Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3233203d3e20323633393437.roa
File: 3133382e3235352e31322e302f32332d3233203d3e20323633393437.roa (raw, json)
Hash identifier: zejbHowb0HbL1z5mxRQffJZ8CJmYYX8SYSirSsWTpFc=
Subject key identifier: 4F:CE:88:53:05:84:E3:A8:26:32:7F:0F:CF:74:DC:CD:E2:77:8F:88
Certificate issuer: /CN=BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86
Certificate serial: 3154FA1708110149EBAF4330EF2CF5FB0284D82E
Authority key identifier: BC:1D:86:93:5C:F5:1D:0E:9D:9A:AB:70:C5:AE:AD:EB:8C:D1:DC:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3233203d3e20323633393437.roa
Signing time: Mon 20 May 2024 19:10:15 +0000
ROA not before: Mon 20 May 2024 19:05:15 +0000
ROA not after: Mon 19 May 2025 19:10:15 +0000
asID: 263947
IP address blocks: 138.255.12.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:54:fa:17:08:11:01:49:eb:af:43:30:ef:2c:f5:fb:02:84:d8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86
Validity
Not Before: May 20 19:05:15 2024 GMT
Not After : May 19 19:10:15 2025 GMT
Subject: CN=4FCE88530584E3A826327F0FCF74DCCDE2778F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:48:2d:e7:5e:2d:c0:61:c1:58:86:b8:92:a6:
3c:01:77:4b:2b:04:fb:94:e8:9b:f0:6e:45:93:0d:
da:c8:b3:5c:8d:6c:62:1a:67:bc:85:dd:bd:81:d8:
b2:b3:69:eb:ab:68:a9:b8:a5:8d:a1:76:6b:eb:1b:
16:5c:b9:b8:3b:43:00:bf:1b:bf:ad:63:7a:24:46:
9f:90:15:e3:4c:9b:e4:07:bf:44:e9:b7:52:92:94:
82:7f:19:ea:a7:8c:fe:c5:78:7a:4a:54:aa:18:21:
e9:1b:5c:0e:ab:67:4f:4c:65:32:9d:f0:e8:3b:4a:
36:93:60:34:bf:61:7d:c6:19:1b:fd:46:19:5f:32:
b2:77:ed:e5:66:55:08:58:17:4b:62:72:3e:be:35:
a7:68:4e:d2:8a:62:4a:2b:7a:7c:1b:58:dc:52:d7:
4b:76:20:df:65:4d:55:e3:e1:60:90:05:2c:4b:ce:
49:32:f7:73:7e:95:ce:9f:be:61:17:85:60:10:9b:
67:3c:84:39:ed:81:92:50:56:d9:bf:c6:78:b7:df:
c2:f9:71:27:fc:86:ba:80:b1:47:a6:9b:36:7b:7a:
78:cd:33:06:18:82:3c:7f:2f:e6:2e:6a:bd:9f:fd:
44:c8:8c:99:7d:44:75:ee:c7:d9:5f:d2:04:6c:46:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CE:88:53:05:84:E3:A8:26:32:7F:0F:CF:74:DC:CD:E2:77:8F:88
X509v3 Authority Key Identifier:
keyid:BC:1D:86:93:5C:F5:1D:0E:9D:9A:AB:70:C5:AE:AD:EB:8C:D1:DC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31322e302f32332d3233203d3e20323633393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.12.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:5a:89:17:23:1b:2e:f4:11:5b:03:d7:0f:33:e8:ec:e8:d7:
39:b6:50:b6:e8:8c:21:d4:87:06:f4:96:30:8f:1e:35:b3:c8:
50:89:d2:8e:fa:d9:49:1e:7f:5a:00:86:a2:d6:da:08:d9:83:
ce:76:8f:2d:ab:30:62:a8:a0:02:0c:34:7d:0f:03:26:bb:4b:
4c:f2:dc:86:e4:8e:ab:cd:de:c5:ef:8e:38:b7:52:76:5a:de:
cf:70:48:82:8c:08:47:4d:b6:4e:03:70:6f:67:df:81:6f:49:
6d:64:f3:a5:d8:4f:60:ec:03:46:ec:c0:9e:08:6d:be:fa:7c:
30:88:8d:0f:43:65:b1:6f:c8:64:f5:8c:3d:b5:7e:24:60:07:
6d:b9:6d:c2:15:df:2c:d0:1f:44:ad:7e:fa:b7:6a:02:82:73:
c7:b6:62:2d:f9:cb:75:b7:66:da:84:99:82:48:81:0a:15:e8:
67:2b:e5:2b:a0:32:cb:da:ca:c1:6d:ef:7c:61:5d:0b:46:0a:
63:41:1e:89:22:dc:1c:f2:9f:7c:90:45:4b:74:6a:8f:fc:da:
0f:45:9d:bb:bd:b3:dd:a0:d0:a8:5e:7f:b0:0e:a1:67:8d:5f:
78:38:38:ef:b7:45:83:79:94:d2:b2:53:15:d0:38:b7:d9:0f:
c9:c1:50:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:19:09 2024 by rpki-client on console-fra.rpki-client.org