Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53085.roa
File: AS53085.roa (raw, json)
Hash identifier: Q8TDhK00bUglbUtK5yl5mSrcangqyNfr/yVsIG8WwJA=
Subject key identifier: C3:C2:E5:6D:D9:D3:C3:D1:7E:94:34:AB:96:02:72:2B:82:C3:2F:02
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 3A745E06A3671F4A9F6E14784218CE1AA3819E34
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53085.roa
Signing time: Tue 23 Jul 2024 12:10:38 +0000
ROA not before: Tue 23 Jul 2024 12:05:38 +0000
ROA not after: Tue 22 Jul 2025 12:10:38 +0000
asID: 53085
IP address blocks: 132.255.148.0/22 maxlen: 24
187.33.160.0/20 maxlen: 24
191.5.144.0/20 maxlen: 24
2804:1790::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:74:5e:06:a3:67:1f:4a:9f:6e:14:78:42:18:ce:1a:a3:81:9e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:38 2024 GMT
Not After : Jul 22 12:10:38 2025 GMT
Subject: CN=C3C2E56DD9D3C3D17E9434AB9602722B82C32F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:17:e7:45:79:9d:be:7b:5f:14:ab:ac:17:24:
80:82:d2:f9:6a:31:8b:fc:21:77:54:ee:e8:95:c9:
ca:5b:b1:0b:11:e4:51:a8:ee:fb:36:15:fa:fc:48:
73:a6:a6:1a:0e:cf:cc:06:12:f7:ee:63:7a:b4:98:
c0:f4:01:cf:b6:c6:80:75:9b:56:6f:72:ef:51:20:
0b:6b:16:3d:d3:ab:0b:9a:58:33:c1:03:e0:f7:30:
78:da:c4:12:81:20:4c:cc:18:0d:b9:d0:be:fe:37:
b1:d5:a4:46:c7:b3:b4:e0:73:e9:05:23:da:6d:97:
31:35:33:d3:43:07:f8:a6:51:9a:e2:41:3e:1c:36:
4d:e1:01:8a:10:97:8c:8a:5c:8e:16:e2:63:df:1f:
45:db:bd:f9:5f:34:0e:ce:62:1f:17:f5:0e:ad:ca:
ac:6c:55:0f:cd:ce:a8:7d:e8:61:36:07:e7:de:c0:
53:ef:9f:63:22:f4:be:ae:a4:74:ee:62:0e:bd:bb:
7d:60:92:97:fb:8e:5b:3a:6e:86:31:d4:9c:b5:91:
66:e3:3a:f3:42:e1:71:fd:32:f3:e1:8f:07:94:84:
ae:b7:d6:d9:f9:f5:b8:19:83:1d:fb:fe:5c:11:18:
b6:03:0d:8b:30:62:8f:f8:49:20:e1:d4:0e:6e:e2:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C2:E5:6D:D9:D3:C3:D1:7E:94:34:AB:96:02:72:2B:82:C3:2F:02
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS53085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.148.0/22
187.33.160.0/20
191.5.144.0/20
IPv6:
2804:1790::/32
Signature Algorithm: sha256WithRSAEncryption
32:28:d1:1f:a2:f0:57:6c:e8:2c:8d:fe:fe:1b:d1:f1:9a:97:
3e:ee:ae:4f:ad:ee:70:50:41:db:1f:c0:ad:98:b5:fb:24:16:
e7:af:09:d2:5c:95:3d:24:9a:30:86:cd:08:ab:3d:59:78:9a:
ad:c6:c1:ec:ac:32:6e:de:b8:81:70:d2:19:2a:37:fe:75:f0:
2e:1c:cd:66:a5:0a:d2:56:84:78:11:52:7e:38:7e:b9:b4:28:
b6:dc:8f:ea:b9:ce:e2:64:90:88:97:e2:0c:a2:77:1a:ce:ff:
a9:81:a4:10:cb:74:d9:15:33:dc:97:82:7f:17:4f:16:47:14:
b2:24:77:83:07:6a:71:b3:66:42:7f:c6:5d:34:d5:0d:6d:30:
a1:50:f8:7f:48:cc:d8:66:9f:4c:89:b0:3f:1a:f4:4c:5c:f9:
59:5c:bd:aa:35:bb:98:5a:b5:fc:32:52:f2:50:88:8c:2b:d6:
36:ec:8d:f6:95:2f:e0:76:43:b9:82:14:fa:a7:31:c4:29:60:
43:f7:40:48:53:74:9c:2e:09:3f:95:83:7e:27:3c:f9:00:6b:
c4:eb:09:10:f3:57:c6:52:8a:55:cb:9b:53:94:bc:67:48:b4:
25:c0:c0:c7:28:08:77:fa:69:2c:ba:4a:22:91:7a:95:e2:d5:
d1:df:15:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org