Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa
File: 3133382e3230342e39322e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: EUedU004WvUOtO++Rf6akmPJH2roHcJKp+Wax5Fi7Rc=
Subject key identifier: 66:36:8E:F2:CE:2C:D2:86:91:87:FB:1B:3D:BB:DB:B3:9C:91:28:5D
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 7511C417866D51D414877A963F573EB9DA41B180
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:17 +0000
ROA not before: Wed 31 Jul 2024 22:20:17 +0000
ROA not after: Wed 30 Jul 2025 22:25:17 +0000
asID: 28165
IP address blocks: 138.204.92.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:11:c4:17:86:6d:51:d4:14:87:7a:96:3f:57:3e:b9:da:41:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:17 2024 GMT
Not After : Jul 30 22:25:17 2025 GMT
Subject: CN=66368EF2CE2CD2869187FB1B3DBBDBB39C91285D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:38:0c:b2:99:65:bd:a9:f6:8f:bc:9e:3f:
1f:20:fb:ba:82:d2:85:10:e0:fd:d0:82:01:43:5e:
f4:24:81:1a:4f:0d:6e:0d:20:fb:f0:c2:16:2d:9f:
b7:15:b1:d8:39:b0:6b:e1:1b:fc:38:f0:bd:cd:95:
5e:a1:06:82:37:e7:d1:6d:c5:f9:98:5f:07:3a:dc:
8a:63:e0:4c:f5:cc:05:4f:40:e8:d9:4f:e9:ba:11:
ab:93:af:d3:55:45:b9:32:0b:b4:ba:56:8a:7c:80:
03:86:d0:3c:ef:17:3a:d9:66:8d:8c:e1:e0:3c:d7:
c9:e2:d4:c0:72:79:cb:02:67:fb:71:7d:44:87:42:
76:de:3f:a1:00:dd:d0:fe:2e:37:6f:50:26:92:fa:
dd:d3:cc:d4:f9:fe:fc:7d:d7:6d:4c:e8:9b:7e:92:
3f:a4:c9:c3:c2:9f:dc:e2:9f:82:40:d2:7f:3c:83:
2e:8e:5e:e1:87:53:ce:64:63:fc:11:d8:a2:6f:1c:
0c:ea:e4:9f:c5:34:81:db:91:a8:48:a2:67:9d:79:
b1:95:f1:0a:72:ca:e4:fe:57:a9:7e:9b:13:b3:05:
ef:1c:50:94:44:df:fa:fc:6d:a1:32:a6:dd:da:8d:
d8:86:52:62:c0:06:75:c5:15:76:f4:0b:60:2d:16:
90:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:8E:F2:CE:2C:D2:86:91:87:FB:1B:3D:BB:DB:B3:9C:91:28:5D
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39322e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.92.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:5b:a9:85:46:b5:a0:1d:16:ff:e1:67:31:83:91:9b:1e:4a:
c7:d3:49:49:29:8e:4e:b7:ac:69:d1:ad:1a:3e:a2:7a:ba:2b:
2a:c6:b7:05:17:6d:c7:b3:f4:23:5a:4f:e1:90:c7:93:98:0e:
34:8b:bc:3e:8d:7a:c2:55:8b:79:ac:55:00:87:8c:aa:31:c4:
54:f7:b0:3c:cd:8f:b8:19:1d:57:60:13:ee:4b:71:c4:29:72:
47:88:c3:98:dc:1b:91:1d:7b:95:98:ec:4d:a9:13:eb:1c:ac:
95:58:73:c2:92:1f:68:10:5e:3e:b7:2a:e3:2c:3a:2c:c3:3f:
b2:8d:1f:f1:cc:ec:b4:b4:6d:6d:3b:09:5d:a5:b0:95:79:8d:
d5:6b:d0:1f:9f:5f:48:f0:11:7b:71:47:81:56:eb:17:61:89:
0c:78:6d:55:cb:30:c6:f3:e2:c4:d3:a6:c3:1b:33:ea:39:5a:
9f:85:bc:ed:9f:13:9c:83:9c:9a:3f:1d:31:ec:2d:ea:e0:50:
fa:25:d1:25:b6:44:19:cd:f1:c1:2e:78:46:b3:d1:38:9d:4f:
53:44:73:6a:18:d4:fb:36:00:f7:a1:10:14:c8:24:87:b9:6e:
66:f6:d4:f9:4a:73:c7:9b:0b:82:e8:78:d8:3a:10:5a:35:e1:
4a:bc:1d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org