Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa
File: 3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa (raw, json)
Hash identifier: /A/F24Rfm/ODwOR/E3jgIALj1yojkZUIw91dgYxm2ns=
Subject key identifier: 77:02:D3:ED:B5:4F:05:76:97:94:0E:0E:69:5B:DE:62:4B:C8:AC:54
Certificate issuer: /CN=F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E
Certificate serial: 12CCF0ED2D935936D6303D3B3BE35C6452CB06A7
Authority key identifier: F5:4B:CA:C2:B5:E4:1C:5B:45:10:52:14:EA:BE:F2:AE:21:24:ED:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa
Signing time: Thu 07 Nov 2024 13:35:18 +0000
ROA not before: Thu 07 Nov 2024 13:30:18 +0000
ROA not after: Thu 06 Nov 2025 13:35:18 +0000
asID: 263468
IP address blocks: 131.255.96.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cc:f0:ed:2d:93:59:36:d6:30:3d:3b:3b:e3:5c:64:52:cb:06:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E
Validity
Not Before: Nov 7 13:30:18 2024 GMT
Not After : Nov 6 13:35:18 2025 GMT
Subject: CN=7702D3EDB54F057697940E0E695BDE624BC8AC54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0f:95:b3:1c:65:1d:9a:62:2b:15:3d:1d:6a:
a3:8d:21:55:17:19:ce:de:8b:05:d2:e8:f0:e1:d7:
d8:62:f4:0f:1f:ef:9d:75:46:8f:19:34:45:01:1e:
df:64:bd:41:ac:33:e4:b8:4e:5c:1e:1c:e0:e2:7b:
bf:3d:1e:a6:90:11:49:3a:c7:32:fe:47:47:ca:f8:
07:5d:b5:c4:bd:82:19:41:60:7c:e4:4c:8a:ad:0a:
2f:19:8f:cd:c6:74:40:87:f6:75:93:4f:fe:b4:03:
68:88:99:b0:02:dc:cc:a6:63:db:03:d8:48:e3:66:
3d:c8:01:ea:b0:74:52:1d:89:36:4b:eb:cb:c1:a1:
e4:ff:c5:18:fb:ae:5b:79:95:85:59:40:11:0c:20:
f4:08:b8:08:26:b9:c2:5a:5b:93:f5:6a:0d:66:f2:
c3:12:4a:1f:10:56:35:6a:a4:d0:09:97:62:ff:2c:
20:6f:3b:87:72:d9:83:42:1b:a5:c5:87:2c:75:08:
ba:1d:bf:af:3a:44:de:bb:c5:ed:93:45:e2:29:c8:
20:ad:ab:39:24:d9:fc:a0:9f:59:44:d8:15:8a:60:
28:e5:d9:00:5e:fe:54:ab:c3:03:a3:c5:02:d6:ca:
ea:b7:5a:21:79:24:cd:78:0e:fd:a7:c5:6b:5c:6d:
67:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:02:D3:ED:B5:4F:05:76:97:94:0E:0E:69:5B:DE:62:4B:C8:AC:54
X509v3 Authority Key Identifier:
keyid:F5:4B:CA:C2:B5:E4:1C:5B:45:10:52:14:EA:BE:F2:AE:21:24:ED:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F54BCAC2B5E41C5B45105214EABEF2AE2124ED6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2N5Y625gnTANPiVmTLtNx5P6RJHtMERcesKcg3qcEanY/0/3133312e3235352e39362e302f32322d3234203d3e20323633343638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.255.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:48:16:3c:f1:18:4a:1f:17:4d:14:71:0c:39:05:01:bf:2d:
2c:18:1d:01:11:23:b1:14:3f:27:d1:f5:b5:9d:d8:05:19:48:
15:1a:4b:1f:2f:7c:0c:73:c9:ee:18:25:04:12:7a:0c:fe:d4:
24:ef:4c:cd:9a:6e:42:76:aa:9b:e8:91:92:86:bf:d6:fb:cc:
16:4f:bf:19:54:f4:2f:fb:24:34:0a:e1:82:0f:f5:3c:ff:ff:
66:4e:51:68:1a:68:5a:0d:4e:e0:3e:78:f7:6b:9a:2a:60:9e:
c6:7a:a8:dc:61:e4:c8:93:e5:6d:da:88:05:2b:e4:65:f5:11:
2f:34:ba:5f:7f:0f:c8:b2:8e:49:dc:f5:1b:ca:52:35:1d:a7:
55:38:d0:02:4b:8d:9f:39:2a:51:e1:79:0a:a6:bd:ee:0c:1b:
f0:cc:e8:ed:9d:da:92:f8:db:e6:dd:0d:d1:f4:04:04:7a:79:
f2:91:44:01:55:0a:98:de:94:d2:6e:97:c5:b0:23:f7:b3:0e:
36:97:db:78:ad:83:61:f5:c7:c1:56:b6:d0:9e:af:fa:da:16:
c0:1f:d2:a4:f0:0a:cc:e2:3d:8b:47:c8:50:26:87:55:68:eb:
0e:d7:3d:a9:82:1b:49:f4:15:fd:fb:06:55:59:d4:be:17:cf:
8a:35:62:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 19:50:11 2024 by rpki-client on console-ams.rpki-client.org