Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
File: 3133322e3235352e36342e302f32322d3234203d3e203238363637.roa (raw, json)
Hash identifier: SYskKoF1acPt0sTpV/ok0Tr8eU2XyfCpWKJsYcSMdQc=
Subject key identifier: A8:98:08:A7:DC:BB:27:58:6A:A9:33:06:D0:C3:E1:0D:32:E2:16:AA
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 6B61285CD9CA5446A7B83C2B5C3BFB80EB01C029
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
Signing time: Thu 31 Oct 2024 17:26:35 +0000
ROA not before: Thu 31 Oct 2024 17:21:35 +0000
ROA not after: Thu 30 Oct 2025 17:26:35 +0000
asID: 28667
IP address blocks: 132.255.64.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:61:28:5c:d9:ca:54:46:a7:b8:3c:2b:5c:3b:fb:80:eb:01:c0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:21:35 2024 GMT
Not After : Oct 30 17:26:35 2025 GMT
Subject: CN=A89808A7DCBB27586AA93306D0C3E10D32E216AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:82:99:b6:a6:e9:f2:68:55:28:8c:0f:4d:ba:
11:45:f4:4f:d3:1f:4c:71:56:49:7d:7a:e4:0d:06:
38:41:34:6d:a8:7e:0a:99:9a:08:83:7f:1f:b2:71:
82:bb:9d:71:34:9e:c2:15:63:2e:9a:24:fd:55:4b:
71:49:28:73:82:86:09:ad:94:dc:94:83:22:32:37:
ba:b5:6c:31:e4:b1:bb:93:2e:7f:79:fb:e9:df:dd:
e1:65:f2:46:de:a5:f3:31:5f:36:41:30:25:d4:56:
91:4d:3b:d1:a7:0a:73:3a:2c:46:4f:38:39:c1:d4:
3f:b0:68:e0:a9:6b:fd:2f:d6:7f:59:6b:96:3b:2f:
e8:ce:2f:9b:46:a1:71:78:fa:38:dc:e5:29:35:51:
15:2c:ed:ab:d1:88:30:ea:29:f4:66:38:36:19:c9:
64:3c:1e:96:5a:dc:80:f2:b0:a6:8b:49:92:7e:42:
39:31:88:4c:ea:95:06:e2:6a:2b:36:c8:80:9b:da:
1d:08:7c:da:72:11:84:d0:5a:f7:c6:ec:40:9a:4c:
dd:87:98:81:ab:0a:e3:f9:8e:41:66:aa:10:76:e3:
13:72:f6:b4:33:d2:84:e7:69:23:f0:0d:03:07:d0:
3b:40:47:23:5d:b7:8d:b7:4c:95:39:bd:0e:ed:fd:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:98:08:A7:DC:BB:27:58:6A:A9:33:06:D0:C3:E1:0D:32:E2:16:AA
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133322e3235352e36342e302f32322d3234203d3e203238363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.64.0/22
Signature Algorithm: sha256WithRSAEncryption
64:60:dd:88:9b:df:01:9d:8b:45:6b:67:a5:2e:90:80:83:c0:
99:91:7d:b0:4a:1f:9a:22:86:01:d3:9c:b1:c4:bd:25:b7:a6:
37:54:01:0f:14:c6:ad:09:15:9a:57:de:c9:4a:43:3d:85:0a:
3a:9d:e2:bf:c3:7b:1b:b3:cd:f2:24:19:ed:9a:42:be:5e:8a:
82:1c:38:e3:ce:6d:51:84:63:32:d6:f5:3b:15:0d:c1:02:9e:
f4:87:5a:eb:1f:57:a4:df:8b:6f:dc:a2:04:60:07:c9:cc:96:
a2:7e:56:53:25:42:3c:f5:73:9d:1a:ae:2c:ca:e2:70:09:7b:
f3:18:55:0e:d6:f0:6e:3b:ca:de:07:e3:ab:4b:ea:09:7c:10:
fe:28:41:bf:a7:83:41:29:e3:63:e8:4c:30:57:df:da:4f:e0:
0c:e7:3c:22:8d:70:d1:94:a6:73:98:fa:b7:3a:6a:d1:1d:8f:
aa:5a:f2:63:61:09:ce:ef:8c:70:7b:c1:41:01:8c:ff:c3:b9:
d9:3b:46:b5:28:07:7b:e6:b8:28:4c:e3:46:bb:cf:6a:f5:f4:
08:fa:58:61:c8:81:48:62:09:f4:9b:5f:c7:8c:bd:2e:77:45:
08:96:c0:b2:55:9e:72:87:62:2b:b8:84:52:3c:7f:06:fb:ee:
6f:3f:35:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org