Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa
File: 3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa (raw, json)
Hash identifier: o3pxrZNfBopjpy1a4NlaZtBHosZh4PCO0ZVBshxZxF8=
Subject key identifier: BF:63:62:EF:9C:35:27:1A:2D:9D:97:AE:5A:28:73:E7:3C:A2:0F:38
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 4364E9E3A59BD1466F68A9E0492BF90B71D6695A
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa
Signing time: Thu 31 Oct 2024 17:24:20 +0000
ROA not before: Thu 31 Oct 2024 17:19:20 +0000
ROA not after: Thu 30 Oct 2025 17:24:20 +0000
asID: 262272
IP address blocks: 138.36.180.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:64:e9:e3:a5:9b:d1:46:6f:68:a9:e0:49:2b:f9:0b:71:d6:69:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:19:20 2024 GMT
Not After : Oct 30 17:24:20 2025 GMT
Subject: CN=BF6362EF9C35271A2D9D97AE5A2873E73CA20F38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0b:35:4d:41:17:7c:98:c3:19:cf:50:7d:9a:
6b:bb:22:1c:56:e3:03:8d:37:e2:20:5d:11:75:03:
70:70:6c:32:71:0b:fb:c8:e5:23:5f:19:9a:e3:84:
53:08:45:f8:26:aa:3a:09:e2:75:a3:35:70:ad:69:
20:e8:0a:20:52:d0:9b:63:6b:6c:ab:e1:fa:d1:f8:
95:25:d0:69:b7:02:0e:ef:f0:e2:f5:af:d5:5b:a5:
23:7a:15:1d:47:c1:4a:d2:0c:c7:2b:68:5d:01:3f:
d7:b3:bc:70:1d:0b:cd:7a:64:a0:7e:d3:35:44:1e:
f5:49:ee:0b:a3:4c:36:6c:b9:16:6a:a6:10:cc:02:
ee:a6:49:33:9e:49:9e:82:14:40:bb:62:e7:61:fe:
42:c1:f9:f6:c3:4e:2f:f1:f2:b5:b6:a0:00:80:b9:
9c:43:f7:0c:50:aa:05:a6:41:98:bc:e6:51:58:28:
63:86:7e:ea:a9:03:da:6e:25:be:bb:29:43:2f:0d:
93:9f:cf:2f:b3:9d:9a:40:4c:f2:3e:ec:2c:a7:96:
c3:7e:6f:12:f9:d4:6e:92:d9:3c:94:0e:e6:4e:2e:
22:15:95:25:e4:b7:99:c8:94:9b:86:70:f4:29:b1:
4a:57:d8:33:1c:90:bd:d8:25:42:97:47:63:10:4f:
b2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:63:62:EF:9C:35:27:1A:2D:9D:97:AE:5A:28:73:E7:3C:A2:0F:38
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/3133382e33362e3138302e302f32322d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.36.180.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:28:f8:9d:a3:0c:fb:f1:87:bd:70:36:b8:d9:b7:bf:b8:48:
38:82:9b:70:a1:61:6d:cf:79:2f:32:32:84:da:d6:0b:a8:17:
b0:34:53:30:c4:18:82:2b:f0:f2:0b:aa:84:2d:69:f0:35:dd:
26:6d:1f:cb:d3:d6:69:cb:53:7e:bb:50:35:b8:9f:35:64:4f:
50:f6:c2:c8:b5:4b:4b:c7:0d:35:ec:6c:48:3d:f5:16:4a:f4:
04:db:09:22:c6:87:dd:09:60:52:5a:5f:c9:4e:da:51:ee:f6:
cd:91:c3:04:b3:cd:e9:7d:2e:d6:d4:8e:4f:6c:05:55:6a:e5:
e1:6f:15:37:43:f8:f4:7c:fc:ed:03:11:2b:dd:df:a5:57:d7:
20:3e:a8:dc:44:0a:16:c1:59:5f:12:37:1b:d6:bf:61:de:6f:
eb:8e:de:13:50:2e:2d:c5:d9:54:1c:b8:47:ef:41:8f:13:9d:
e3:43:2f:b1:0b:aa:eb:a2:1f:0d:d3:f1:66:68:ce:5f:8e:9a:
c2:bf:b3:56:68:7e:ea:e9:df:e1:3c:34:d0:ed:5c:47:fd:3f:
5e:73:30:7a:d2:b2:eb:bf:08:c4:0f:f9:4a:b5:ea:f0:c1:81:
c3:48:d0:36:30:8a:ee:7b:75:05:76:26:73:5a:43:19:d5:23:
f9:22:be:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:29:10 2024 by rpki-client on console-fra.rpki-client.org