Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa
File: 3133382e35392e3135302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: e7k4clRDW+dW3cKG+B7GxK5b3TVWDg6CdOxLHjAHjXs=
Subject key identifier: 86:D5:54:BF:D0:21:B1:A3:5D:E7:FC:A8:11:33:43:2D:E3:88:2A:61
Certificate issuer: /CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Certificate serial: 32CDFE939DD11DDEB2A9BE214C979373306DF5D5
Authority key identifier: 89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa
Signing time: Mon 01 Jul 2024 18:45:52 +0000
ROA not before: Mon 01 Jul 2024 18:40:52 +0000
ROA not after: Mon 30 Jun 2025 18:45:52 +0000
asID: 28165
IP address blocks: 138.59.150.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cd:fe:93:9d:d1:1d:de:b2:a9:be:21:4c:97:93:73:30:6d:f5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89EF2DA30C1DF0F2B786B1EC264091574F54E272
Validity
Not Before: Jul 1 18:40:52 2024 GMT
Not After : Jun 30 18:45:52 2025 GMT
Subject: CN=86D554BFD021B1A35DE7FCA81133432DE3882A61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ad:0f:02:1e:ca:f3:de:39:f0:05:56:5b:76:
c3:2e:43:95:90:4d:a8:36:24:fe:34:b6:1d:25:fd:
67:01:77:0b:50:dd:20:e2:46:c5:0f:3f:b3:a5:93:
b6:f9:7f:1c:d5:d6:d6:56:fd:04:bc:38:bd:8f:9d:
26:a3:8a:7f:a0:97:fb:1c:ef:9f:5b:b8:88:45:d8:
d1:eb:58:ce:93:36:02:69:64:32:53:13:6d:e4:6d:
8d:63:33:40:6a:76:57:ff:02:f0:c9:13:5c:4c:d4:
da:c4:a1:87:85:28:d7:05:fa:f0:92:90:1c:bc:a4:
e4:bd:09:ec:f1:0b:ed:33:14:25:7d:ab:d3:f3:41:
7e:53:1e:cb:bb:7e:b2:ea:9f:12:be:e3:a2:b8:53:
bf:d5:78:95:cc:67:c2:d2:29:45:80:49:2b:cd:56:
b3:1f:88:de:bd:98:d8:cd:1c:63:87:ef:da:24:8e:
6d:59:4b:4c:bc:0b:ff:11:50:c7:49:76:9a:11:ad:
f3:e8:f7:22:0f:28:48:b5:7a:cc:10:44:58:38:6f:
9e:40:a8:71:f4:bf:3a:0c:56:e3:85:24:58:7e:92:
d1:19:4e:5e:ec:f6:b7:5b:5c:7a:2a:f7:42:03:5a:
5c:63:71:1e:81:b3:4a:08:af:b4:f8:8f:fd:e2:be:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D5:54:BF:D0:21:B1:A3:5D:E7:FC:A8:11:33:43:2D:E3:88:2A:61
X509v3 Authority Key Identifier:
keyid:89:EF:2D:A3:0C:1D:F0:F2:B7:86:B1:EC:26:40:91:57:4F:54:E2:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/89EF2DA30C1DF0F2B786B1EC264091574F54E272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89EF2DA30C1DF0F2B786B1EC264091574F54E272.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/0/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.150.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d2:16:4b:e5:64:99:b2:70:e9:bc:11:16:6a:bd:48:89:e5:
d7:ca:42:c0:e3:ab:64:ef:c7:1b:11:e2:cf:69:f2:a1:68:f3:
68:0b:e4:20:bb:db:25:7a:87:03:49:8b:e4:ca:21:5f:0c:ce:
94:f3:cb:b1:fb:93:d5:41:2d:5c:3f:e5:e9:d3:3a:57:e8:8e:
99:57:9e:ab:58:37:ae:83:6e:e3:51:53:c1:06:a6:b6:e1:93:
12:5c:3c:55:b3:08:a4:7e:85:7b:7b:90:34:63:fd:4b:d1:de:
ae:37:32:69:6a:b7:a6:1c:7d:e4:c3:1f:96:2f:b0:00:06:e0:
68:51:6b:86:1f:6e:d5:f5:e4:c1:85:77:a1:db:b6:41:eb:35:
36:cb:26:ff:29:03:76:9b:e8:6b:ea:04:56:26:10:ca:21:10:
0d:f0:c2:f9:d2:9e:3b:53:a5:21:f7:cd:31:8e:90:45:48:b4:
94:f8:c5:9e:3a:19:85:84:33:3b:be:23:c5:21:52:7a:7f:38:
1d:b7:5e:30:e3:76:f3:c5:dd:ed:13:5c:4c:6c:49:53:ed:47:
f5:01:c8:dd:58:7e:98:6c:c0:b0:3c:66:1d:22:2f:4e:32:5a:
13:c6:2b:58:9a:05:f5:75:8e:24:19:60:77:ce:67:13:27:fd:
e9:9d:87:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 12:28:13 2024 by rpki-client on console-fra.rpki-client.org