Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
File: 3133382e3131382e39322e302f32322d3234203d3e203533313731.roa (raw, json)
Hash identifier: MRw9Xqp8wQBYjZ+XvajKoe4sy/uzznnymzQv86SqWzI=
Subject key identifier: 70:E4:F1:1F:14:3F:6A:81:CD:93:E7:C5:9D:20:20:68:F6:CC:4B:7E
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 09E24F60BF5F371F23093A98E546D5B5296A7FF0
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
Signing time: Thu 31 Oct 2024 16:59:36 +0000
ROA not before: Thu 31 Oct 2024 16:54:36 +0000
ROA not after: Thu 30 Oct 2025 16:59:36 +0000
asID: 53171
IP address blocks: 138.118.92.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e2:4f:60:bf:5f:37:1f:23:09:3a:98:e5:46:d5:b5:29:6a:7f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 16:54:36 2024 GMT
Not After : Oct 30 16:59:36 2025 GMT
Subject: CN=70E4F11F143F6A81CD93E7C59D202068F6CC4B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:9b:0e:36:d2:a6:c2:8f:4f:64:dd:31:29:
9e:66:f5:57:b9:89:ae:36:56:19:21:5a:dd:15:52:
9e:68:46:9e:f3:a9:bc:a1:d0:ed:8f:5f:b1:30:d7:
43:fb:8b:72:19:e8:5b:0e:e5:80:8c:bd:73:cb:c5:
9b:ed:37:49:43:6d:07:e9:43:af:f1:15:58:e6:e0:
a2:d8:25:0f:ec:bf:e3:0a:e3:42:78:3c:0e:a7:fb:
d8:f6:6e:03:54:61:3f:bb:39:45:b1:45:a3:42:b8:
32:e3:db:9b:47:cd:77:1c:9b:d0:4e:d4:45:59:d8:
86:02:b7:0e:4a:9a:56:68:2c:c2:2a:ef:dc:d2:f6:
4b:ae:9e:3a:39:fe:97:1d:82:bb:8a:ed:68:15:00:
4e:41:15:b8:41:6c:3b:b4:27:19:00:e4:a1:79:32:
fa:6d:07:2a:c6:1a:e4:70:9c:d8:ee:57:47:12:44:
9a:52:a6:bc:cf:cc:b0:4c:8e:e5:36:52:c8:75:09:
fe:48:9e:ee:b9:74:fb:03:e0:7c:38:5f:df:72:e2:
0b:ed:8e:40:14:4a:da:82:2e:df:96:20:7d:71:e6:
d0:aa:f5:e0:5b:d3:9f:4b:ab:e2:6d:2e:9d:b6:05:
9a:91:a7:e3:69:71:0e:be:83:6a:cd:63:30:eb:b9:
7a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:F1:1F:14:3F:6A:81:CD:93:E7:C5:9D:20:20:68:F6:CC:4B:7E
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e3131382e39322e302f32322d3234203d3e203533313731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.92.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:16:f8:12:09:ec:d9:15:36:33:e9:dc:31:c7:45:1c:88:15:
7d:49:3e:3c:f3:bb:08:f7:7a:cd:52:26:b8:7f:fc:41:26:7c:
29:6d:80:2f:df:33:7d:d3:4f:ee:4f:9a:43:9b:e9:c3:b9:1b:
e0:40:ec:f3:80:24:57:da:b3:82:f9:67:af:ec:5a:60:8a:a2:
65:59:b1:fe:61:53:72:24:95:5c:7c:0d:ad:d7:0b:34:0a:91:
0b:b7:dd:1c:03:e1:2e:bf:e4:16:1a:d7:f2:f5:04:0b:ff:7b:
ab:03:c2:58:b6:b7:9e:ef:c9:b2:81:f7:61:6e:50:ce:05:a9:
2f:76:95:fc:fb:3d:23:42:35:8a:c2:29:9b:2b:b1:bd:46:8f:
35:14:5d:5e:49:36:e3:94:5f:9f:a6:6b:b3:a7:bb:03:22:e9:
0b:8a:64:e8:19:94:ae:4d:13:4f:61:7b:0d:71:75:b7:e9:58:
e1:19:c9:ee:24:24:b2:a1:4a:5b:2c:a6:14:9b:76:e5:60:3b:
24:5b:ef:a0:68:a6:c2:79:34:bb:15:84:1f:3e:6d:60:67:a6:
d1:a9:35:3b:e8:a1:e5:ac:a6:40:32:33:d7:aa:d0:80:52:54:
8b:52:ad:97:86:ba:4d:c7:a4:93:b2:27:5b:ff:f9:b9:b3:87:
2a:09:11:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org