Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa
File: 3133382e3230342e39322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: R7uMFilfCCIRur/nC3hUuctxu5RqXY3v/E+Rw/bF0U4=
Subject key identifier: 0D:68:78:64:43:B3:1B:9D:5E:2E:39:9F:52:C7:78:1C:CE:D9:F7:CF
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 06106173702EDD585AD9692458FA7AA5D25C320A
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:46:00 +0000
ROA not before: Mon 01 Jul 2024 18:41:00 +0000
ROA not after: Mon 30 Jun 2025 18:46:00 +0000
asID: 28165
IP address blocks: 138.204.92.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:10:61:73:70:2e:dd:58:5a:d9:69:24:58:fa:7a:a5:d2:5c:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:41:00 2024 GMT
Not After : Jun 30 18:46:00 2025 GMT
Subject: CN=0D68786443B31B9D5E2E399F52C7781CCED9F7CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:22:96:e9:fe:9d:93:9a:e4:eb:2b:ef:9a:73:
09:11:67:fa:1a:60:28:c8:cb:70:d1:e3:0f:e0:d2:
a5:d1:1f:2c:0d:38:f8:5e:e1:76:e3:73:3d:4f:86:
29:d3:7c:36:95:99:60:d1:3d:c9:93:27:92:d5:c5:
4e:64:5e:b7:94:82:18:59:dc:16:71:fb:51:8b:26:
6c:d5:cb:31:b0:8a:47:ca:84:55:23:98:17:64:40:
03:1a:8e:00:79:9c:21:59:49:d3:1a:81:45:fb:85:
5c:3c:ba:87:17:f8:ed:3f:23:e9:77:d4:ff:56:30:
a1:8e:0b:ef:58:ea:0b:46:7f:2b:9f:87:f1:af:74:
1c:fb:e1:ce:ff:50:6b:c6:2e:97:40:fe:55:bd:f4:
d9:56:96:50:9a:62:85:13:e1:e1:60:05:0f:07:d5:
ee:d9:1d:2c:09:f6:67:06:66:6c:2c:6e:e5:4e:75:
1d:ae:e3:6d:df:0b:fd:a1:46:db:9e:33:52:d7:a6:
26:f2:8e:eb:91:81:2c:1b:9c:78:7f:55:77:2a:46:
e3:93:e8:0a:13:77:62:64:43:37:03:60:56:6d:39:
72:94:0c:4a:76:c7:4b:ba:0e:b5:bb:3e:06:a7:14:
35:4a:3c:4c:6c:57:04:fa:f4:c9:ce:5c:91:51:04:
c7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:68:78:64:43:B3:1B:9D:5E:2E:39:9F:52:C7:78:1C:CE:D9:F7:CF
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.92.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:4e:5a:ce:f7:75:7b:09:bc:e2:4e:9d:89:81:e4:55:81:98:
af:19:32:b3:34:ee:ef:ad:5f:fe:46:56:f4:76:94:40:82:bf:
ff:bb:22:09:81:91:f2:5f:7d:50:23:5c:22:fb:92:d4:24:fa:
1f:ab:3f:e6:72:d6:3d:3f:8f:4f:9f:16:2e:35:02:13:fe:6a:
7c:2e:cf:84:f7:0f:67:cd:4d:cf:eb:2c:e7:3a:41:9f:44:ea:
c7:dc:e1:95:eb:75:90:df:e3:fb:3f:3c:35:11:08:03:30:ca:
e2:9d:d0:aa:f3:44:f2:4d:0f:53:10:de:27:9a:82:03:4e:5d:
ce:e2:27:21:d1:7c:03:c0:ab:09:da:48:60:99:e3:54:c1:5a:
7d:8d:be:44:fe:92:dd:df:e0:9c:2b:48:04:dc:ac:5e:ef:fd:
1d:b6:8c:08:b0:76:9d:98:c9:b3:bc:e1:ce:56:1b:c6:d4:9b:
34:89:2d:ca:5a:5a:56:30:e4:c2:e2:71:83:cb:75:80:b9:d6:
3c:d3:04:f9:7a:f1:68:ef:d3:26:f4:bf:4b:c5:7f:03:37:bd:
1b:82:1c:d7:48:e0:5e:37:aa:55:22:03:41:2a:fa:07:71:e8:
db:33:eb:90:54:6d:af:a4:7f:65:73:8f:d8:36:62:4f:3e:2e:
f0:6c:42:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org