Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa
File: 3133382e3230342e39322e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier: UqtCQN29l4mbZZK9JD+572A22MptGyRppUT3dSZH6Kg=
Subject key identifier: 20:EF:67:FA:CF:D3:8E:6C:3B:53:75:DE:F1:C6:E7:7A:CE:7B:D1:85
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 6DE6CBF398BCF7F8509A8EC5F0018F32220BD95C
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:45:58 +0000
ROA not before: Mon 01 Jul 2024 18:40:58 +0000
ROA not after: Mon 30 Jun 2025 18:45:58 +0000
asID: 28165
IP address blocks: 138.204.92.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:e6:cb:f3:98:bc:f7:f8:50:9a:8e:c5:f0:01:8f:32:22:0b:d9:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:40:58 2024 GMT
Not After : Jun 30 18:45:58 2025 GMT
Subject: CN=20EF67FACFD38E6C3B5375DEF1C6E77ACE7BD185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a1:dc:53:16:21:2d:da:72:39:73:d4:23:5b:
ea:6d:8b:bf:aa:4c:7c:74:67:c3:6d:d5:29:54:38:
52:68:c0:1f:f6:7c:ea:e6:01:d5:db:da:d7:a1:e0:
fe:f3:a6:a5:59:0f:23:0f:48:62:b0:44:b2:63:c5:
fb:60:98:ec:dc:d4:ad:fb:d4:a9:5d:6a:c8:99:da:
f8:fa:ae:c2:49:ea:7c:68:e8:e8:e4:5b:10:5e:64:
d5:bb:7f:4f:38:26:9c:2f:85:1a:64:12:8f:f6:51:
aa:c2:1f:8f:ee:31:31:a7:e2:5f:ad:f1:f6:ac:64:
ae:d9:83:a8:70:e5:01:2f:c6:d2:1e:8b:cc:4e:db:
dd:48:14:84:99:e0:f2:67:3d:55:a8:23:c4:19:d6:
3b:4a:9d:16:61:4b:d9:e5:b6:ce:bf:33:37:c3:c3:
5e:3f:2c:6e:44:22:cf:b6:5c:17:78:02:fa:2b:6e:
36:74:e6:a8:d1:1f:5c:64:fc:1c:5b:42:8b:10:99:
5b:9c:8b:ed:4c:74:38:6d:5a:b4:16:9c:8a:57:40:
17:1d:c3:3a:cc:b2:24:c0:37:51:85:bb:20:cc:ad:
b1:6a:c1:d6:6a:a8:52:7a:ef:6c:77:85:4d:e3:f8:
dd:07:0b:71:b5:dc:b6:4c:69:0f:de:34:a8:c2:eb:
1a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EF:67:FA:CF:D3:8E:6C:3B:53:75:DE:F1:C6:E7:7A:CE:7B:D1:85
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32332d3233203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.92.0/23
Signature Algorithm: sha256WithRSAEncryption
80:a1:e2:95:03:03:b9:4e:ff:2f:58:38:ca:6f:6b:ce:4f:b2:
04:7b:ee:25:a9:ce:d8:3b:ec:07:cf:bd:2d:06:63:95:dc:32:
94:b8:fb:94:3d:eb:41:30:56:30:4a:4b:d0:10:8a:70:c1:6b:
65:88:b9:cc:f5:55:5c:f2:b8:2e:f9:6c:8a:d6:28:d9:77:38:
10:71:9e:9a:23:25:fc:50:62:35:99:9c:19:96:20:c6:78:55:
72:81:50:ff:42:71:ac:35:91:a2:cf:91:2a:d5:30:33:5d:57:
e2:a1:7e:1b:e8:90:74:48:be:d0:99:67:ca:f3:ca:0c:9f:64:
58:81:61:22:12:e7:7a:0b:0d:99:ff:73:f2:a8:0c:8b:5c:0f:
af:ec:8a:ca:23:5d:52:c9:30:cf:1c:b7:76:1c:87:a4:e4:5a:
83:da:f7:5f:4d:13:45:1e:99:8d:45:1e:ce:48:7a:4e:61:2e:
02:28:eb:f9:1f:50:2d:59:c2:33:fa:25:4f:93:5d:16:ca:34:
2d:1f:15:98:4c:1a:bd:f9:1c:7b:7d:a9:42:02:71:6b:b8:f4:
2c:54:b2:98:61:c5:26:e1:4f:f3:7b:31:ae:0d:44:7e:9a:66:
4c:85:a4:de:4a:f6:fe:af:52:da:60:6c:14:ad:51:20:09:e1:
98:b1:0f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org