Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa
File: 3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa (raw, json)
Hash identifier: mJprMLRbn5tm2x82MpRj/TNuH8dOzz7VMBM3ss2wDtc=
Subject key identifier: DA:48:FB:A0:CA:F4:16:BB:5E:DA:60:89:0A:6B:2E:54:D3:58:6C:22
Certificate issuer: /CN=DD435A9764327F6D37555BA0F1795CEF97B6A225
Certificate serial: 1C1298D50FDDCFF005BE91FB16528E589E2F1EB4
Authority key identifier: DD:43:5A:97:64:32:7F:6D:37:55:5B:A0:F1:79:5C:EF:97:B6:A2:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD435A9764327F6D37555BA0F1795CEF97B6A225.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa
Signing time: Tue 20 Aug 2024 20:52:23 +0000
ROA not before: Tue 20 Aug 2024 20:47:23 +0000
ROA not after: Tue 19 Aug 2025 20:52:23 +0000
asID: 270870
IP address blocks: 138.59.152.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:12:98:d5:0f:dd:cf:f0:05:be:91:fb:16:52:8e:58:9e:2f:1e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DD435A9764327F6D37555BA0F1795CEF97B6A225
Validity
Not Before: Aug 20 20:47:23 2024 GMT
Not After : Aug 19 20:52:23 2025 GMT
Subject: CN=DA48FBA0CAF416BB5EDA60890A6B2E54D3586C22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:f2:40:4c:99:5d:21:b7:ff:9f:03:87:d6:
92:2a:e7:56:15:5e:e7:d4:6b:a5:3a:58:57:f1:e3:
89:13:ac:53:a8:a3:6b:90:b6:18:97:23:12:cb:c8:
2c:c7:5c:64:49:a5:79:86:ee:59:34:b9:b1:14:97:
c1:23:7a:78:46:48:61:e3:f6:91:d8:43:58:a7:bd:
cf:2e:01:93:4b:66:0a:ab:f2:dc:fb:6b:89:85:3f:
af:c0:87:23:9c:93:e2:96:dc:cd:46:35:2c:10:c8:
7a:09:f8:da:22:95:10:00:59:f2:1f:42:d1:60:74:
be:d6:fc:b3:23:20:66:3a:db:bd:3a:28:82:41:55:
39:94:ea:86:28:31:fe:7a:2c:f0:77:21:f9:fe:a3:
bf:f3:b3:cd:d5:31:7a:b1:3a:e5:c6:9f:57:69:0f:
19:9c:23:2d:cf:0e:bd:fc:59:51:7e:aa:5f:6a:05:
1c:78:c1:b8:69:ca:f0:4c:2a:54:8a:27:0e:75:b1:
14:be:8f:79:8a:52:97:4a:b1:5a:1d:a4:8c:b5:e9:
46:d7:b5:fc:6d:7a:c8:af:ab:d0:16:02:86:28:4b:
f0:4d:2b:4f:61:34:49:d2:54:f4:2e:72:3e:0f:b3:
c1:2b:1a:bb:a6:65:a6:fe:de:b5:ba:5a:a8:18:91:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:FB:A0:CA:F4:16:BB:5E:DA:60:89:0A:6B:2E:54:D3:58:6C:22
X509v3 Authority Key Identifier:
keyid:DD:43:5A:97:64:32:7F:6D:37:55:5B:A0:F1:79:5C:EF:97:B6:A2:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/DD435A9764327F6D37555BA0F1795CEF97B6A225.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD435A9764327F6D37555BA0F1795CEF97B6A225.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7VxR6cXBC13PZMVwSRRgpFaDNNufBiKaWHBGcMAKBw/0/3133382e35392e3135322e302f32332d3234203d3e20323730383730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.152.0/23
Signature Algorithm: sha256WithRSAEncryption
50:21:67:b3:22:df:ef:bd:72:4a:63:cf:fc:fd:be:13:d2:e1:
21:e6:2e:eb:cc:d1:46:35:7d:57:d9:02:13:77:b7:45:f3:c8:
b2:91:41:f7:d5:e5:4e:29:21:eb:98:18:d3:bc:df:e1:2f:e7:
08:ee:91:41:33:5b:32:0f:92:80:b7:77:45:d4:93:22:cf:c9:
4e:d4:7f:8e:f3:25:40:94:87:99:d2:81:20:98:02:91:01:63:
a1:11:b9:08:f8:c5:8c:55:34:dc:5c:67:1c:5e:65:50:ac:d2:
de:98:c6:ea:ed:54:fc:40:61:62:99:55:a4:45:27:00:f3:48:
72:51:10:94:ca:3f:d7:82:08:8c:13:f1:94:5f:12:48:57:43:
40:18:c4:16:d4:3e:d2:10:c2:4a:c3:51:2a:2f:7f:17:2d:4c:
c4:dc:33:e3:6b:f3:61:6f:e6:a9:b2:a0:e0:5f:7c:01:b1:d0:
73:cc:51:bc:4f:d3:1e:7f:c8:5a:be:c7:d3:11:c9:6c:b7:e8:
da:de:dc:9c:89:75:ef:2b:e3:cc:db:82:c3:b4:27:ea:32:3c:
a9:43:ee:b5:e4:45:07:f1:8e:42:9c:a3:09:73:e0:a5:3d:93:
0b:ab:e3:df:7b:2b:89:c9:4a:6c:dc:31:22:b2:de:1e:7e:f3:
ba:fa:28:e1
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUHBKY1Q/dz/AFvpH7FlKOWJ4vHrQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ0MzVBOTc2NDMyN0Y2RDM3NTU1QkEwRjE3OTVDRUY5
N0I2QTIyNTAeFw0yNDA4MjAyMDQ3MjNaFw0yNTA4MTkyMDUyMjNaMDMxMTAvBgNV
BAMTKERBNDhGQkEwQ0FGNDE2QkI1RURBNjA4OTBBNkIyRTU0RDM1ODZDMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqKvJATJldIbf/nwOH1pIq51YV
XufUa6U6WFfx44kTrFOoo2uQthiXIxLLyCzHXGRJpXmG7lk0ubEUl8EjenhGSGHj
9pHYQ1invc8uAZNLZgqr8tz7a4mFP6/AhyOck+KW3M1GNSwQyHoJ+NoilRAAWfIf
QtFgdL7W/LMjIGY62706KIJBVTmU6oYoMf56LPB3Ifn+o7/zs83VMXqxOuXGn1dp
DxmcIy3PDr38WVF+ql9qBRx4wbhpyvBMKlSKJw51sRS+j3mKUpdKsVodpIy16UbX
tfxtesivq9AWAoYoS/BNK09hNEnSVPQucj4Ps8ErGrumZab+3rW6WqgYkYD9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU2kj7oMr0Frte2mCJCmsuVNNYbCIwHwYDVR0j
BBgwFoAU3UNal2Qyf203VVug8Xlc75e2oiUwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9DN1Z4UjZjWEJDMTNQWk1Wd1NSUmdwRmFETk51ZkJpS2FXSEJHY01BS0J3
LzAvREQ0MzVBOTc2NDMyN0Y2RDM3NTU1QkEwRjE3OTVDRUY5N0I2QTIyNS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9ERDQzNUE5NzY0MzI3RjZEMzc1
NTVCQTBGMTc5NUNFRjk3QjZBMjI1LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9D
N1Z4UjZjWEJDMTNQWk1Wd1NSUmdwRmFETk51ZkJpS2FXSEJHY01BS0J3LzAvMzEz
MzM4MmUzNTM5MmUzMTM1MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM3MzAz
ODM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAGKO5gwDQYJKoZIhvcNAQELBQADggEBAFAhZ7Mi3++9
ckpjz/z9vhPS4SHmLuvM0UY1fVfZAhN3t0XzyLKRQffV5U4pIeuYGNO83+Ev5wju
kUEzWzIPkoC3d0XUkyLPyU7Uf47zJUCUh5nSgSCYApEBY6ERuQj4xYxVNNxcZxxe
ZVCs0t6YxurtVPxAYWKZVaRFJwDzSHJREJTKP9eCCIwT8ZRfEkhXQ0AYxBbUPtIQ
wkrDUSovfxctTMTcM+Nr82Fv5qmyoOBffAGx0HPMUbxP0x5/yFq+x9MRyWy36Nre
3JyJde8r48zbgsO0J+oyPKlD7rXkRQfxjkKcowlz4KU9kwur4997K4nJSmzcMSKy
3h5+87r6KOE=
-----END CERTIFICATE-----
Generated at Wed Oct 30 10:37:43 2024 by rpki-client on console-ams.rpki-client.org