Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3DCiWS6yS2hnMDr7seshU8XP8iob4mvFbVUbFouUMk37/0/3133382e39372e34342e302f32322d3332203d3e20323731363134.roa
File: 3133382e39372e34342e302f32322d3332203d3e20323731363134.roa (raw, json)
Hash identifier: f8X2/MoFtQolAbtLlID9T+PlC2yE8jBPjTw3C4TL6lc=
Subject key identifier: A9:0E:82:E3:D1:77:08:38:CE:03:14:44:FA:77:88:51:A5:81:5C:69
Certificate issuer: /CN=6BFB85B89CFBBD845835CAEBF1063080DF4D42BB
Certificate serial: 42B259C25628F00EEFD3E95064C27D31D0C65D96
Authority key identifier: 6B:FB:85:B8:9C:FB:BD:84:58:35:CA:EB:F1:06:30:80:DF:4D:42:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3DCiWS6yS2hnMDr7seshU8XP8iob4mvFbVUbFouUMk37/0/3133382e39372e34342e302f32322d3332203d3e20323731363134.roa
Signing time: Mon 26 Aug 2024 12:06:40 +0000
ROA not before: Mon 26 Aug 2024 12:01:40 +0000
ROA not after: Mon 25 Aug 2025 12:06:40 +0000
asID: 271614
IP address blocks: 138.97.44.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b2:59:c2:56:28:f0:0e:ef:d3:e9:50:64:c2:7d:31:d0:c6:5d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6BFB85B89CFBBD845835CAEBF1063080DF4D42BB
Validity
Not Before: Aug 26 12:01:40 2024 GMT
Not After : Aug 25 12:06:40 2025 GMT
Subject: CN=A90E82E3D1770838CE031444FA778851A5815C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:c0:81:c4:ff:3f:68:1d:11:77:99:52:ec:
55:95:df:f9:aa:f3:83:4c:73:73:63:78:58:b7:7d:
75:96:8f:9b:24:36:69:94:08:02:c1:8d:96:a3:4d:
e2:40:4d:4c:bd:a0:cd:50:07:a9:9e:9e:e4:a5:c7:
55:5e:02:17:5d:45:b8:2c:ba:ca:94:d2:e4:0a:c5:
ba:60:f5:4a:5e:a0:ad:bd:18:7c:17:75:5a:2d:3f:
27:e6:35:ee:ca:39:2e:ff:1a:76:3f:88:ac:55:09:
70:13:db:80:da:ae:5f:3f:0b:60:91:39:d2:43:73:
db:b0:2c:a3:17:6f:94:47:4d:dc:0c:53:e5:30:4e:
ea:7c:03:7d:c6:6d:ce:aa:af:76:4e:1e:2e:97:b6:
2e:56:6b:37:8f:52:fb:76:f4:7d:d1:ea:ee:44:05:
5a:5c:55:1d:ab:fb:ff:66:ff:99:e7:22:08:62:49:
63:d8:a4:10:bd:12:75:ff:19:af:fe:7f:8c:18:ed:
6d:3a:26:ab:ad:22:47:e6:8a:94:75:14:f3:d1:00:
97:b0:ca:4f:fc:bf:e2:7f:fd:1d:12:30:0a:85:db:
27:6e:e4:41:4c:00:aa:2b:19:3a:72:b7:10:39:83:
be:cd:ea:c1:94:a6:a3:eb:e1:de:17:7a:9a:ca:de:
42:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0E:82:E3:D1:77:08:38:CE:03:14:44:FA:77:88:51:A5:81:5C:69
X509v3 Authority Key Identifier:
keyid:6B:FB:85:B8:9C:FB:BD:84:58:35:CA:EB:F1:06:30:80:DF:4D:42:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3DCiWS6yS2hnMDr7seshU8XP8iob4mvFbVUbFouUMk37/0/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6BFB85B89CFBBD845835CAEBF1063080DF4D42BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3DCiWS6yS2hnMDr7seshU8XP8iob4mvFbVUbFouUMk37/0/3133382e39372e34342e302f32322d3332203d3e20323731363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.44.0/22
Signature Algorithm: sha256WithRSAEncryption
03:73:23:7d:20:9d:3c:27:3c:f5:8e:c0:11:37:30:e0:a7:a8:
cb:59:51:4e:e7:de:49:a5:12:13:b3:94:f0:36:36:0e:18:2b:
c3:80:4b:f8:b3:f2:df:fe:30:db:d0:9b:d9:3a:2c:8c:5e:96:
cd:7c:dd:d0:5e:f5:01:17:bf:ae:cf:a5:37:a2:4a:9e:c3:27:
b0:c0:e5:f9:6d:be:b0:fb:74:03:19:21:9e:2d:a7:82:83:4b:
75:0e:17:87:6f:81:16:ad:cd:ad:a8:e5:2b:6d:e0:25:ae:00:
06:83:6d:52:8a:de:5e:1c:ac:83:fe:28:85:43:8f:9d:6b:69:
14:02:7e:d8:98:d3:89:12:8c:ce:09:07:60:83:89:a0:bd:73:
13:21:eb:d8:91:ad:a4:00:33:f8:c2:8a:01:f1:30:65:9e:d5:
d9:03:35:b2:09:2f:47:aa:d9:58:b8:00:c7:96:a7:de:f1:30:
bd:54:75:87:cc:34:fb:dc:26:5d:72:69:5f:17:ec:78:af:8c:
e6:17:81:16:9e:78:ab:80:95:7b:b0:e7:cb:3d:89:55:9d:58:
f2:aa:2f:76:d6:6a:e1:b9:3d:30:0a:20:f4:3e:9a:62:e2:11:
44:d4:2d:15:28:b9:cf:04:94:b1:22:b7:4c:1c:57:a8:27:60:
5f:b9:a5:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 12:02:03 2024 by rpki-client on console-fra.rpki-client.org