Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
File: 3136382e302e3233362e302f32322d3234203d3e203532383732.roa (raw, json)
Hash identifier: cNrCUtBdPYHmNmbz2AIBjmKBcDGC88fUNmQoNjJhEAM=
Subject key identifier: 4A:79:C3:89:4F:D6:60:55:33:72:54:7D:93:19:0F:8E:C8:61:12:EC
Certificate issuer: /CN=9D94162FCA29B10C2A202C439F0AD2F480E45627
Certificate serial: 5C5A5A617522EF2CA5C25D5F54FA6291EE6DB335
Authority key identifier: 9D:94:16:2F:CA:29:B1:0C:2A:20:2C:43:9F:0A:D2:F4:80:E4:56:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
Signing time: Thu 04 Apr 2024 11:23:22 +0000
ROA not before: Thu 04 Apr 2024 11:18:22 +0000
ROA not after: Thu 03 Apr 2025 11:23:22 +0000
asID: 52872
IP address blocks: 168.0.236.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:5a:5a:61:75:22:ef:2c:a5:c2:5d:5f:54:fa:62:91:ee:6d:b3:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D94162FCA29B10C2A202C439F0AD2F480E45627
Validity
Not Before: Apr 4 11:18:22 2024 GMT
Not After : Apr 3 11:23:22 2025 GMT
Subject: CN=4A79C3894FD660553372547D93190F8EC86112EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:bd:f3:6d:5a:21:42:93:38:51:81:cb:0d:
3c:e9:ac:09:c0:7a:69:82:d2:58:40:89:6b:d3:33:
9b:b5:84:dc:27:84:cb:fb:61:bc:80:46:c2:a5:2e:
9c:a4:82:ce:c5:8d:95:42:7e:1b:c3:ea:58:f4:d5:
8e:3c:21:7c:70:e5:6f:aa:9f:fe:3d:1c:78:09:ac:
72:71:05:cd:5b:13:43:0e:2d:dd:90:bb:60:8e:dc:
7b:05:0f:df:8d:49:07:8b:0d:47:12:fa:dd:f6:91:
d3:de:a0:b3:a1:79:ac:fb:4d:cb:15:47:e5:53:04:
e5:33:4e:88:21:d4:cc:2b:73:f6:84:84:82:80:32:
d2:be:26:19:5c:b3:08:14:1e:35:8a:7c:df:d9:f4:
95:74:4c:f1:a0:49:dd:b8:82:02:c9:82:95:b5:3e:
91:09:13:a9:de:c6:40:43:c5:16:38:92:19:01:52:
74:75:52:c9:20:65:37:44:b6:13:f8:85:a5:7d:ba:
97:ba:f9:c5:e5:b0:8b:b4:d8:f1:18:e6:16:72:2f:
e5:5b:1f:7b:a6:3c:5f:c3:fd:9e:94:71:e4:df:e1:
07:c7:5a:fa:c5:3e:e3:f1:ce:51:82:87:b5:43:59:
2b:64:b8:5c:50:58:66:c3:bc:0f:c0:8f:07:95:3d:
e0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:79:C3:89:4F:D6:60:55:33:72:54:7D:93:19:0F:8E:C8:61:12:EC
X509v3 Authority Key Identifier:
keyid:9D:94:16:2F:CA:29:B1:0C:2A:20:2C:43:9F:0A:D2:F4:80:E4:56:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D94162FCA29B10C2A202C439F0AD2F480E45627.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xcLWXC7hdQTkJrcabpTqP5wA1hRpHZvfQGUnXKdAG3W/1/3136382e302e3233362e302f32322d3234203d3e203532383732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.0.236.0/22
Signature Algorithm: sha256WithRSAEncryption
01:0b:d9:b2:3d:43:57:84:47:64:43:c1:4a:d8:3f:55:68:ea:
3e:0e:d9:83:75:5b:8a:db:d5:ea:5f:f2:3b:53:aa:81:06:c3:
90:39:75:65:db:0d:d6:25:37:49:29:c8:4b:f3:0c:c9:22:36:
14:a2:b4:2f:80:6e:40:0b:fe:f1:43:9b:be:fe:99:73:15:6e:
c3:63:0a:4f:54:48:81:07:92:fd:d4:c5:23:7c:af:13:48:53:
38:ab:11:b9:64:e3:4d:7b:2e:d7:67:14:a0:ed:68:35:3a:75:
ef:a8:69:5c:86:ea:67:b7:42:00:b9:43:1d:4b:88:c8:bd:fa:
95:6b:b9:0f:ed:05:a3:3f:c3:68:d4:ab:62:4f:86:60:07:98:
5d:2f:aa:05:b0:c8:85:e5:32:7d:17:e0:59:34:34:07:0e:f5:
3a:05:9b:6a:ae:10:ed:16:f4:22:a4:2b:00:3e:95:b8:4d:98:
5d:1f:be:ba:fb:67:4d:8d:88:08:64:9d:83:66:2a:af:f9:38:
f6:69:ff:0d:b3:c4:81:87:ce:d2:5c:88:c3:df:58:06:20:15:
41:52:55:2a:ff:b1:38:e6:0b:84:df:8d:17:3d:fd:47:1c:b2:
05:b1:c2:7c:aa:06:a0:ee:e2:46:6e:ac:f2:8b:71:9c:2b:b4:
81:7c:1a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 6 16:43:52 2024 by rpki-client on console-fra.rpki-client.org