Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3234203d3e20323634343034.roa
File: 3133312e3136312e3232382e302f32322d3234203d3e20323634343034.roa (raw, json)
Hash identifier: XkBMGjByLKz7VwhSV6f8C+NgWb1OzPGZfVfYi9+Ws3Y=
Subject key identifier: 32:BD:3E:3D:E5:B8:2F:28:24:D2:10:A9:3D:F5:4F:9D:44:B5:C9:B3
Certificate issuer: /CN=AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A
Certificate serial: 584A697CF1F8835856A24A4AC68840BD8E92F479
Authority key identifier: AD:05:E2:28:B6:50:28:B8:C8:2D:F2:2A:9B:BC:CB:80:F9:F4:7C:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3234203d3e20323634343034.roa
Signing time: Mon 14 Aug 2023 21:06:13 +0000
ROA not before: Mon 14 Aug 2023 21:01:13 +0000
ROA not after: Mon 12 Aug 2024 21:06:13 +0000
asID: 264404
IP address blocks: 131.161.228.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:4a:69:7c:f1:f8:83:58:56:a2:4a:4a:c6:88:40:bd:8e:92:f4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A
Validity
Not Before: Aug 14 21:01:13 2023 GMT
Not After : Aug 12 21:06:13 2024 GMT
Subject: CN=32BD3E3DE5B82F2824D210A93DF54F9D44B5C9B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:99:5d:cd:42:d4:69:a8:9d:a8:01:b8:8d:6f:
e4:62:46:1b:ab:6e:2e:66:f1:0f:82:54:e9:d7:20:
ba:8c:3b:aa:73:15:ef:10:48:d5:af:c6:3a:8d:c0:
2c:96:44:11:17:59:22:82:72:27:4c:13:30:35:08:
f0:f0:93:d9:2c:4b:db:2b:d7:e9:42:8a:19:a6:e5:
21:d5:a0:2b:fb:13:1d:26:8d:48:5b:ab:76:63:06:
e5:86:4f:96:a5:9f:16:fc:f3:6a:4f:0f:ec:9e:3b:
cd:e6:ca:f8:dd:11:fe:e5:7c:1d:19:f2:8b:b4:17:
b3:5f:b8:ca:18:4b:55:3f:0f:80:7f:c4:b4:b3:6b:
97:7f:c1:96:e5:2d:49:98:2e:b9:3d:51:ee:43:db:
ca:63:d5:74:0b:01:78:a8:53:ce:8e:0d:c7:b9:77:
b4:60:28:34:cf:ba:ce:a6:06:79:33:95:bc:cd:97:
8a:55:35:2a:67:8e:37:1f:62:84:39:79:af:f1:1a:
ac:97:97:c8:c8:06:75:b7:c1:d1:a8:fd:cc:a6:cb:
11:31:6f:c7:fb:33:5c:b7:91:97:85:98:1e:12:a6:
65:c1:78:82:3b:3f:ae:bb:7d:26:4d:d5:f7:cd:6d:
a5:db:93:2a:40:43:e1:3a:3b:e2:f5:a8:2c:34:24:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:BD:3E:3D:E5:B8:2F:28:24:D2:10:A9:3D:F5:4F:9D:44:B5:C9:B3
X509v3 Authority Key Identifier:
keyid:AD:05:E2:28:B6:50:28:B8:C8:2D:F2:2A:9B:BC:CB:80:F9:F4:7C:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD05E228B65028B8C82DF22A9BBCCB80F9F47C3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Aa7hski1fSwkVpgDcjyZBPsA5NYgYGLn8W9skyC5w5iB/0/3133312e3136312e3232382e302f32322d3234203d3e20323634343034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.161.228.0/22
Signature Algorithm: sha256WithRSAEncryption
38:8e:6c:5a:d3:34:63:52:12:32:f6:8d:b8:9c:be:5e:55:16:
2b:25:d8:83:5c:22:4b:23:e4:63:f2:cd:cf:83:05:5a:21:33:
bd:5a:21:e5:47:79:c4:23:38:48:f4:f2:63:52:94:3a:38:7b:
03:c1:81:40:de:b4:fd:79:b9:c9:87:55:e4:7f:51:87:f4:f2:
34:2d:57:65:b0:ae:6e:97:c3:e2:f5:ac:8b:24:8e:f1:94:0d:
24:d7:a7:ff:b2:a7:14:c0:65:f0:55:08:af:b3:6b:0c:10:eb:
9c:7b:5b:68:48:4f:da:1b:76:c5:d6:0d:8d:14:1c:86:f7:44:
85:42:4f:01:47:ff:0c:d7:f4:e8:47:84:42:d4:38:e1:40:90:
5c:7f:7f:a5:18:cc:a8:6a:51:e3:f0:43:79:50:90:0c:22:d0:
2b:32:8c:65:b2:4e:51:1c:a2:14:f1:ac:e5:b5:3d:bc:a2:11:
af:81:72:d7:79:5b:12:94:c2:4d:a5:d2:1b:c2:37:dc:ff:46:
8f:5d:b1:d7:d5:8c:6a:29:f4:61:d0:e0:d4:09:4a:9d:79:2b:
f2:d1:56:53:dc:0a:d6:c3:0b:04:dc:5f:13:28:24:45:1f:a5:
56:5b:90:d3:84:0c:c0:19:4b:e3:a6:f8:56:55:96:50:d7:a1:
91:bd:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 19 02:54:36 2023 by rpki-client on console-ams.rpki-client.org