Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa
File: 3133382e35392e3135302e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: /DIDDKKIpdA4752cR36oh4VnVsQ6rG25RRgqUbud4v4=
Subject key identifier: 27:6C:2D:7B:76:C8:99:20:1E:AE:A4:5B:5F:9E:95:40:FC:14:10:86
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 0592FB1F4C1FD9791CD78A801F870C21D0E16420
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:25 +0000
ROA not before: Wed 31 Jul 2024 22:20:25 +0000
ROA not after: Wed 30 Jul 2025 22:25:25 +0000
asID: 28165
IP address blocks: 138.59.150.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:92:fb:1f:4c:1f:d9:79:1c:d7:8a:80:1f:87:0c:21:d0:e1:64:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:25 2024 GMT
Not After : Jul 30 22:25:25 2025 GMT
Subject: CN=276C2D7B76C899201EAEA45B5F9E9540FC141086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fc:57:8f:14:f3:a7:08:44:a4:7c:3e:5e:23:
45:60:df:ab:9c:14:01:30:76:5f:62:31:a9:bc:fb:
ec:69:86:cc:9e:9b:69:79:88:0c:76:b2:d7:dc:81:
0e:cc:17:cc:db:8e:cf:8b:88:70:4e:8d:06:d3:ec:
35:c7:06:87:32:43:30:fa:55:a8:00:0a:2a:d9:df:
a3:36:5a:5a:fc:29:34:0e:75:e6:ee:c8:f9:55:e1:
40:bf:8f:ff:f8:fd:b0:4e:95:cf:4b:1b:00:bd:d2:
65:97:74:fb:dd:6b:57:b5:23:fd:04:b3:b7:6e:cc:
31:8c:3b:44:84:5e:ba:62:ac:0e:cf:8c:1e:2f:97:
8d:af:d8:a3:21:7c:69:38:01:b5:4c:28:c6:e0:15:
5a:f4:bf:7c:c7:49:bc:be:a1:8e:62:89:9f:f4:fe:
ea:79:e3:d3:bd:3a:84:ab:0d:ed:c5:f9:da:56:e7:
90:b4:4c:f3:ef:af:3c:6b:39:ab:1d:ae:f3:00:b1:
f0:4e:d1:3b:a2:f9:e5:55:fa:bf:46:62:13:32:d0:
11:a0:92:45:09:58:d6:ec:e1:b0:11:86:79:9a:ea:
45:51:fe:b8:8e:3f:61:cc:29:60:fa:ee:9f:9c:53:
1f:e9:af:e8:2d:b8:55:11:06:42:c0:70:ee:bd:7b:
49:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:6C:2D:7B:76:C8:99:20:1E:AE:A4:5B:5F:9E:95:40:FC:14:10:86
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3135302e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.150.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:83:4e:fa:88:2b:bf:d4:c2:df:3f:92:8f:7f:c0:0f:75:74:
ae:57:82:4f:83:0c:ed:9e:42:6d:a1:c8:f4:fd:df:1d:d9:67:
b1:00:a6:ab:0d:16:93:36:a3:16:e8:70:de:05:86:b1:8a:8c:
c5:b9:e4:89:42:e0:df:64:a7:86:f0:69:ae:0e:d9:d8:4e:53:
3c:97:df:d0:56:b2:5d:a2:37:de:37:6b:2b:0f:6f:9e:32:40:
51:91:cb:50:5e:f8:fb:9c:bf:75:d6:e7:f0:ce:ec:f1:63:a2:
23:ce:3c:89:ca:fd:71:4a:08:86:c2:ae:4c:f4:fd:0f:6a:ed:
cc:ea:06:69:51:43:99:b5:62:57:40:65:53:4e:91:72:96:70:
b4:5b:8b:95:d8:c2:62:b7:63:99:f1:7c:fe:49:ce:2a:32:5f:
e4:b1:45:da:24:2a:da:ce:ac:d8:fd:8f:11:4f:a0:a9:a3:16:
94:4a:27:32:24:d2:a8:5e:53:0b:ed:89:64:75:04:b4:63:29:
6b:11:7c:1c:ed:41:20:bb:41:8c:3b:07:1a:5a:58:5e:54:a7:
59:84:ab:d2:1e:d7:c2:b9:2b:2e:33:4c:62:f2:79:2f:4d:91:
9b:73:85:f2:8c:12:54:f4:e3:75:d1:a7:57:16:62:ae:b0:34:
0e:a4:ec:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org