Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32322d3234203d3e20323634353936.roa
File: 3133382e35392e34302e302f32322d3234203d3e20323634353936.roa (raw, json)
Hash identifier: ApSpt1OcwAx+8kXXLW7m/PwKVOv00ciTGaStREOlX3s=
Subject key identifier: 2F:04:C7:3A:D5:C3:39:CF:21:5D:FC:C7:E7:25:C1:AC:D5:E4:25:84
Certificate issuer: /CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
Certificate serial: 43CAA575B9A6ADDF7CD599A2ECD2A850D2192FC9
Authority key identifier: 9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32322d3234203d3e20323634353936.roa
Signing time: Tue 07 Nov 2023 15:19:11 +0000
ROA not before: Tue 07 Nov 2023 15:14:11 +0000
ROA not after: Tue 05 Nov 2024 15:19:11 +0000
asID: 264596
IP address blocks: 138.59.40.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ca:a5:75:b9:a6:ad:df:7c:d5:99:a2:ec:d2:a8:50:d2:19:2f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
Validity
Not Before: Nov 7 15:14:11 2023 GMT
Not After : Nov 5 15:19:11 2024 GMT
Subject: CN=2F04C73AD5C339CF215DFCC7E725C1ACD5E42584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:14:93:f2:09:a4:a3:94:f2:aa:9b:74:41:03:
dd:9e:df:13:3f:b0:ba:62:01:3f:c3:77:7a:fd:ef:
2b:96:b3:e9:55:2e:91:10:1c:27:b3:fe:2d:4f:df:
81:0d:dc:67:aa:08:44:7d:27:93:63:2b:7e:57:22:
64:76:af:d5:6f:e8:8a:0b:ed:c4:80:fa:a1:4c:6d:
dc:ac:86:06:0e:26:03:e1:f4:27:60:17:1f:91:8c:
c3:80:9a:aa:59:00:01:ca:c5:61:34:b3:a1:b3:49:
64:dd:8b:2a:eb:59:50:eb:f6:2b:2f:54:dc:d3:28:
8f:df:e4:a6:c0:8d:af:c6:98:8d:16:80:33:a9:d1:
28:ad:9e:57:8b:5c:ac:57:22:a8:ae:03:a6:c6:92:
e4:c1:af:6b:7e:a2:b8:86:9e:05:21:2e:6f:ce:ff:
cd:2d:a0:22:8f:83:54:f0:ef:47:9b:14:b2:41:bd:
1d:83:02:14:0e:49:94:31:97:8e:97:bf:db:40:e3:
7d:72:c9:f5:f0:6e:a1:ad:b7:21:e0:cc:8b:b9:4e:
2d:25:31:3a:0f:1f:d5:62:fc:18:eb:8f:54:e4:24:
23:d4:70:5f:27:a7:e5:da:ae:27:3e:6f:48:87:1f:
8d:99:94:7a:36:5a:10:ef:1e:37:bc:e2:a8:ed:a3:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:04:C7:3A:D5:C3:39:CF:21:5D:FC:C7:E7:25:C1:AC:D5:E4:25:84
X509v3 Authority Key Identifier:
keyid:9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/3133382e35392e34302e302f32322d3234203d3e20323634353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.40.0/22
Signature Algorithm: sha256WithRSAEncryption
46:04:fd:f8:1a:7a:e8:82:43:5e:05:94:03:20:f8:83:dc:e7:
9d:58:3c:04:a8:85:9b:3d:a2:a7:68:c9:e3:94:0c:76:cd:d7:
54:73:d0:4b:60:48:6c:37:19:e8:30:5b:7d:f8:7f:c3:bc:9b:
b9:57:59:c9:b9:e0:c0:76:84:c2:e4:ae:e8:d8:4a:0f:50:d6:
35:6c:17:1f:88:ab:66:ab:ab:7c:3c:53:47:b0:c6:72:f2:65:
8d:10:fc:c1:66:96:e2:6d:cc:da:bc:4c:4a:91:4a:3b:8d:a2:
3a:7c:ae:65:9e:95:e7:f7:91:56:c3:b8:a9:2f:aa:db:cb:76:
14:30:29:a7:93:f1:ff:02:ab:d4:f3:1b:65:e8:63:bb:2b:04:
6e:7a:43:a9:f6:58:ac:77:71:ac:c5:7b:b1:f1:25:05:cd:19:
be:fc:5b:5d:0f:64:3f:62:1b:0f:ac:db:5b:46:af:c6:34:c0:
2c:1e:74:b3:73:ae:d0:9b:ae:8e:57:02:a6:30:c9:d3:70:a9:
57:95:b3:c0:93:5e:90:19:ca:9f:09:66:0a:61:49:cc:65:0a:
36:73:d1:e7:95:a7:04:78:f1:8b:48:31:df:09:23:f2:2d:45:
61:5a:e5:5f:67:8e:a4:ad:5b:3c:72:17:e0:3f:b6:b8:9c:8d:
4b:02:fc:20
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ8qldbmmrd981Zmi7NKoUNIZL8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQyOEQ2NTdCOTQyQTZEQTg1N0JCMjNDOEI2Njg0QUJD
NzI2MTczODAeFw0yMzExMDcxNTE0MTFaFw0yNDExMDUxNTE5MTFaMDMxMTAvBgNV
BAMTKDJGMDRDNzNBRDVDMzM5Q0YyMTVERkNDN0U3MjVDMUFDRDVFNDI1ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFJPyCaSjlPKqm3RBA92e3xM/
sLpiAT/Dd3r97yuWs+lVLpEQHCez/i1P34EN3GeqCER9J5NjK35XImR2r9Vv6IoL
7cSA+qFMbdyshgYOJgPh9CdgFx+RjMOAmqpZAAHKxWE0s6GzSWTdiyrrWVDr9isv
VNzTKI/f5KbAja/GmI0WgDOp0SitnleLXKxXIqiuA6bGkuTBr2t+oriGngUhLm/O
/80toCKPg1Tw70ebFLJBvR2DAhQOSZQxl46Xv9tA431yyfXwbqGttyHgzIu5Ti0l
MToPH9Vi/Bjrj1TkJCPUcF8np+Xaric+b0iHH42ZlHo2WhDvHje84qjto93jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULwTHOtXDOc8hXfzH5yXBrNXkJYQwHwYDVR0j
BBgwFoAUnSjWV7lCptqFe7I8i2aEq8cmFzgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkttRkRuRjZiWHZFWWJMcGJuaFpFV0VreGpHclpSUXBwWFFLNEZuVVRO
VlovMC85RDI4RDY1N0I5NDJBNkRBODU3QkIyM0M4QjY2ODRBQkM3MjYxNzM4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzlEMjhENjU3Qjk0MkE2REE4
NTdCQjIzQzhCNjY4NEFCQzcyNjE3MzguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JLbUZEbkY2Ylh2RVliTHBibmhaRVdFa3hqR3JaUlFwcFhRSzRGblVUTlZaLzAv
MzEzMzM4MmUzNTM5MmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM0
MzUzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCijsoMA0GCSqGSIb3DQEBCwUAA4IBAQBGBP34Gnro
gkNeBZQDIPiD3OedWDwEqIWbPaKnaMnjlAx2zddUc9BLYEhsNxnoMFt9+H/DvJu5
V1nJueDAdoTC5K7o2EoPUNY1bBcfiKtmq6t8PFNHsMZy8mWNEPzBZpbibczavExK
kUo7jaI6fK5lnpXn95FWw7ipL6rby3YUMCmnk/H/AqvU8xtl6GO7KwRuekOp9lis
d3GsxXux8SUFzRm+/FtdD2Q/YhsPrNtbRq/GNMAsHnSzc67Qm66OVwKmMMnTcKlX
lbPAk16QGcqfCWYKYUnMZQo2c9HnlacEePGLSDHfCSPyLUVhWuVfZ46krVs8chfg
P7a4nI1LAvwg
-----END CERTIFICATE-----
Generated at Fri Jan 19 00:54:45 2024 by rpki-client on console-fra.rpki-client.org