Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
File: 3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa (raw, json)
Hash identifier: aXv7I27z4c1WPI9ChmFkZPpeQOOJp44dFQSYy+C4lb4=
Subject key identifier: BF:A5:6F:8A:7E:9F:97:68:28:DA:00:37:2C:CD:A6:72:85:B6:1D:B3
Certificate issuer: /CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Certificate serial: 57F226B18B4986E6D17DC173570555E930C9572B
Authority key identifier: AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
Signing time: Thu 04 Apr 2024 18:08:17 +0000
ROA not before: Thu 04 Apr 2024 18:03:17 +0000
ROA not after: Thu 03 Apr 2025 18:08:17 +0000
asID: 264197
IP address blocks: 138.97.148.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:f2:26:b1:8b:49:86:e6:d1:7d:c1:73:57:05:55:e9:30:c9:57:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEE1F2C62335FF3372773DE72545E8B38F0BFC21
Validity
Not Before: Apr 4 18:03:17 2024 GMT
Not After : Apr 3 18:08:17 2025 GMT
Subject: CN=BFA56F8A7E9F976828DA00372CCDA67285B61DB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:96:3f:32:84:e1:3f:75:41:c2:82:73:71:91:
05:51:77:02:79:60:db:ba:21:01:3a:39:b9:b5:41:
02:f5:88:ad:29:e5:1d:ad:eb:15:a1:d2:36:6d:79:
12:75:08:94:1e:2b:7a:2d:bc:93:04:f5:dd:67:94:
fa:5a:9a:d6:ac:c4:9b:12:d5:49:34:94:81:e0:33:
e9:4d:7d:9c:99:ce:66:b8:1b:d9:54:b6:62:ae:b8:
28:52:fe:1c:1a:50:13:21:0c:c8:aa:57:83:b9:fa:
15:fb:7a:6e:0f:e4:fa:d6:c9:f1:1a:dd:2c:56:70:
77:7a:1a:cc:f2:47:f5:5b:3c:ba:9e:20:81:62:89:
ef:3c:1d:d4:26:ff:26:b0:b9:ef:6e:1d:07:12:13:
8d:ee:fa:4d:95:52:6f:37:08:d5:a8:ac:99:51:9b:
05:ab:18:31:82:aa:b6:b2:e6:21:f1:59:60:65:1e:
e2:ae:7d:e4:e5:07:13:84:ee:0b:98:7c:01:8e:14:
78:5d:71:76:89:d8:d5:46:6d:df:25:29:4b:48:4b:
c9:23:41:88:f7:36:b8:42:a5:23:62:55:f1:e5:d9:
42:55:54:59:32:9b:86:be:2f:ac:5a:07:9a:76:66:
85:20:08:f9:56:d7:e1:db:50:f9:4c:66:35:63:e1:
7b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A5:6F:8A:7E:9F:97:68:28:DA:00:37:2C:CD:A6:72:85:B6:1D:B3
X509v3 Authority Key Identifier:
keyid:AE:E1:F2:C6:23:35:FF:33:72:77:3D:E7:25:45:E8:B3:8F:0B:FC:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEE1F2C62335FF3372773DE72545E8B38F0BFC21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Db5MajU9f7pLyrSidVdZWbs3E7DynpNTf3oQefFr9S5T/1/3133382e39372e3134382e302f32332d3233203d3e20323634313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.97.148.0/23
Signature Algorithm: sha256WithRSAEncryption
50:3a:ea:5a:2c:bf:75:21:1d:c3:d7:63:69:f1:71:6f:dc:bd:
de:3c:51:c9:96:80:10:f5:d2:09:6c:e2:da:40:3b:78:26:58:
0f:a5:24:8e:c8:f7:dc:c7:5e:5f:8b:1b:eb:a7:a5:03:36:72:
41:3e:ec:16:8b:eb:9f:46:95:ea:cf:8b:a6:1c:83:f1:5a:82:
60:88:d6:68:5e:68:c8:a6:37:ba:71:8c:de:03:e3:bc:ad:f0:
ed:22:7b:1b:cf:ad:a8:67:21:47:c5:6b:c1:e6:0b:0e:ec:72:
9c:23:ff:67:eb:09:a4:f0:c2:5c:3a:21:6d:38:4a:0a:fe:fd:
a8:3b:28:6d:b3:1d:57:1e:47:f5:90:7e:8c:88:63:0e:98:48:
17:7b:04:6e:fb:c4:db:03:be:59:ec:c3:8d:6b:aa:49:2f:e1:
42:09:8d:80:df:6a:1f:cc:78:0f:f0:c8:72:fb:30:f6:d1:97:
a6:13:5c:b8:f0:1e:da:61:35:9d:b8:f4:f3:58:ba:4d:6b:73:
08:81:bb:e7:72:64:11:40:3c:de:31:67:7b:73:80:96:51:49:
2f:37:8b:69:0e:93:79:6f:1b:be:89:6e:20:4c:90:ed:60:64:
ca:5f:00:8a:c0:b9:a4:54:8d:b4:00:7a:fb:a4:e0:be:f4:59:
cb:64:7e:06
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUV/ImsYtJhubRfcFzVwVV6TDJVyswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVFMUYyQzYyMzM1RkYzMzcyNzczREU3MjU0NUU4QjM4
RjBCRkMyMTAeFw0yNDA0MDQxODAzMTdaFw0yNTA0MDMxODA4MTdaMDMxMTAvBgNV
BAMTKEJGQTU2RjhBN0U5Rjk3NjgyOERBMDAzNzJDQ0RBNjcyODVCNjFEQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWlj8yhOE/dUHCgnNxkQVRdwJ5
YNu6IQE6Obm1QQL1iK0p5R2t6xWh0jZteRJ1CJQeK3otvJME9d1nlPpamtasxJsS
1Uk0lIHgM+lNfZyZzma4G9lUtmKuuChS/hwaUBMhDMiqV4O5+hX7em4P5PrWyfEa
3SxWcHd6GszyR/VbPLqeIIFiie88HdQm/yawue9uHQcSE43u+k2VUm83CNWorJlR
mwWrGDGCqray5iHxWWBlHuKufeTlBxOE7guYfAGOFHhdcXaJ2NVGbd8lKUtIS8kj
QYj3NrhCpSNiVfHl2UJVVFkym4a+L6xaB5p2ZoUgCPlW1+HbUPlMZjVj4XsJAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUv6Vvin6fl2go2gA3LM2mcoW2HbMwHwYDVR0j
BBgwFoAUruHyxiM1/zNydz3nJUXos48L/CEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGI1TWFqVTlmN3BMeXJTaWRWZFpXYnMzRTdEeW5wTlRmM29RZWZGcjlT
NVQvMS9BRUUxRjJDNjIzMzVGRjMzNzI3NzNERTcyNTQ1RThCMzhGMEJGQzIxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFRTFGMkM2MjMzNUZGMzM3
Mjc3M0RFNzI1NDVFOEIzOEYwQkZDMjEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RiNU1halU5ZjdwTHlyU2lkVmRaV2JzM0U3RHlucE5UZjNvUWVmRnI5UzVULzEv
MzEzMzM4MmUzOTM3MmUzMTM0MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzQzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAGKYZQwDQYJKoZIhvcNAQELBQADggEBAFA66los
v3UhHcPXY2nxcW/cvd48UcmWgBD10gls4tpAO3gmWA+lJI7I99zHXl+LG+unpQM2
ckE+7BaL659GlerPi6Ycg/FagmCI1mheaMimN7pxjN4D47yt8O0iexvPrahnIUfF
a8HmCw7scpwj/2frCaTwwlw6IW04Sgr+/ag7KG2zHVceR/WQfoyIYw6YSBd7BG77
xNsDvlnsw41rqkkv4UIJjYDfah/MeA/wyHL7MPbRl6YTXLjwHtphNZ249PNYuk1r
cwiBu+dyZBFAPN4xZ3tzgJZRSS83i2kOk3lvG76JbiBMkO1gZMpfAIrAuaRUjbQA
evuk4L70WctkfgY=
-----END CERTIFICATE-----
Generated at Tue Aug 13 22:07:14 2024 by rpki-client on console-ams.rpki-client.org