Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3133382e35392e39322e302f32322d3234203d3e20323632373639.roa
File: 3133382e35392e39322e302f32322d3234203d3e20323632373639.roa (raw, json)
Hash identifier: k3xQYgSg6oK20lvvPXTAwA0GHfxbq6Apy1ijPFGenX4=
Subject key identifier: BA:BD:78:AD:A9:8B:73:A0:5C:F2:48:E9:38:75:84:DF:26:9A:B2:92
Certificate issuer: /CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
Certificate serial: 3F75DC4C488C721635AE8FAF68713768BA4EEC15
Authority key identifier: C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3133382e35392e39322e302f32322d3234203d3e20323632373639.roa
Signing time: Fri 05 Apr 2024 01:08:00 +0000
ROA not before: Fri 05 Apr 2024 01:03:00 +0000
ROA not after: Fri 04 Apr 2025 01:08:00 +0000
asID: 262769
IP address blocks: 138.59.92.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:75:dc:4c:48:8c:72:16:35:ae:8f:af:68:71:37:68:ba:4e:ec:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2D6DB4889AAB61CF2394BF662E1E490795A4EED
Validity
Not Before: Apr 5 01:03:00 2024 GMT
Not After : Apr 4 01:08:00 2025 GMT
Subject: CN=BABD78ADA98B73A05CF248E9387584DF269AB292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bd:84:cc:65:e4:c3:e2:47:09:09:68:21:93:
95:b6:2f:9b:8e:84:b9:ff:c1:b9:aa:34:54:cc:b3:
71:bc:1b:73:52:33:d1:ef:0a:c9:b4:73:a3:a5:b1:
0b:a1:30:13:55:52:78:2f:21:53:f6:b0:3e:fd:32:
2b:40:59:d9:2d:5a:f4:1a:16:0a:f5:93:01:b7:b9:
a0:9b:a2:14:e4:56:be:7d:f8:49:8e:fd:8d:d4:2a:
57:7a:24:2a:7f:bf:20:35:e9:5e:43:5f:2a:cd:e7:
7d:2f:3b:5e:d0:e8:ec:4a:9b:2e:71:a7:00:71:8a:
20:53:78:66:da:5a:b8:61:e5:95:92:29:3d:41:ad:
50:82:ca:ac:0b:74:9d:eb:75:1e:37:93:1f:89:11:
1d:e2:7c:dc:5f:bf:9e:67:3f:57:cb:9f:f4:9e:75:
5f:09:14:60:05:4d:c3:fe:cb:e1:33:0f:c3:f0:59:
00:ac:fb:e1:b3:c4:5b:d4:76:1a:82:af:c8:11:29:
22:ca:b4:02:07:9f:35:43:6b:6b:47:15:4c:2a:ff:
ff:d5:0c:86:eb:e2:2a:13:a0:51:f6:4f:98:6e:41:
8e:76:32:38:d0:d7:74:22:cc:7f:ea:03:8e:42:b7:
fd:78:f7:0d:16:fa:31:54:c8:e5:b5:e8:fa:cb:e6:
19:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BD:78:AD:A9:8B:73:A0:5C:F2:48:E9:38:75:84:DF:26:9A:B2:92
X509v3 Authority Key Identifier:
keyid:C2:D6:DB:48:89:AA:B6:1C:F2:39:4B:F6:62:E1:E4:90:79:5A:4E:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2D6DB4889AAB61CF2394BF662E1E490795A4EED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/1/3133382e35392e39322e302f32322d3234203d3e20323632373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:a2:d9:97:e1:c1:aa:b9:16:df:9f:a7:52:f6:4b:19:20:4e:
8c:d1:c0:e4:a3:3b:b6:3b:43:85:d7:c9:39:c1:0a:08:b1:61:
43:64:73:12:b8:e7:ac:ca:d1:60:93:65:93:89:82:47:c9:7a:
04:0f:cd:73:83:86:6e:70:81:a0:82:e7:ac:99:4a:2e:f5:41:
00:90:47:0f:10:53:d8:8b:25:3d:2f:54:5f:20:f4:2e:ed:1f:
5b:29:a0:29:ed:6c:14:75:f2:b9:92:30:04:0a:b6:cb:2a:2a:
7c:88:b0:81:f1:9f:87:94:d3:7f:e9:b2:9c:c1:05:32:97:ce:
43:dc:c3:00:0d:99:f6:7a:45:b7:af:42:59:34:84:09:29:cf:
13:f6:ca:66:26:df:70:37:3e:4b:96:df:02:3b:1c:ac:98:ae:
b8:c4:7e:eb:9a:62:df:25:6b:9d:c9:a1:0a:85:6f:47:85:c7:
30:04:b9:e4:66:da:03:af:3b:f4:82:3f:3f:f7:8d:ea:1e:d3:
c5:7d:40:02:46:a4:bb:fb:c5:38:f2:0d:5f:eb:2e:be:28:f7:
78:c7:80:b3:50:c4:13:6c:e1:ae:df:b6:9e:1b:24:ad:76:57:
f8:8e:5d:ce:43:5a:b9:71:1a:2f:1a:d1:da:ba:02:54:33:f6:
f8:d0:dd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 7 06:38:32 2024 by rpki-client on console-ams.rpki-client.org