Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31342e302f32342d3234203d3e20323633393437.roa
File: 3133382e3235352e31342e302f32342d3234203d3e20323633393437.roa (raw, json)
Hash identifier: Tu101BvswCJhLfB+Zy7u1U3xf1oKE8lDVRTYq25y7IU=
Subject key identifier: CE:B0:B3:82:AA:B2:5E:C7:D4:CE:B4:4B:C5:B7:62:F4:E6:EB:FD:F6
Certificate issuer: /CN=BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86
Certificate serial: 45DBDC67C79EDD104EFD6D1DAFB4995DE5216AA1
Authority key identifier: BC:1D:86:93:5C:F5:1D:0E:9D:9A:AB:70:C5:AE:AD:EB:8C:D1:DC:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31342e302f32342d3234203d3e20323633393437.roa
Signing time: Mon 20 May 2024 19:10:20 +0000
ROA not before: Mon 20 May 2024 19:05:20 +0000
ROA not after: Mon 19 May 2025 19:10:20 +0000
asID: 263947
IP address blocks: 138.255.14.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:db:dc:67:c7:9e:dd:10:4e:fd:6d:1d:af:b4:99:5d:e5:21:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86
Validity
Not Before: May 20 19:05:20 2024 GMT
Not After : May 19 19:10:20 2025 GMT
Subject: CN=CEB0B382AAB25EC7D4CEB44BC5B762F4E6EBFDF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6b:2f:07:4c:53:3d:2c:36:a0:88:1d:b0:68:
fe:4f:ed:3d:17:17:58:5d:d1:c0:1e:ba:d5:19:ee:
b4:99:3e:e5:cd:b5:b6:e9:64:f5:26:bb:bd:fe:1e:
b5:1a:a1:7e:2b:cc:82:5d:64:90:a9:de:bd:e6:74:
ea:23:7e:b7:02:0f:4a:5c:64:f3:04:6b:b4:82:a2:
d2:ff:98:99:4b:ae:68:25:fb:b9:b9:86:f9:a9:9e:
2c:97:40:d3:92:62:a3:90:6c:d6:48:7d:82:09:82:
99:98:67:f3:e0:f6:e5:60:90:03:b9:fc:0b:9c:ad:
a5:3b:04:47:96:96:59:bc:7f:54:9e:fd:6b:2d:83:
af:51:ab:30:03:4f:25:32:6b:d0:cc:0d:af:6a:20:
85:e8:0a:0b:17:22:56:b7:05:f4:ae:d5:83:fc:3f:
68:ce:4d:2e:ed:ad:1b:af:8d:3a:10:bd:70:0b:45:
d0:7f:61:50:99:99:05:aa:ed:25:8b:a4:8b:cf:b9:
59:d8:ca:7e:07:32:84:e2:f2:cd:97:e4:96:2f:d0:
0b:fc:ca:2e:9b:7c:08:24:bf:a7:82:6c:04:3f:8d:
9b:fd:93:19:cc:68:82:e1:5b:15:44:29:78:51:f3:
ea:c2:b8:bf:1f:56:9d:58:a2:0c:1d:e3:9f:60:a6:
e8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:B3:82:AA:B2:5E:C7:D4:CE:B4:4B:C5:B7:62:F4:E6:EB:FD:F6
X509v3 Authority Key Identifier:
keyid:BC:1D:86:93:5C:F5:1D:0E:9D:9A:AB:70:C5:AE:AD:EB:8C:D1:DC:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BC1D86935CF51D0E9D9AAB70C5AEADEB8CD1DC86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLAfbLhAenLQ9t3AP35NCibj3HYeqFL8Kz3on3WpoYSE/0/3133382e3235352e31342e302f32342d3234203d3e20323633393437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.255.14.0/24
Signature Algorithm: sha256WithRSAEncryption
11:54:11:2d:8a:8e:e9:f1:6e:58:84:8d:45:01:c0:cb:69:a8:
43:c4:1c:74:cd:23:f1:50:4d:76:39:cc:a3:8e:14:d9:fe:43:
ba:bf:3e:76:7d:69:03:3c:62:7c:3d:fd:8f:6e:39:bb:31:e5:
12:8e:75:f5:d8:a1:8a:17:01:5d:d2:11:06:f8:6f:d7:55:0f:
d7:a1:0a:a9:f4:d0:0a:a9:e4:b5:63:c1:ea:52:b5:98:55:43:
8d:b5:56:12:08:7b:8e:2c:84:ed:61:b4:34:d7:08:69:2a:be:
15:d6:1d:87:9d:96:75:a6:fa:00:0f:69:de:e3:23:ed:ef:78:
5b:6a:7a:95:48:e1:0f:66:a6:0c:1b:dc:6f:28:2a:f2:61:15:
84:b4:30:5b:96:83:6b:52:81:3a:31:f4:c1:50:8e:c5:be:6b:
87:eb:0a:6b:db:73:2b:de:c1:00:35:2b:3a:43:9b:1f:d5:80:
7c:32:49:1b:35:51:55:84:c5:45:73:57:0e:b8:ab:2c:a9:50:
68:9d:a1:d4:45:d8:95:73:dd:ea:3a:17:f1:cb:84:82:e4:81:
c8:34:52:41:99:a1:2b:82:05:b3:cc:ea:c6:aa:ea:de:f3:56:
ed:cb:8d:a2:03:36:4d:a8:88:82:53:c3:15:36:82:60:bb:4f:
92:44:1b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:19:09 2024 by rpki-client on console-fra.rpki-client.org