash identifier: T8EwI0rhyVAbCScxUDGIs5WtBPlxGZaj29B/XYhjM68=
Subject key identifier: 28:39:61:8C:71:36:8A:A1:CE:D0:E0:19:69:01:B7:E2:32:80:8A:1E
Certificate issuer: /CN=D094BD14767790CF0B4A79F0DA251694C06C2C7E
Certificate serial: 096EF6EB216C897BEA625F057BC55B1A145B1C6C
Authority key identifier: D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa
Signing time: Thu 04 Apr 2024 10:20:38 +0000
ROA not before: Thu 04 Apr 2024 10:15:38 +0000
ROA not after: Thu 03 Apr 2025 10:20:38 +0000
asID: 264404
IP address blocks: 138.255.16.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6e:f6:eb:21:6c:89:7b:ea:62:5f:05:7b:c5:5b:1a:14:5b:1c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D094BD14767790CF0B4A79F0DA251694C06C2C7E
Validity
Not Before: Apr 4 10:15:38 2024 GMT
Not After : Apr 3 10:20:38 2025 GMT
Subject: CN=2839618C71368AA1CED0E0196901B7E232808A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:61:31:04:8a:43:b6:74:3b:09:50:43:8e:d6:
14:5e:16:f7:9f:54:6c:56:00:2b:7e:17:af:30:da:
ff:37:e5:6c:80:19:0f:43:fd:af:a8:53:54:cb:d1:
73:a2:ba:58:69:6d:bc:1a:97:d9:e2:fb:38:c6:a0:
97:62:22:f8:b6:e2:55:0f:b1:2c:27:8b:e8:20:69:
3c:90:1e:c3:ea:5e:3b:27:a4:b3:a3:b7:86:66:a1:
ee:88:d2:a1:5c:72:58:1b:1b:19:ba:11:3b:51:2f:
02:06:b8:b1:5b:f0:31:e2:61:43:86:c3:44:2b:b1:
ec:01:39:e4:ba:87:46:47:7b:16:48:70:5c:c8:2a:
4e:eb:63:2b:1e:a5:80:48:bb:00:f6:46:8f:28:b2:
d3:61:47:d5:62:f4:56:1f:4f:4a:b0:80:f8:d4:2d:
f0:31:ba:97:39:6f:30:74:3b:5d:c7:f1:f6:e6:cd:
5b:5d:8a:da:4c:26:e4:86:86:09:15:9a:7f:af:d0:
2e:be:da:da:05:0c:34:6a:d2:6f:13:b0:e3:ab:9f:
5c:12:6d:58:35:33:f5:21:c3:a1:50:66:de:90:1e:
a8:b0:c2:ae:a6:66:27:37:42:0c:6f:2e:db:44:24:
75:49:3b:4c:75:eb:24:6f:c7:5f:0c:4a:7a:79:f5:
ca:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:39:61:8C:71:36:8A:A1:CE:D0:E0:19:69:01:B7:E2:32:80:8A:1E
X509v3 Authority Key Identifier:
keyid:D0:94:BD:14:76:77:90:CF:0B:4A:79:F0:DA:25:16:94:C0:6C:2C:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D094BD14767790CF0B4A79F0DA251694C06C2C7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/1/3133382e3235352e31362e302f32322d3332203d3e20323634343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.16.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:e8:ff:01:77:f0:da:3e:e7:93:2c:83:38:98:d9:51:77:e2:
9f:8e:37:03:fb:ff:e8:0f:e7:7f:70:a9:05:ef:b0:06:40:48:
dd:45:ff:9c:f2:87:70:fd:fc:d1:21:df:43:98:79:8d:91:40:
8c:bf:28:ab:41:0c:7f:4d:d1:00:21:29:cc:75:3f:85:a7:f6:
5f:cb:c0:c3:2f:e4:a8:90:67:e6:11:79:05:e6:bb:33:d8:51:
e6:8d:70:a5:8a:ad:45:98:50:9d:1c:23:44:8e:3b:12:eb:61:
42:86:99:94:76:25:57:76:2b:e6:44:6b:3c:7f:ab:cb:70:6e:
b3:f5:33:df:99:7d:19:78:c6:84:ca:c6:b9:f0:cd:30:9d:af:
ce:fc:db:eb:d0:04:97:47:06:fb:fc:88:a2:f5:76:f1:3c:04:
29:4d:c8:f0:85:18:8a:f4:dd:73:cf:f6:d8:9e:81:ea:a8:bb:
cb:79:f6:cb:89:91:f9:47:fd:6b:fc:c1:1b:e4:85:a5:e4:fd:
39:db:6a:fa:22:1a:9b:8b:35:62:10:73:cb:65:16:68:9b:da:
e3:a3:d9:c2:86:b6:21:e2:67:b7:67:7b:1e:67:7d:b3:b0:62:
16:19:21:13:b4:5b:2b:66:39:57:3d:38:06:c0:a6:8d:87:c8:
64:ef:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 19 20:09:55 2024 by rpki-client on console-ams.rpki-client.org