Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa
File: 3133382e3230342e39332e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: QxLu6uaIigQ2ft/COU6Ym8LPlwnP3UGFnW7o+8O4jyk=
Subject key identifier: 47:14:9B:93:E6:24:ED:5C:18:98:4D:BC:D3:20:B1:9B:D3:A5:57:98
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 50882377FE8E1A229C2393141D4B221666F98B47
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:32 +0000
ROA not before: Wed 31 Jul 2024 22:20:32 +0000
ROA not after: Wed 30 Jul 2025 22:25:32 +0000
asID: 28165
IP address blocks: 138.204.93.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:88:23:77:fe:8e:1a:22:9c:23:93:14:1d:4b:22:16:66:f9:8b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:32 2024 GMT
Not After : Jul 30 22:25:32 2025 GMT
Subject: CN=47149B93E624ED5C18984DBCD320B19BD3A55798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:13:8f:46:14:19:cc:6e:7d:08:74:a6:4f:
7d:cc:6e:1d:a0:6c:7a:f2:d8:91:ee:eb:c3:15:93:
b2:14:22:db:00:99:96:d0:75:9d:53:f3:d4:9c:67:
75:75:89:92:d6:05:fd:2a:30:ef:82:22:fa:ce:b1:
42:39:a1:14:a6:c0:39:12:fc:6b:00:a3:5e:e3:18:
a8:2e:1a:91:ed:05:3a:7f:c0:e6:45:cc:38:24:55:
bc:34:a2:05:5c:aa:d4:7a:09:29:1a:bc:1c:33:77:
c6:c7:c9:f2:f7:86:cb:77:2c:40:6a:fc:90:dc:42:
0a:cf:06:c1:15:59:5c:17:a4:2f:17:c6:d1:bb:77:
4c:93:f4:d7:eb:9a:8b:1c:66:21:c9:b0:47:62:e0:
e4:41:02:bd:bd:cd:19:74:7b:fe:d3:f0:fb:5d:d4:
9e:a7:c9:b2:34:1f:e6:44:11:da:79:9c:e8:5d:55:
12:d9:08:6c:14:c2:65:74:34:d8:14:da:68:2c:87:
03:54:0f:f4:ce:22:94:87:5c:4e:4a:92:65:d2:14:
9d:f7:3d:5c:50:f3:32:44:0e:6d:96:06:e1:31:e1:
1d:ea:dc:93:62:c2:26:d2:e5:99:bb:d0:74:39:8d:
b7:ed:22:e1:98:23:b5:e1:e9:6b:d0:92:12:0b:1c:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:14:9B:93:E6:24:ED:5C:18:98:4D:BC:D3:20:B1:9B:D3:A5:57:98
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39332e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.93.0/24
Signature Algorithm: sha256WithRSAEncryption
69:22:08:60:0b:00:b0:f6:0f:9a:e0:f3:9a:df:c3:61:1c:38:
61:8f:17:1b:03:e4:da:94:e6:71:32:48:bf:75:2c:06:68:b5:
2a:47:86:79:82:9c:7c:e9:77:3d:06:1e:0e:74:f8:7a:a0:0b:
8d:cd:6d:34:85:f5:8a:57:e1:c9:f9:97:ef:51:d7:cb:ec:32:
20:57:2b:17:69:9c:da:74:d1:2b:c3:b1:9c:d3:6e:df:58:d9:
d9:67:5b:bc:25:7a:63:37:21:53:52:51:bf:34:b1:0c:5a:75:
8e:33:31:18:e1:5a:8f:18:05:67:2b:37:cf:39:be:c4:46:3f:
39:1b:55:79:0d:cd:62:4d:8f:35:f9:bf:df:18:03:a4:99:63:
09:6f:16:4c:ac:b4:d0:48:94:5b:0f:0e:75:bb:da:a1:3f:d4:
c5:7f:7e:39:07:f2:0e:80:02:4e:70:91:4e:67:21:da:77:29:
41:24:cc:36:4f:be:ed:fc:dd:37:8b:d5:88:4b:9f:84:a6:ab:
25:05:28:dd:82:91:fd:c5:7b:bc:cf:8b:3e:df:08:2d:56:d1:
fd:0c:40:1b:6e:5e:4e:aa:b1:12:e2:91:04:48:96:61:f0:fa:
35:24:32:21:b0:55:84:34:79:a5:d0:8e:c6:62:31:81:82:d4:
09:01:cc:ec
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUIgjd/6OGiKcI5MUHUsiFmb5i0cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTU2Q0U2RUNGNDg2RDAwRjQwOTIyMkNDMTk1Mjc2ODFG
MDFCNTU1RDAeFw0yNDA3MzEyMjIwMzJaFw0yNTA3MzAyMjI1MzJaMDMxMTAvBgNV
BAMTKDQ3MTQ5QjkzRTYyNEVENUMxODk4NERCQ0QzMjBCMTlCRDNBNTU3OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ShOPRhQZzG59CHSmT33Mbh2g
bHry2JHu68MVk7IUItsAmZbQdZ1T89ScZ3V1iZLWBf0qMO+CIvrOsUI5oRSmwDkS
/GsAo17jGKguGpHtBTp/wOZFzDgkVbw0ogVcqtR6CSkavBwzd8bHyfL3hst3LEBq
/JDcQgrPBsEVWVwXpC8XxtG7d0yT9NfrmoscZiHJsEdi4ORBAr29zRl0e/7T8Ptd
1J6nybI0H+ZEEdp5nOhdVRLZCGwUwmV0NNgU2mgshwNUD/TOIpSHXE5KkmXSFJ33
PVxQ8zJEDm2WBuEx4R3q3JNiwibS5Zm70HQ5jbftIuGYI7Xh6WvQkhILHH7BAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURxSbk+Yk7VwYmE280yCxm9OlV5gwHwYDVR0j
BBgwFoAUpWzm7PSG0A9AkiLMGVJ2gfAbVV0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDJNUlZWOFd3SkVEYUROcFR6bTlqckg2N050dDNIQ0xHM1Yyd1dmRXpr
b0QvMi9BNTZDRTZFQ0Y0ODZEMDBGNDA5MjIyQ0MxOTUyNzY4MUYwMUI1NTVELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1NkNFNkVDRjQ4NkQwMEY0
MDkyMjJDQzE5NTI3NjgxRjAxQjU1NUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QyTVJWVjhXd0pFRGFETnBUem05anJINjdOdHQzSENMRzNWMndXZkV6a29ELzIv
MzEzMzM4MmUzMjMwMzQyZTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM4
MzEzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAisxdMA0GCSqGSIb3DQEBCwUAA4IBAQBpIghgCwCw
9g+a4POa38NhHDhhjxcbA+TalOZxMki/dSwGaLUqR4Z5gpx86Xc9Bh4OdPh6oAuN
zW00hfWKV+HJ+ZfvUdfL7DIgVysXaZzadNErw7Gc027fWNnZZ1u8JXpjNyFTUlG/
NLEMWnWOMzEY4VqPGAVnKzfPOb7ERj85G1V5Dc1iTY81+b/fGAOkmWMJbxZMrLTQ
SJRbDw51u9qhP9TFf345B/IOgAJOcJFOZyHadylBJMw2T77t/N03i9WIS5+Epqsl
BSjdgpH9xXu8z4s+3wgtVtH9DEAbbl5OqrES4pEESJZh8Po1JDIhsFWENHml0I7G
YjGBgtQJAczs
-----END CERTIFICATE-----
Generated at Thu Oct 31 02:09:56 2024 by rpki-client on console-fra.rpki-client.org