Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
File: 3133382e3131382e39322e302f32322d3234203d3e203533313731.roa (raw, json)
Hash identifier: eHHMQiJOQlWzY0w78CBaOsVxklqFBdbtgZkWcVD7Kyc=
Subject key identifier: 5A:C0:BC:6E:DC:59:7C:73:7E:39:4F:B3:63:56:73:0D:6B:54:B6:BB
Certificate issuer: /CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Certificate serial: 298C00B31A709FF61EB7C092F997757A074F7D43
Authority key identifier: 9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
Signing time: Fri 03 May 2024 21:03:48 +0000
ROA not before: Fri 03 May 2024 20:58:48 +0000
ROA not after: Fri 02 May 2025 21:03:48 +0000
asID: 53171
IP address blocks: 138.118.92.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:8c:00:b3:1a:70:9f:f6:1e:b7:c0:92:f9:97:75:7a:07:4f:7d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018
Validity
Not Before: May 3 20:58:48 2024 GMT
Not After : May 2 21:03:48 2025 GMT
Subject: CN=5AC0BC6EDC597C737E394FB36356730D6B54B6BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:9d:00:7d:5b:ba:c2:f5:bb:1c:56:83:00:
f2:cf:b7:e1:7f:d2:7f:c7:a7:73:97:81:c0:c3:a9:
f9:77:37:df:f6:73:17:be:19:3e:fb:39:b0:53:66:
d3:bd:cc:96:3f:d0:cf:70:56:d8:94:80:71:85:be:
2f:98:da:a9:8d:81:af:de:12:e7:fc:6a:54:24:e8:
dd:7b:40:41:78:b3:65:c6:14:88:46:f7:00:a2:12:
ad:70:79:85:6f:a2:d8:70:c3:0c:a3:8e:83:63:13:
4e:e5:93:f1:09:9d:2f:52:a5:c7:8c:88:25:47:0c:
83:ee:4c:10:6a:06:a1:52:82:78:b5:37:60:2d:30:
59:3b:ec:32:d6:94:49:9e:d6:26:be:8d:7f:e7:03:
b7:39:55:93:88:b9:c9:26:8a:3f:d2:ab:3f:d0:37:
ba:2f:ce:4d:89:65:69:cd:7f:e0:b4:cd:71:d4:18:
02:a1:d9:f1:da:a6:f5:b4:a9:2b:8d:1c:4b:94:48:
18:1a:25:1c:9b:01:a2:c8:34:e1:ea:87:0f:87:1a:
7b:53:83:80:14:d1:cf:94:1c:3a:b3:f7:8d:cf:b9:
7a:c6:61:17:03:78:86:74:37:15:05:11:70:15:6d:
17:57:32:bb:c6:88:aa:68:91:bb:7f:58:c8:44:46:
3c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C0:BC:6E:DC:59:7C:73:7E:39:4F:B3:63:56:73:0D:6B:54:B6:BB
X509v3 Authority Key Identifier:
keyid:9B:F7:F8:FD:B3:A5:DC:DE:A5:12:63:FE:0C:6A:27:2B:51:F2:80:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BF7F8FDB3A5DCDEA51263FE0C6A272B51F28018.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4afCLxkqHw4sjNismTML5M5u7T9uLGBYnDmSL5a7qXf/0/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.92.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:80:88:d4:ff:32:79:98:56:0e:45:d4:4b:f0:c4:96:92:59:
2f:e0:fe:f2:30:75:ad:e4:08:57:f8:2a:ca:bf:4c:04:d4:ac:
78:33:90:2b:94:b3:73:f8:38:fd:6f:5c:50:50:a3:de:8e:f6:
11:9a:c4:0e:33:05:26:3a:ae:86:77:f0:63:a7:1c:56:2e:6b:
b2:45:95:be:0d:d3:84:2e:53:e4:26:3d:90:c8:89:59:e1:12:
1c:9c:17:96:3d:f7:01:08:8e:38:64:4f:a4:7c:7e:a8:47:54:
25:9c:5e:69:3a:58:d2:d7:b0:a4:f8:7d:06:2f:74:04:e9:52:
68:c9:5b:8e:5e:73:b3:31:30:e5:22:8c:a9:71:c0:ff:04:18:
cd:5c:5f:09:8c:9d:40:05:ac:05:a2:e3:c3:c2:21:32:ab:fd:
93:07:2c:2b:c3:16:0e:f5:88:55:46:d8:99:fe:93:50:a1:92:
78:e8:0e:db:9b:06:de:a3:57:b2:00:98:d0:38:ff:26:5f:68:
63:52:0c:27:09:00:1d:5c:40:3b:ff:76:5e:41:2f:10:0e:c4:
05:a9:7d:5d:48:fe:96:12:c8:e3:ac:d3:c2:fa:5a:db:59:75:
67:00:47:64:29:1f:e1:2c:4c:c8:53:24:31:0b:87:7c:01:1f:
dd:ef:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 17:52:18 2024 by rpki-client on console-ams.rpki-client.org