Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a3a2f33322d3334203d3e20323637393432.roa
File: 323830343a353539303a3a2f33322d3334203d3e20323637393432.roa (raw, json)
Hash identifier: 89VlH2/sTeUKTkwe9xdzj9FgdayGMCFm7aOJACnyBXg=
Subject key identifier: DF:1A:82:ED:A2:90:10:E3:C3:35:0F:C5:6E:E7:5F:DC:58:73:0A:AE
Certificate issuer: /CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Certificate serial: 4A89190987690FCE83065477C6B5259605E8E28D
Authority key identifier: 85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a3a2f33322d3334203d3e20323637393432.roa
Signing time: Thu 04 Apr 2024 00:08:30 +0000
ROA not before: Thu 04 Apr 2024 00:03:30 +0000
ROA not after: Thu 03 Apr 2025 00:08:30 +0000
asID: 267942
IP address blocks: 2804:5590::/32 maxlen: 34
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:89:19:09:87:69:0f:ce:83:06:54:77:c6:b5:25:96:05:e8:e2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85C66F862139EE972B3DD821117B824DD8B6F9D0
Validity
Not Before: Apr 4 00:03:30 2024 GMT
Not After : Apr 3 00:08:30 2025 GMT
Subject: CN=DF1A82EDA29010E3C3350FC56EE75FDC58730AAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1a:e0:96:e8:11:05:ad:0b:6b:1e:7f:a3:88:
a6:40:f3:e9:63:b1:61:26:bb:e0:a9:b5:18:60:03:
09:e8:a1:58:fc:df:63:6a:89:68:41:b9:f7:d7:18:
8d:b3:c9:1c:a4:49:48:79:3b:2a:12:67:27:05:90:
5c:45:4a:cb:ac:21:47:9e:8c:dd:1c:a3:84:b6:37:
4f:fe:00:df:db:01:16:6b:30:ae:fc:c4:19:26:76:
82:d7:e0:ca:9f:de:98:56:9d:88:af:44:ea:57:79:
15:f2:2f:98:5c:d1:37:e3:14:e4:33:0a:e0:54:c3:
3c:5e:f2:f6:5b:be:12:cb:b9:82:35:23:b2:44:08:
2e:bb:29:53:7d:20:05:12:3c:c4:d3:13:0b:c1:d9:
2a:5b:04:39:42:30:37:ee:ec:d7:78:b3:aa:f5:de:
af:ba:fa:d9:8e:68:b6:04:6d:02:8e:5e:7c:00:7f:
36:ad:00:5e:1d:42:50:0b:fd:17:6a:0e:1e:c6:be:
4a:3b:46:7c:d9:68:3e:80:87:24:7e:6b:47:1a:3a:
4b:f1:84:55:88:31:90:96:34:98:d7:23:ba:d9:b3:
61:7c:07:2c:c9:ca:0d:0a:23:4b:56:ac:93:81:a0:
a1:4f:f1:7a:12:70:ab:0f:9b:3c:24:e5:52:f1:f7:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:1A:82:ED:A2:90:10:E3:C3:35:0F:C5:6E:E7:5F:DC:58:73:0A:AE
X509v3 Authority Key Identifier:
keyid:85:C6:6F:86:21:39:EE:97:2B:3D:D8:21:11:7B:82:4D:D8:B6:F9:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85C66F862139EE972B3DD821117B824DD8B6F9D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/1/323830343a353539303a3a2f33322d3334203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590::/32
Signature Algorithm: sha256WithRSAEncryption
65:e3:e4:6e:3a:4f:90:48:cd:c3:68:81:94:e8:27:0c:57:aa:
a3:01:f2:8e:84:15:8d:36:21:82:6f:92:48:cb:a9:5a:3b:f1:
b5:d4:b1:dc:26:c8:b7:5d:2b:11:5e:95:a9:8f:e2:96:9c:75:
6f:19:c9:c3:ca:23:c2:39:15:aa:8c:60:33:6b:fa:52:fb:89:
c0:d5:f3:99:11:0a:04:29:a0:20:37:69:61:be:60:16:eb:7b:
2d:fd:ba:07:b5:cb:c8:62:0b:ac:62:d1:74:d3:be:3a:55:ae:
ff:8e:6e:06:31:fb:73:a7:54:39:e9:c8:6e:b1:99:b4:1a:ed:
6e:3a:ac:ab:d7:c9:86:45:50:39:fc:0b:e9:b8:b0:f5:01:97:
2a:1f:fe:6c:a6:b6:1d:84:e3:cd:ae:cf:b7:01:ad:17:45:fe:
95:80:c7:b7:35:73:35:9f:d5:d4:36:98:fa:29:39:b9:fc:b0:
24:06:37:8d:96:58:51:38:4e:c9:f9:15:ae:f2:eb:1b:2a:49:
6f:a4:79:9a:81:d8:8e:67:ce:b7:a0:08:ab:e7:aa:e6:4a:a4:
19:19:bd:6f:35:98:bb:bf:55:7b:73:4b:a4:f7:62:e6:67:bd:
3a:01:22:e7:bb:5f:87:53:cd:2d:0e:ba:d9:1d:22:9b:3a:64:
26:91:9c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 18:19:04 2024 by rpki-client on console-fra.rpki-client.org