Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33332e302f32342d3234203d3e203238323630.roa
File: 3138372e39352e33332e302f32342d3234203d3e203238323630.roa (raw, json)
Hash identifier: PduJGvCjE5n1dB7DQYuRbY+7TCGU3VaXfZ1/EB4ZMA8=
Subject key identifier: CA:56:8B:AB:E2:43:58:09:3E:A4:59:D1:4A:2C:2F:DA:04:00:93:1C
Certificate issuer: /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial: 1BBBD52E677F8B08470F990296FD2B9EC46A51C5
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33332e302f32342d3234203d3e203238323630.roa
Signing time: Thu 09 Mar 2023 20:17:52 +0000
ROA not before: Thu 09 Mar 2023 20:12:52 +0000
ROA not after: Thu 07 Mar 2024 20:17:52 +0000
asID: 28260
IP address blocks: 187.95.33.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:bb:d5:2e:67:7f:8b:08:47:0f:99:02:96:fd:2b:9e:c4:6a:51:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Validity
Not Before: Mar 9 20:12:52 2023 GMT
Not After : Mar 7 20:17:52 2024 GMT
Subject: CN=CA568BABE24358093EA459D14A2C2FDA0400931C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:20:ab:3f:f6:f1:77:70:46:41:9c:28:8d:09:
68:bb:98:5a:69:60:ad:a2:e7:6d:05:bf:fe:c9:a1:
6e:7f:6c:05:c6:5d:be:c2:dd:fc:9b:56:fa:af:30:
d9:a0:ef:39:79:38:4a:b5:a9:c9:01:b7:e5:04:6e:
61:be:42:86:18:be:7a:e2:a7:94:68:8b:29:8f:78:
43:07:a6:25:ec:f0:0a:dd:78:be:a5:fa:3c:1b:cf:
69:cc:72:87:c0:ed:b7:a3:7b:c6:d8:50:7a:d8:1b:
22:5a:41:e3:a7:5d:b4:4f:b3:7a:90:cc:0f:1f:96:
e6:d7:70:f0:62:02:14:36:0e:c2:8b:00:66:e5:be:
45:02:dd:48:d2:f3:c7:17:30:02:2c:e4:e5:9b:bb:
a1:87:a5:52:49:f6:32:b9:01:ab:c3:8e:b8:47:8c:
c0:9b:96:4f:80:06:d4:1f:3e:ac:0c:56:de:33:44:
69:7d:b9:f2:0f:bc:36:67:b1:2d:5e:c9:5f:76:57:
c8:6f:58:e5:a6:0e:c5:f3:f1:b0:90:fd:3d:46:5d:
93:63:cb:e2:0e:61:5f:aa:9a:6b:eb:a5:b0:82:5e:
2d:80:5b:fc:90:d4:80:25:b5:64:11:91:1d:41:17:
d2:82:d0:a0:49:56:1d:72:f8:b2:56:5c:ec:de:f1:
f7:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:56:8B:AB:E2:43:58:09:3E:A4:59:D1:4A:2C:2F:DA:04:00:93:1C
X509v3 Authority Key Identifier:
keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/3138372e39352e33332e302f32342d3234203d3e203238323630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.95.33.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:31:6c:74:0f:84:84:21:48:bc:39:e2:8d:0c:fd:e6:45:78:
4c:f0:16:77:7c:a0:0e:49:0d:99:66:79:85:f2:9e:45:61:72:
e5:48:23:9e:79:1f:05:41:12:d5:df:fb:10:de:56:2d:9c:88:
50:2f:d9:08:1b:42:cd:f9:02:07:a0:72:81:1b:e8:a6:e9:b0:
f7:7d:9e:71:df:0b:2b:0f:5f:83:2e:3b:a2:ba:a7:b3:47:b0:
8d:d3:89:70:fd:f7:95:12:1b:1b:63:a8:43:43:fd:62:72:50:
90:c0:8d:d0:7e:49:f2:24:e0:d3:ec:53:e6:ec:96:6c:83:d5:
74:b2:c7:1c:3b:14:56:72:04:e8:d5:4d:64:a7:e9:ce:96:5e:
8c:49:de:3c:2b:eb:99:cd:6a:da:48:1d:be:22:cc:7e:1b:fe:
04:1f:ab:42:62:9f:92:cd:b1:54:60:f0:23:61:e4:63:2d:d9:
c2:a9:2c:d6:9d:33:de:cc:53:2f:82:21:71:bf:16:cd:16:b5:
65:b3:f9:f3:94:7c:31:e3:35:5b:1e:56:59:c9:4f:25:f3:83:
bd:13:66:aa:c0:68:0e:15:f8:13:23:61:72:b7:a0:b0:7a:5d:
84:65:05:de:29:0e:7b:c7:00:52:dd:39:1f:68:91:b9:65:6b:
50:17:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 14:32:51 2024 by rpki-client on console-ams.rpki-client.org