Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: 9yOF9Nlt53rtnDPP9Chxp/Yz5E7LNG3eyHHP7dAA7Ws=
Subject key identifier: 47:47:C5:2D:16:2B:75:68:1C:92:F7:B7:DB:8F:14:89:76:0B:F8:4B
Certificate issuer: /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial: 0DDFDA699AC776D88E627015D77D3455EEFD133A
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Thu 04 Apr 2024 00:08:28 +0000
ROA not before: Thu 04 Apr 2024 00:03:28 +0000
ROA not after: Thu 03 Apr 2025 00:08:28 +0000
asID: 267942
IP address blocks: 2804:5590:3000::/36 maxlen: 36
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:df:da:69:9a:c7:76:d8:8e:62:70:15:d7:7d:34:55:ee:fd:13:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Validity
Not Before: Apr 4 00:03:28 2024 GMT
Not After : Apr 3 00:08:28 2025 GMT
Subject: CN=4747C52D162B75681C92F7B7DB8F1489760BF84B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:39:81:7d:5a:d1:a9:38:9a:88:f9:bc:d2:37:
c2:c2:e0:5f:e0:c6:28:96:36:2a:51:55:15:c6:05:
82:d2:96:05:3d:82:5e:ae:27:28:11:ec:1f:9f:77:
78:1f:ed:eb:bf:14:ef:e8:ee:6e:be:53:b5:26:94:
97:d4:d0:c0:40:48:df:27:13:1e:6b:0a:70:e9:bb:
48:98:2c:f2:a2:f9:11:26:79:75:2b:e4:85:95:74:
3d:0c:68:26:f7:c7:e5:d6:77:7a:36:e4:05:fc:59:
da:7b:55:4c:1b:05:f5:f5:c4:99:31:ee:2a:f8:b8:
88:98:16:c9:29:13:82:15:04:fa:a3:4b:a1:fb:90:
64:e3:d8:2e:96:b9:65:b1:b3:bd:34:cf:02:b8:52:
6f:2d:81:d3:ba:7f:8b:21:ea:16:34:6a:e0:05:72:
d1:f4:65:23:f0:07:06:d0:8a:e4:ad:58:2f:00:10:
59:6b:00:89:0a:99:96:70:98:0e:2e:38:65:94:2c:
05:45:eb:dd:6d:db:ad:4f:9f:34:48:16:7f:2c:2c:
a2:f3:54:25:71:70:a1:a5:fa:17:3b:b3:01:6e:97:
04:94:d2:0e:0c:72:2c:56:a2:df:e3:90:be:42:0a:
16:fe:44:91:58:28:23:fa:f4:1f:75:53:e8:c1:de:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:47:C5:2D:16:2B:75:68:1C:92:F7:B7:DB:8F:14:89:76:0B:F8:4B
X509v3 Authority Key Identifier:
keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a333030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:3000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:72:a4:31:8a:b8:7b:82:a4:90:6b:b8:b1:28:a7:52:7b:cc:
c0:c5:99:f2:24:8c:4d:29:15:d1:01:64:bd:21:67:76:1c:f7:
cb:7b:22:76:29:5e:a4:55:12:79:56:97:8a:c2:a8:31:26:6d:
66:20:8f:f5:87:be:70:74:bc:ba:d4:4c:08:3e:68:6e:af:7f:
3f:3a:e5:a1:87:18:88:cf:9c:3c:96:f7:6a:32:1c:d3:74:d3:
47:e4:89:ee:ed:fe:b2:92:66:45:ec:84:c9:58:12:84:98:8f:
ee:3b:a2:1f:19:13:62:50:a2:f0:ad:bb:86:9b:23:01:58:60:
2d:a6:fa:6f:7e:f7:b0:71:64:99:bd:87:1c:02:1d:e2:bd:3d:
20:55:db:b3:10:25:c4:12:ed:d9:93:50:80:4f:f8:94:07:4a:
a9:20:fe:58:02:98:6d:29:4b:05:e9:cb:72:5c:68:f8:02:3f:
34:2c:6a:2f:bb:34:e9:7b:d1:8b:4c:3c:6d:65:ef:43:9c:8e:
7f:c7:de:26:0d:cd:60:d7:aa:36:08:fd:82:c7:cb:20:69:e7:
38:1b:c3:0b:05:62:ce:e0:c8:07:5a:cf:0b:73:c0:2e:19:04:
a2:5e:c7:bd:7e:26:87:cb:aa:5a:a2:e4:fc:41:b8:17:6b:92:
47:18:4a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 15:48:39 2024 by rpki-client on console-ams.rpki-client.org