Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32322d3232203d3e203238313635.roa
File: 3133382e35392e3134382e302f32322d3232203d3e203238313635.roa (raw, json)
Hash identifier: /eNZ8aGdKOIKUHmyphGXpzGCjy7zpnJewuLBDFtXeB8=
Subject key identifier: E4:16:7E:78:66:57:F7:7D:BF:45:16:07:FC:31:43:81:30:54:EC:EC
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 0B2FD2079E9623E32259BDD5F626A0F7E695A209
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32322d3232203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:17 +0000
ROA not before: Wed 31 Jul 2024 22:20:17 +0000
ROA not after: Wed 30 Jul 2025 22:25:17 +0000
asID: 28165
IP address blocks: 138.59.148.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:2f:d2:07:9e:96:23:e3:22:59:bd:d5:f6:26:a0:f7:e6:95:a2:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:17 2024 GMT
Not After : Jul 30 22:25:17 2025 GMT
Subject: CN=E4167E786657F77DBF451607FC3143813054ECEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:4a:43:41:5f:4c:8a:66:ad:eb:72:37:31:
a7:e1:80:08:ce:02:7a:36:a9:a7:99:08:c8:c0:2a:
9d:0a:c5:da:7f:cc:0d:2d:55:46:62:74:7f:c7:db:
a5:db:d1:b5:c1:9e:57:c8:82:f6:4d:78:eb:a4:d9:
ce:45:cc:93:9a:e3:9d:13:34:40:43:61:7f:de:d4:
6a:06:af:24:04:a4:a5:a1:82:25:b1:cc:dc:25:5c:
d5:1d:aa:3e:32:12:20:da:0c:84:e8:d8:17:70:38:
c3:83:ce:4f:7b:a3:00:da:aa:f4:66:4f:e4:69:0e:
29:b5:c6:79:87:52:ca:83:ba:67:08:c8:db:5f:2c:
bd:82:0c:9c:bb:74:27:66:e3:df:66:09:c5:14:20:
1e:54:68:31:30:64:1e:65:b3:21:b1:54:00:2f:43:
ed:bb:25:14:7c:31:7c:54:79:ed:fc:59:c0:a4:21:
ab:d7:4d:24:5a:a3:67:08:c3:50:af:4f:e8:95:57:
49:af:f8:11:aa:94:91:77:98:54:4d:da:f0:6a:f2:
73:60:9f:7d:8f:64:b7:01:98:cf:da:68:50:f3:46:
dc:22:3a:26:12:40:1c:e8:d4:00:47:15:dc:2e:54:
c4:69:40:8f:92:1c:5c:35:e9:5f:dd:32:26:61:e9:
70:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:16:7E:78:66:57:F7:7D:BF:45:16:07:FC:31:43:81:30:54:EC:EC
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3134382e302f32322d3232203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.148.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:cb:02:0f:30:af:1a:61:37:60:66:02:12:83:48:b3:f4:73:
71:37:a6:d2:19:dc:ba:7b:23:ef:f5:1a:14:47:8b:7e:b0:e5:
35:44:ed:ff:1e:fc:e8:29:3c:b1:4d:8e:23:a6:d9:19:d8:7e:
97:84:ec:41:1e:2a:3b:4b:80:1c:67:88:be:03:8e:7e:58:67:
9c:fe:70:e4:e0:5e:05:df:dd:27:8d:df:86:d1:42:a5:e1:a2:
43:0b:3c:c3:75:da:a4:ee:20:f4:d6:c8:d3:d8:1d:2d:c2:53:
e4:9f:b9:62:0a:7d:10:c7:89:9c:b0:53:47:35:d6:62:50:8d:
8b:eb:cf:fe:e7:4c:12:82:45:a3:a9:fd:77:78:33:7e:4f:a5:
b9:00:54:ef:52:b2:11:5c:37:ef:d2:37:07:74:9d:a8:6f:13:
3a:1f:ba:37:7b:41:7a:94:fd:3e:22:67:b5:59:8d:e5:6e:c9:
af:35:13:36:b3:19:a3:df:0e:68:25:58:d2:69:a9:60:90:f5:
12:59:94:36:81:23:e0:ec:ee:ba:10:89:83:7b:40:15:50:e8:
be:72:ed:9d:c3:ff:08:67:42:de:71:fb:58:2b:19:4d:3e:94:
37:8a:79:02:df:de:6c:e4:f2:2a:e3:88:10:98:4c:b5:03:67:
3a:2a:a3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:42 2024 by rpki-client on console-ams.rpki-client.org