Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa
File: 3133382e35392e3135312e302f32342d3234203d3e203238313635.roa (raw, json)
Hash identifier: DBNDZikNVXmPIhfxTIcnxqy2kuAbN+RvMRHWzry5SX0=
Subject key identifier: D6:D9:3E:A5:96:3A:E1:C9:A4:65:CF:18:18:3D:0F:FB:BA:CC:58:95
Certificate issuer: /CN=A56CE6ECF486D00F409222CC19527681F01B555D
Certificate serial: 0EF84138E95569571484E20F125A09F7DEE54E9F
Authority key identifier: A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa
Signing time: Wed 31 Jul 2024 22:25:43 +0000
ROA not before: Wed 31 Jul 2024 22:20:43 +0000
ROA not after: Wed 30 Jul 2025 22:25:43 +0000
asID: 28165
IP address blocks: 138.59.151.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f8:41:38:e9:55:69:57:14:84:e2:0f:12:5a:09:f7:de:e5:4e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A56CE6ECF486D00F409222CC19527681F01B555D
Validity
Not Before: Jul 31 22:20:43 2024 GMT
Not After : Jul 30 22:25:43 2025 GMT
Subject: CN=D6D93EA5963AE1C9A465CF18183D0FFBBACC5895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e5:02:1a:8f:42:3c:c3:23:47:c5:62:dc:04:
dd:b8:26:4d:e2:f4:1f:a9:c4:d1:0f:01:07:f1:20:
92:52:a8:b6:80:af:ae:fa:c3:24:1b:2b:87:27:4d:
e6:96:c8:bd:ca:5f:6a:75:76:c3:87:cc:4e:54:4d:
0a:f1:6c:b9:33:67:18:94:03:19:14:c9:24:1f:d6:
80:92:70:30:39:51:ca:b1:00:b6:ba:e7:6d:fd:48:
75:75:69:c1:49:e2:f8:17:8b:4b:0d:c1:1e:5d:f2:
b1:07:34:dd:3b:e0:39:87:53:cf:38:b4:61:e1:5d:
62:a6:bb:25:f7:c0:99:d6:b4:2e:c3:2c:89:05:2e:
0b:61:f5:77:7e:08:25:80:be:ad:ad:13:47:7d:1c:
9e:b9:3b:ce:fd:a3:3c:8e:e8:49:3f:e9:dc:01:2c:
36:60:75:8a:62:fc:93:a7:f3:05:55:fd:b7:92:a0:
f2:19:0a:24:b6:a3:23:f3:ea:b4:68:25:56:f7:6b:
6f:1d:fe:05:57:aa:f3:85:34:94:7b:d3:65:b8:dc:
08:8d:b8:74:0d:a3:28:9e:de:fc:5b:02:be:c0:4d:
0e:56:92:92:a4:04:a6:95:1e:3f:28:0f:c8:52:0d:
b0:fd:04:5c:e1:6f:6d:de:38:48:07:9d:05:51:77:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D9:3E:A5:96:3A:E1:C9:A4:65:CF:18:18:3D:0F:FB:BA:CC:58:95
X509v3 Authority Key Identifier:
keyid:A5:6C:E6:EC:F4:86:D0:0F:40:92:22:CC:19:52:76:81:F0:1B:55:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/A56CE6ECF486D00F409222CC19527681F01B555D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A56CE6ECF486D00F409222CC19527681F01B555D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2MRVV8WwJEDaDNpTzm9jrH67Ntt3HCLG3V2wWfEzkoD/2/3133382e35392e3135312e302f32342d3234203d3e203238313635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:bb:28:90:91:09:b6:bb:9f:36:69:f6:58:d1:9f:dd:03:7b:
c2:56:42:35:81:03:83:b5:e1:fb:de:c3:8b:b6:9c:7c:80:23:
bf:54:8b:51:6c:19:fa:5c:88:99:3a:ea:84:3d:5e:bd:06:0e:
ad:bd:3e:9b:ba:c4:15:1b:5f:15:39:4f:fd:56:2e:89:5a:f6:
72:d9:3a:a4:09:85:a3:a8:8d:3b:cb:eb:50:d9:91:f3:1a:95:
4b:75:f3:65:f9:6b:ff:1c:3f:a9:c1:39:44:de:e3:b8:14:ff:
ff:37:ec:ea:21:e1:62:cb:15:7f:51:6f:47:a2:3c:9c:95:b4:
1d:49:f8:2a:80:e0:75:54:15:cd:26:27:d9:3a:c3:d1:82:38:
93:fc:d7:fb:d7:15:40:49:51:aa:74:47:38:22:74:1a:72:21:
4f:eb:33:7f:36:00:8d:98:d4:9a:18:85:f2:bd:1c:c0:08:89:
b7:9c:b6:fe:dd:9d:5b:fd:69:cc:1f:b1:c2:1f:7c:1f:67:73:
97:1d:58:d4:34:7c:b9:5e:3e:be:f2:86:59:c4:3d:35:21:0e:
77:33:c6:8b:d1:d0:6a:f5:48:ca:c4:88:25:3e:ab:87:9c:9b:
32:0d:80:12:0b:45:cf:b1:0d:b4:4a:bc:ae:0b:c8:01:6e:cc:
2c:c1:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 02:48:43 2024 by rpki-client on console-ams.rpki-client.org