Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39342e302f32332d3233203d3e203238313635.roa
File: 3133382e3230342e39342e302f32332d3233203d3e203238313635.roa (raw, json)
Hash identifier: ns/48TQrZnZLKuoZP1LhTK9b5owPlJS3FTjJda4Xhas=
Subject key identifier: 69:D2:E3:B5:CE:CB:D4:8B:FD:C6:DA:5E:E4:63:82:E1:87:24:85:D4
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 17B2966A44853DC9FD37F7A391B65680C9AB7716
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39342e302f32332d3233203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:45 +0000
ROA not before: Wed 31 Jul 2024 22:20:45 +0000
ROA not after: Wed 30 Jul 2025 22:25:45 +0000
asID: 28165
IP address blocks: 138.204.94.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:b2:96:6a:44:85:3d:c9:fd:37:f7:a3:91:b6:56:80:c9:ab:77:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:45 2024 GMT
Not After : Jul 30 22:25:45 2025 GMT
Subject: CN=69D2E3B5CECBD48BFDC6DA5EE46382E1872485D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:9d:5c:11:1d:08:05:99:de:07:8a:23:d0:
ea:2b:3e:0d:69:9d:d3:35:a3:9c:10:e3:fc:a0:a0:
eb:f8:f2:c1:50:a0:c5:43:26:84:be:b6:e2:5f:96:
26:30:76:51:cc:3e:bd:a5:68:7a:1c:a5:cb:de:9a:
8d:52:02:cb:6d:38:92:f4:4d:10:0f:e2:8d:a7:a1:
1c:44:a2:6d:01:4d:2a:1f:3b:ea:ad:9b:a2:86:9a:
bc:d5:a8:2e:e9:b8:19:fc:41:f1:03:5c:9a:a8:3c:
0a:a9:e5:2d:2d:d0:6c:69:84:e7:e4:2c:0c:02:5c:
71:7f:61:32:02:f9:c0:bc:07:45:4b:26:4a:95:4d:
32:ba:05:71:b7:ce:a8:85:13:d8:43:f4:65:e4:85:
1e:d3:1d:2e:d4:89:94:5f:b0:b1:04:ac:af:0a:21:
18:a7:91:2b:83:a9:5c:51:60:c2:f4:8c:33:fa:64:
bb:02:5f:5f:6e:07:ce:3b:b9:0f:9a:ce:10:31:08:
c1:ef:d2:3e:04:5e:f3:f3:98:14:cc:12:c4:60:0a:
ca:a6:4f:d8:7c:11:69:fa:ae:97:e5:52:bb:b1:52:
ab:1e:40:4e:5a:f9:32:b7:5b:87:a1:10:55:e9:41:
ec:5e:c0:8c:52:17:9b:b1:4b:73:a0:49:57:f6:92:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D2:E3:B5:CE:CB:D4:8B:FD:C6:DA:5E:E4:63:82:E1:87:24:85:D4
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e3230342e39342e302f32332d3233203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.204.94.0/23
Signature Algorithm: sha256WithRSAEncryption
50:4f:4f:65:69:ad:60:b4:2d:6f:6e:3e:c6:cb:d4:b8:84:23:
b3:5d:1a:f9:0a:a8:97:1a:b2:f2:f5:54:cf:a3:ea:53:95:97:
c8:d0:e7:21:f6:2c:13:e3:11:eb:74:87:06:11:82:7c:f5:7a:
2f:66:96:16:d4:73:c0:2e:cd:01:98:b9:f5:93:f3:c0:d9:11:
b2:3f:75:00:58:4f:c9:0e:20:0f:ce:c1:cf:60:95:8f:8b:38:
2c:87:f0:ea:f2:9d:53:cf:28:b0:12:94:7f:7b:45:27:9e:be:
55:ee:1e:a2:75:ad:1f:a5:85:28:12:d4:42:5a:1d:32:62:b0:
65:c2:88:d4:59:98:65:e5:96:9d:55:b3:7e:1e:cd:3f:8a:a5:
27:59:d0:ea:ad:f8:91:10:00:93:21:bd:be:1e:88:0b:1d:0b:
05:2c:ee:0b:30:a7:f6:0c:71:08:95:14:71:6d:13:b6:a2:1f:
d7:ee:64:dd:4f:14:0c:63:ee:52:17:6e:94:ff:9e:2d:ed:6f:
5b:9c:d9:44:6d:dd:89:2b:f1:76:a3:04:ce:e0:63:a9:89:8e:
e6:88:a8:f0:41:24:3d:fd:bf:b1:31:f0:f8:4c:f9:7e:02:23:
9d:ff:2d:e6:19:d1:90:d7:f6:4b:a8:79:0c:28:f3:51:b8:22:
46:1b:b4:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:42 2024 by rpki-client on console-ams.rpki-client.org