Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/3133382e3235352e3133322e302f32322d3234203d3e20323634333630.roa
File: 3133382e3235352e3133322e302f32322d3234203d3e20323634333630.roa (raw, json)
Hash identifier: klrquLcfsAOh03D3xsHgqOopDYH28iRfpXJwo7uPYh4=
Subject key identifier: 8F:97:ED:AB:5A:FA:81:02:68:03:80:0B:02:3D:23:FB:53:C8:17:C9
Certificate issuer: /CN=04E9838264C8C3EFF1299FCE9474ACE037A792A2
Certificate serial: 7AA528BE1D9A284A0CCB2B46D1E974AA8FCFB1D1
Authority key identifier: 04:E9:83:82:64:C8:C3:EF:F1:29:9F:CE:94:74:AC:E0:37:A7:92:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E9838264C8C3EFF1299FCE9474ACE037A792A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/3133382e3235352e3133322e302f32322d3234203d3e20323634333630.roa
Signing time: Tue 29 Oct 2024 15:35:14 +0000
ROA not before: Tue 29 Oct 2024 15:30:14 +0000
ROA not after: Tue 28 Oct 2025 15:35:14 +0000
asID: 264360
IP address blocks: 138.255.132.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:a5:28:be:1d:9a:28:4a:0c:cb:2b:46:d1:e9:74:aa:8f:cf:b1:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04E9838264C8C3EFF1299FCE9474ACE037A792A2
Validity
Not Before: Oct 29 15:30:14 2024 GMT
Not After : Oct 28 15:35:14 2025 GMT
Subject: CN=8F97EDAB5AFA81026803800B023D23FB53C817C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fd:58:c2:8b:1b:b4:b8:cf:17:0f:64:62:d4:
8f:f9:2f:1e:23:56:2f:60:4d:b8:1e:12:e9:04:0b:
0c:25:52:fe:42:19:eb:81:e2:08:40:cb:3a:f7:58:
4b:2a:42:ca:0a:0e:9f:3c:a3:5d:08:3e:dd:18:aa:
88:69:29:0a:29:9c:99:05:d3:ab:29:0e:8c:76:e1:
35:39:63:a4:4f:8e:49:0e:94:75:50:8f:d3:66:59:
e7:96:e6:c0:fd:c2:91:5e:39:95:f9:1a:44:e4:a4:
30:b2:5b:1f:4e:f5:fe:8b:fc:6b:b3:eb:e2:1e:f0:
e1:9d:39:61:92:ce:a2:dd:9e:de:2a:f8:88:5b:5c:
45:10:86:bf:14:ce:48:c1:6a:4b:92:7a:53:09:50:
72:46:40:d6:95:be:af:2f:d0:f9:f0:4c:34:7a:ea:
81:e4:15:ef:ac:dc:58:3f:21:e0:bc:c7:c2:71:8b:
2d:74:4f:67:b3:6b:48:97:2c:8b:5b:e0:30:ee:4b:
02:07:a0:9c:20:d4:9a:49:d6:a5:95:df:a7:8f:19:
0e:0a:fb:59:8e:e6:40:d8:a1:75:4a:33:6c:4c:ec:
dd:4c:b1:89:54:12:43:71:6f:fb:2a:c1:41:00:3b:
4f:74:4a:89:d2:85:5d:a0:b6:05:17:3b:cf:31:ac:
2e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:97:ED:AB:5A:FA:81:02:68:03:80:0B:02:3D:23:FB:53:C8:17:C9
X509v3 Authority Key Identifier:
keyid:04:E9:83:82:64:C8:C3:EF:F1:29:9F:CE:94:74:AC:E0:37:A7:92:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/04E9838264C8C3EFF1299FCE9474ACE037A792A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/04E9838264C8C3EFF1299FCE9474ACE037A792A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KL4b4Kk8PQco6XosP4gGcxY2sbdiyPfJDDzS1vRsaLu/0/3133382e3235352e3133322e302f32322d3234203d3e20323634333630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.132.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:a9:b3:d0:83:f5:b5:c8:c6:7b:93:1e:f2:25:3a:7e:bf:27:
b5:74:51:2e:34:7d:b9:60:19:48:7d:8c:4b:8b:a6:56:6b:b1:
f7:0d:df:9e:e7:1b:0f:6d:a7:74:76:ef:3a:be:4f:3f:0a:17:
23:d4:c4:f3:d1:c4:4a:4d:40:af:5c:9c:1e:c3:17:32:fc:57:
0a:6b:d7:3d:64:28:1c:ae:72:d6:d5:81:3f:fd:fd:6a:a8:d4:
da:ad:fc:58:5f:7c:37:24:f9:25:e4:00:90:66:01:8a:08:ed:
aa:1b:6d:32:46:13:60:4a:06:67:ce:66:49:e5:23:c0:86:22:
31:d0:a4:86:78:4f:16:13:a8:fc:78:a7:4c:90:08:97:6c:ff:
d9:8f:dd:ba:8e:91:ea:d4:8d:fd:5c:9c:91:99:8e:83:af:1f:
7e:36:56:14:b9:f9:6e:2d:0c:70:cd:a6:f5:24:fc:25:e8:53:
62:e5:23:ad:50:12:72:72:c2:21:9e:58:c1:c2:b5:d8:52:81:
6d:47:b7:c4:5c:90:b8:6b:68:6e:41:eb:0c:84:a4:32:96:8c:
17:a6:67:1e:73:62:ba:ce:c5:9f:09:c1:e6:42:25:2e:b3:e3:
7e:26:11:1f:ec:4c:bb:0d:60:5d:00:5d:ba:5d:bc:33:3e:f3:
f6:bc:29:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 10:07:08 2024 by rpki-client on console-fra.rpki-client.org