Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
File: 3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa (raw, json)
Hash identifier: dUm62JAmcy4Sjq+6/2LkQFoiy5VUzUskDLSY5i2cS7g=
Subject key identifier: EB:B7:F7:71:58:31:81:5C:62:F9:BD:59:35:E1:3B:6C:AC:37:3C:86
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 1DE7B669E429BDEB739BB09C9FB213A8D131246E
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
Signing time: Wed 12 Jun 2024 13:13:57 +0000
ROA not before: Wed 12 Jun 2024 13:08:57 +0000
ROA not after: Wed 11 Jun 2025 13:13:57 +0000
asID: 28287
IP address blocks: 138.118.120.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e7:b6:69:e4:29:bd:eb:73:9b:b0:9c:9f:b2:13:a8:d1:31:24:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:08:57 2024 GMT
Not After : Jun 11 13:13:57 2025 GMT
Subject: CN=EBB7F7715831815C62F9BD5935E13B6CAC373C86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:24:29:22:1c:a6:b8:87:48:f9:a9:b3:ba:d0:
19:85:b5:17:8b:fb:59:64:a4:04:3c:3c:1e:a7:2a:
52:2d:c7:53:89:41:96:70:48:63:9c:a0:06:20:a3:
32:a4:a8:98:af:d4:04:b1:29:cf:ec:d1:55:2d:81:
c4:92:dd:fa:32:59:e6:ee:26:93:e2:31:72:a9:47:
f2:71:a0:35:66:b6:7d:19:b7:48:8b:8b:1f:63:8a:
8e:24:f7:00:86:8e:4a:30:8a:6d:b8:57:12:17:ae:
9a:a7:bf:ff:52:55:66:f2:7f:2f:63:e2:49:4e:19:
d7:da:49:21:ae:f4:79:b9:76:8a:25:e7:eb:27:8d:
c6:a7:35:76:95:ae:2d:58:2c:c4:ba:d7:b5:14:0a:
dc:f0:c6:a7:d0:33:fa:1d:90:df:cc:9f:38:27:97:
66:63:b9:16:f1:13:a5:fd:a1:33:41:f4:06:8b:f7:
ae:24:c1:b0:07:b1:16:d6:57:f5:84:eb:1b:18:57:
9c:6c:63:7d:1a:57:cb:25:52:59:aa:b0:be:d0:62:
d9:f6:7a:61:ef:da:b5:2c:bf:34:02:1f:03:96:06:
4e:9b:0c:c2:7a:92:02:82:90:2b:19:e5:a3:ef:e2:
b9:aa:a8:34:b2:11:d8:d6:2b:69:7e:81:d0:18:5c:
20:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B7:F7:71:58:31:81:5C:62:F9:BD:59:35:E1:3B:6C:AC:37:3C:86
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/3133382e3131382e3132302e302f32322d3234203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.118.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:a5:a5:12:c9:f9:f4:2c:88:87:8a:eb:08:40:ee:f4:16:c8:
ac:0f:72:b6:cf:e7:55:4f:dc:1f:04:42:2c:25:7c:b9:ae:f4:
05:45:53:05:f5:1d:45:2a:f2:68:c7:f6:74:d1:2d:ab:4f:a6:
e8:87:da:15:d9:ef:54:f5:0b:1d:5b:3a:21:46:03:be:2a:01:
91:d7:96:7b:2c:55:80:e6:82:2a:be:2c:31:7f:75:98:9b:23:
a1:e7:d0:36:d8:7e:2b:4c:57:a7:0e:35:18:d2:cf:9f:9b:54:
7a:39:6c:f1:bc:88:fb:02:05:1a:e1:8c:49:94:17:04:8c:24:
df:22:a0:79:3d:eb:df:e2:4a:a8:f6:c7:4b:ad:47:5a:1f:58:
35:63:0f:bd:0d:eb:50:97:2b:e4:cd:9d:13:7a:0d:60:c3:18:
a5:cd:3e:ef:f0:97:15:08:fb:0b:79:04:ed:fd:e4:ca:cd:58:
b3:a0:e0:ef:1d:63:b1:19:22:d4:b2:4d:ff:98:21:ad:dc:f4:
19:cc:df:24:85:5d:93:a5:e9:18:66:ba:68:78:25:51:3f:62:
b2:e5:66:ef:3f:6a:61:9b:50:0e:15:9a:ba:38:10:fe:55:fe:
74:1c:0f:ae:df:67:d9:2f:6c:f4:c1:25:36:6e:7a:75:42:e5:
49:ca:90:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 8 17:18:58 2024 by rpki-client on console-fra.rpki-client.org