Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa
File: 3133382e3230342e39332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: XTXrAAxtS0dMA8lsxyHKInEfruEqyhrTBwTppC+6l+U=
Subject key identifier: 88:B8:04:3D:05:C1:62:12:2A:E3:81:D2:DB:F1:D0:E4:6A:12:A0:D6
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 0AD1C735270EF8DFE19DAF547F7F33BA3EA05758
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:46:15 +0000
ROA not before: Mon 01 Jul 2024 18:41:15 +0000
ROA not after: Mon 30 Jun 2025 18:46:15 +0000
asID: 28165
IP address blocks: 138.204.93.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:d1:c7:35:27:0e:f8:df:e1:9d:af:54:7f:7f:33:ba:3e:a0:57:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:41:15 2024 GMT
Not After : Jun 30 18:46:15 2025 GMT
Subject: CN=88B8043D05C162122AE381D2DBF1D0E46A12A0D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:a8:5a:70:f4:07:45:40:ae:30:86:0b:cd:
00:e8:25:19:80:ab:21:5a:51:97:fb:c3:c1:85:ee:
93:b8:89:b0:be:0f:bb:d0:a8:13:89:57:bd:d3:4a:
7f:5c:66:3f:95:c4:ec:75:a1:96:b0:2f:e3:c4:cb:
6b:97:64:3a:10:87:ea:49:70:25:0b:60:f6:7d:6f:
c6:6d:44:84:f4:43:22:20:03:97:82:bd:46:ca:c5:
23:85:06:e9:69:71:2a:d1:28:e6:cd:12:ed:04:25:
ca:9b:28:78:3c:61:4c:e2:8a:d1:5e:04:c1:ee:1a:
e5:58:fa:13:3f:d9:54:5e:58:85:7e:db:c0:19:29:
22:cb:c9:8e:54:af:57:51:5b:20:23:74:e9:d5:e2:
c2:5f:c6:14:8e:09:38:46:86:4d:ae:99:f4:57:42:
60:53:9a:4c:75:38:97:33:38:78:98:e4:cc:f1:b6:
b0:f0:5f:14:53:fa:4b:75:d5:35:9a:dc:fb:fb:ae:
7d:76:ec:79:ee:73:2d:59:22:da:49:ee:57:6b:f6:
62:e0:93:37:c1:43:e7:30:c2:7a:be:19:72:8e:23:
d1:ed:2c:c0:53:b4:5b:04:0f:ab:c0:be:9c:58:00:
78:0e:ad:62:96:48:86:9d:39:61:52:4d:2d:05:2f:
50:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B8:04:3D:05:C1:62:12:2A:E3:81:D2:DB:F1:D0:E4:6A:12:A0:D6
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:68:78:d0:9f:75:b1:7d:66:8f:bb:4f:60:a8:07:af:eb:ba:
19:44:f3:6b:4b:c5:dd:21:d4:86:9f:6d:51:d4:00:c0:61:bc:
c7:1f:d1:2c:35:24:31:15:cd:f9:bb:58:87:7a:c7:d7:cf:d9:
a1:22:16:a9:04:41:7e:ec:ca:e8:f3:67:3e:97:ba:95:9d:c1:
e5:2f:d0:dd:ca:24:71:2a:ab:3a:dd:a5:af:b1:30:f0:77:6a:
b5:d3:0a:c2:8b:4d:5e:e2:ab:8d:f0:ec:cb:80:42:f6:35:ad:
98:06:0a:5c:61:55:8b:36:f1:31:42:82:3d:b6:25:ae:fe:aa:
a5:25:48:69:60:b3:fc:4f:a2:ea:ed:be:00:2b:f2:79:5f:c2:
b1:be:7f:90:fe:6e:c3:4a:d9:45:2e:0e:4e:44:16:d2:5c:a7:
6d:6f:b7:c9:a6:13:3e:5d:65:88:84:33:63:33:b1:3f:09:b7:
c1:d3:2f:3d:23:f0:a4:6a:84:77:e1:32:cc:9d:82:e7:23:6c:
0a:4e:06:d5:3c:dd:a8:85:e1:29:9b:64:24:7d:4e:c5:e5:de:
23:8f:01:b2:0d:02:45:c3:67:8d:dc:32:03:ed:60:04:44:2f:
3a:bc:5d:78:ca:c7:8e:d0:0a:9a:66:b1:a8:b4:5c:fe:05:b0:
36:a4:24:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:45:47 2024 by rpki-client on console-ams.rpki-client.org