Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
File: 3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa (raw, json)
Hash identifier: gbmezfCEOxlTKNr1gX85pQg0OYhijU533WoXFANcWn4=
Subject key identifier: 5A:62:B6:99:6C:DD:49:BC:AB:56:34:C3:EA:DE:92:86:07:D8:40:A7
Certificate issuer: /CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Certificate serial: 4EDB35CE285302270ED27E72CFB337CA9767979B
Authority key identifier: 99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
Signing time: Thu 04 Apr 2024 13:14:20 +0000
ROA not before: Thu 04 Apr 2024 13:09:20 +0000
ROA not after: Thu 03 Apr 2025 13:14:20 +0000
asID: 264915
IP address blocks: 168.228.220.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:db:35:ce:28:53:02:27:0e:d2:7e:72:cf:b3:37:ca:97:67:97:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Validity
Not Before: Apr 4 13:09:20 2024 GMT
Not After : Apr 3 13:14:20 2025 GMT
Subject: CN=5A62B6996CDD49BCAB5634C3EADE928607D840A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:ce:8b:c5:07:8b:50:bb:d6:a3:d9:4e:b2:
9c:10:b1:af:b7:b7:0f:17:75:21:01:98:25:08:c1:
f1:4f:37:55:49:eb:ad:cf:cb:82:28:e8:b3:df:d6:
3b:26:7e:12:6d:1a:04:04:0a:d1:e5:ee:9e:4a:d3:
74:a9:e3:28:42:71:3c:8a:f2:3a:36:b1:b6:d3:d4:
22:ce:35:f1:e4:dc:50:e2:06:70:2f:99:48:23:31:
c8:74:3b:72:b8:bb:c9:e1:71:09:35:8c:8a:60:c2:
87:ba:6f:fc:39:bd:9e:1c:53:1c:ea:b6:93:ae:4f:
0c:31:40:98:2b:21:fc:44:6e:eb:8e:e5:5e:94:21:
ac:ea:d8:2f:8a:b5:35:b1:dc:38:b8:97:e6:37:b3:
f1:59:48:99:5e:14:71:bf:cb:e6:fd:fd:9a:dd:b6:
6f:0a:77:2e:52:32:85:63:00:0a:8e:18:2d:90:8f:
27:3c:b8:72:f2:2c:2a:2e:02:64:d7:45:31:07:c3:
81:18:42:b6:0d:17:e2:15:88:2d:0d:ba:96:cc:44:
a0:38:bf:df:7a:be:2a:43:71:d6:3d:07:79:d6:48:
ea:da:6c:3c:87:58:7c:09:e3:06:15:da:aa:39:49:
16:d8:44:da:67:21:5d:5c:b6:ce:4b:07:18:eb:54:
66:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:62:B6:99:6C:DD:49:BC:AB:56:34:C3:EA:DE:92:86:07:D8:40:A7
X509v3 Authority Key Identifier:
keyid:99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232302e302f32322d3232203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.220.0/22
Signature Algorithm: sha256WithRSAEncryption
72:ff:d4:54:0f:93:5f:a7:3c:01:d8:8a:04:e6:b1:2c:dd:78:
4a:cf:6c:5a:a4:d7:92:a6:a8:e8:03:9b:e8:d4:77:97:f8:45:
eb:ed:4a:d8:31:b0:51:74:9c:c9:2f:8d:1d:fe:82:c3:ac:29:
c2:15:6f:08:a6:88:2b:2d:da:2e:31:56:95:85:1d:6c:30:7f:
84:c6:b8:a7:2b:ac:80:a6:c0:13:f1:74:33:55:d5:5c:26:0f:
ed:a8:7d:99:09:b0:15:2a:d1:09:f2:30:8f:70:87:20:c3:d5:
e9:87:7f:fe:a4:53:08:9d:e6:8e:8c:4b:29:c4:ab:3b:12:9b:
c9:58:01:24:92:c7:ea:a7:4a:6a:6d:62:8c:3c:ce:6e:1e:73:
cd:fb:07:dd:a0:98:49:2a:c5:97:5b:18:63:e4:92:59:b5:f1:
3e:67:2b:65:9d:49:1b:75:12:cf:41:08:3f:ef:9e:8b:5d:d0:
6d:7b:69:ea:36:de:89:82:54:54:b8:78:cb:fe:58:4e:5e:18:
27:64:ba:90:39:ed:82:8f:ed:e7:79:83:cb:7a:6d:2b:c6:37:
35:5f:b0:05:3a:fc:d7:c4:ec:e7:01:69:9f:fd:8d:48:93:e4:
9b:5e:41:40:bf:f6:46:c0:82:42:c6:56:5e:28:d5:bd:19:7b:
c2:47:53:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org