Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3133382e3138362e302e302f32322d3332203d3e203532353739.roa
File: 3133382e3138362e302e302f32322d3332203d3e203532353739.roa (raw, json)
Hash identifier: +eNqembYekeh4a8OXVZ+rkoy22bUpNEdWWd7fM4NqH8=
Subject key identifier: 08:41:7F:57:DD:0B:7A:09:B6:E7:8D:75:D6:C0:1E:57:A9:05:EE:F7
Certificate issuer: /CN=0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1
Certificate serial: 2D34EA6132FB26FF6F2561FF46D7D39A4BE97231
Authority key identifier: 0E:3C:E9:01:E0:6C:8B:C5:5F:FF:11:1D:95:01:7F:E6:DB:AC:9F:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3133382e3138362e302e302f32322d3332203d3e203532353739.roa
Signing time: Mon 15 Apr 2024 13:15:20 +0000
ROA not before: Mon 15 Apr 2024 13:10:20 +0000
ROA not after: Mon 14 Apr 2025 13:15:20 +0000
asID: 52579
IP address blocks: 138.186.0.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:34:ea:61:32:fb:26:ff:6f:25:61:ff:46:d7:d3:9a:4b:e9:72:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1
Validity
Not Before: Apr 15 13:10:20 2024 GMT
Not After : Apr 14 13:15:20 2025 GMT
Subject: CN=08417F57DD0B7A09B6E78D75D6C01E57A905EEF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bf:8a:78:7f:3e:64:07:ed:db:b1:bd:e3:27:
0f:14:3e:35:59:d1:4e:18:f4:2b:31:5f:d1:ef:a0:
ef:29:05:5d:1a:e9:f1:ea:a6:c7:cb:65:a8:61:d3:
61:90:13:be:81:bc:4a:46:8f:66:c9:84:4d:56:70:
b0:65:8d:0b:22:c5:1b:c4:8e:e0:40:47:c6:86:83:
b9:4d:16:8e:c5:04:3d:0a:ec:97:cb:a0:d0:d6:ca:
10:1f:e7:d6:3e:93:cf:89:9d:8d:f2:40:f4:c1:03:
7b:1e:d1:cf:03:c6:09:ad:b7:1f:29:80:84:be:9a:
b1:17:7f:08:e7:22:f4:ed:24:bc:ca:0e:5b:69:63:
ec:a7:58:25:87:dd:ca:3f:03:e9:e6:bc:6b:ff:24:
bd:50:f0:79:1a:80:14:8c:a9:52:ba:0a:fd:c7:b6:
c6:51:1d:5b:ad:bc:4c:d6:08:0c:95:c8:3e:5d:a6:
80:42:ef:ab:b7:78:88:72:c3:50:68:cb:57:b2:6e:
30:3e:a3:bd:9a:7a:3e:0d:d7:cb:4e:88:7d:d0:c7:
28:cf:93:65:84:16:46:57:74:95:77:6e:90:2e:fc:
10:94:da:90:bc:31:7e:34:88:bf:47:84:51:70:5f:
77:13:f8:be:ec:db:8c:59:ca:35:4d:0d:b4:3c:38:
fe:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:41:7F:57:DD:0B:7A:09:B6:E7:8D:75:D6:C0:1E:57:A9:05:EE:F7
X509v3 Authority Key Identifier:
keyid:0E:3C:E9:01:E0:6C:8B:C5:5F:FF:11:1D:95:01:7F:E6:DB:AC:9F:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E3CE901E06C8BC55FFF111D95017FE6DBAC9FF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/68tTNTMRcPthcZ6kzu4WircJx74GhyQsTaV4UZjQCiE8/0/3133382e3138362e302e302f32322d3332203d3e203532353739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.186.0.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:16:a8:c3:1b:27:94:7c:b2:60:15:b7:45:68:70:0c:f2:30:
35:34:9c:9e:af:6e:49:18:9b:ff:c2:52:26:32:76:d4:ac:44:
b0:16:25:d8:83:12:b6:f3:94:66:d1:66:11:3d:78:80:0e:3b:
5f:50:30:c1:69:ec:46:61:af:3d:37:28:21:db:e3:db:3c:48:
6b:e6:7c:e5:79:27:b1:61:e1:be:aa:5d:fd:34:4b:2f:02:34:
0d:ad:1d:59:d9:13:ba:8d:2a:66:a6:36:a7:8d:eb:0c:73:aa:
90:15:2c:5e:f5:1d:a9:7a:09:e0:ab:6c:05:4e:4b:54:60:dd:
f4:d8:21:1b:fc:11:ba:12:55:51:7a:fc:1f:2f:39:36:32:00:
61:77:f7:25:46:52:c7:dd:67:3a:c5:87:d7:be:23:4a:01:43:
ae:32:c2:64:36:9f:db:0e:a4:ad:00:c8:18:be:e3:87:83:d1:
9e:1b:a3:62:9d:48:7c:9d:fb:5e:42:6d:b3:8a:0b:6d:fd:29:
f7:7e:5a:89:e2:fb:a9:3a:1f:4d:d9:36:89:a6:8a:bb:32:aa:
96:aa:13:55:42:95:62:d5:6a:5d:a1:ca:aa:1c:87:01:9e:90:
9e:60:d1:72:dd:ca:8e:4b:0b:22:88:56:88:a5:21:d9:81:17:
4a:51:5a:79
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIULTTqYTL7Jv9vJWH/RtfTmkvpcjEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEUzQ0U5MDFFMDZDOEJDNTVGRkYxMTFEOTUwMTdGRTZE
QkFDOUZGMTAeFw0yNDA0MTUxMzEwMjBaFw0yNTA0MTQxMzE1MjBaMDMxMTAvBgNV
BAMTKDA4NDE3RjU3REQwQjdBMDlCNkU3OEQ3NUQ2QzAxRTU3QTkwNUVFRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyv4p4fz5kB+3bsb3jJw8UPjVZ
0U4Y9CsxX9HvoO8pBV0a6fHqpsfLZahh02GQE76BvEpGj2bJhE1WcLBljQsixRvE
juBAR8aGg7lNFo7FBD0K7JfLoNDWyhAf59Y+k8+JnY3yQPTBA3se0c8Dxgmttx8p
gIS+mrEXfwjnIvTtJLzKDltpY+ynWCWH3co/A+nmvGv/JL1Q8HkagBSMqVK6Cv3H
tsZRHVutvEzWCAyVyD5dpoBC76u3eIhyw1Boy1eybjA+o72aej4N18tOiH3QxyjP
k2WEFkZXdJV3bpAu/BCU2pC8MX40iL9HhFFwX3cT+L7s24xZyjVNDbQ8OP63AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUCEF/V90Legm254111sAeV6kF7vcwHwYDVR0j
BBgwFoAUDjzpAeBsi8Vf/xEdlQF/5tusn/EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjh0VE5UTVJjUHRoY1o2a3p1NFdpcmNKeDc0R2h5UXNUYVY0VVpqUUNp
RTgvMC8wRTNDRTkwMUUwNkM4QkM1NUZGRjExMUQ5NTAxN0ZFNkRCQUM5RkYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFM0NFOTAxRTA2QzhCQzU1
RkZGMTExRDk1MDE3RkU2REJBQzlGRjEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY4dFROVE1SY1B0aGNaNmt6dTRXaXJjSng3NEdoeVFzVGFWNFVaalFDaUU4LzAv
MzEzMzM4MmUzMTM4MzYyZTMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzMjM1
MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAoq6ADANBgkqhkiG9w0BAQsFAAOCAQEAixaowxsnlHyy
YBW3RWhwDPIwNTScnq9uSRib/8JSJjJ21KxEsBYl2IMStvOUZtFmET14gA47X1Aw
wWnsRmGvPTcoIdvj2zxIa+Z85XknsWHhvqpd/TRLLwI0Da0dWdkTuo0qZqY2p43r
DHOqkBUsXvUdqXoJ4KtsBU5LVGDd9NghG/wRuhJVUXr8Hy85NjIAYXf3JUZSx91n
OsWH174jSgFDrjLCZDaf2w6krQDIGL7jh4PRnhujYp1IfJ37XkJts4oLbf0p935a
ieL7qTofTdk2iaaKuzKqlqoTVUKVYtVqXaHKqhyHAZ6QnmDRct3KjksLIohWiKUh
2YEXSlFaeQ==
-----END CERTIFICATE-----
Generated at Fri Jul 19 15:54:56 2024 by rpki-client on console-fra.rpki-client.org