Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa
File: 3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa (raw, json)
Hash identifier: Gw4D22PW+Jca9g83q5eV13QHatl4YOq+GFLYYPwTQuU=
Subject key identifier: 2B:C0:38:2B:54:B7:3B:11:2C:41:19:7F:4C:5C:23:E1:2C:7E:BE:B2
Certificate issuer: /CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Certificate serial: 2E3E8A8D9B6F371C5442858AF1432311472AE433
Authority key identifier: 99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa
Signing time: Thu 04 Apr 2024 13:14:16 +0000
ROA not before: Thu 04 Apr 2024 13:09:16 +0000
ROA not after: Thu 03 Apr 2025 13:14:16 +0000
asID: 264915
IP address blocks: 168.228.220.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:3e:8a:8d:9b:6f:37:1c:54:42:85:8a:f1:43:23:11:47:2a:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Validity
Not Before: Apr 4 13:09:16 2024 GMT
Not After : Apr 3 13:14:16 2025 GMT
Subject: CN=2BC0382B54B73B112C41197F4C5C23E12C7EBEB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:83:9d:b5:f7:66:89:ac:13:43:09:b7:4b:
21:36:83:34:d9:90:d7:7e:98:67:98:31:47:3e:f0:
87:d4:74:40:ad:92:da:36:3f:e6:37:22:24:94:05:
ed:9f:86:44:0e:ec:68:ed:18:8a:5f:f9:43:18:55:
fd:41:b5:46:43:aa:69:c4:7c:4d:06:b4:1f:04:f3:
c8:d4:e8:e6:fd:1c:3d:92:cb:1b:55:cc:66:55:bf:
8b:82:d7:f4:e6:40:13:76:06:1b:f0:e3:27:57:9e:
30:54:40:a5:08:ec:44:9e:60:b4:98:0f:f0:74:27:
3d:f5:70:4f:8a:96:d5:40:ba:85:87:c7:46:03:9b:
f6:7a:71:96:a0:0c:bf:a0:f0:6e:ac:07:af:47:be:
1d:56:9d:cc:af:a0:41:46:75:38:84:18:3c:c0:4f:
ce:33:cf:bb:f0:67:09:12:dc:be:6a:8d:b6:e8:a2:
57:7d:a2:bb:8f:3b:f5:d2:90:df:10:36:83:fc:65:
d1:78:c2:d3:18:44:00:06:30:48:a0:38:39:11:a1:
1d:18:a5:36:f1:d5:69:f9:f9:0f:7d:d4:31:95:28:
3f:30:a1:57:3f:d3:c8:4d:23:52:af:b6:da:d0:d8:
ae:04:c7:d5:9b:a7:b0:8c:53:d2:54:e1:d1:c2:9c:
54:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C0:38:2B:54:B7:3B:11:2C:41:19:7F:4C:5C:23:E1:2C:7E:BE:B2
X509v3 Authority Key Identifier:
keyid:99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232302e302f32332d3233203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.220.0/23
Signature Algorithm: sha256WithRSAEncryption
20:aa:7e:66:40:98:96:67:54:8a:57:3c:5c:42:87:dc:b3:58:
cd:84:7d:0c:39:ef:ce:d3:6b:03:79:85:58:35:d9:f7:09:3d:
31:64:b5:23:e4:be:46:07:38:91:dc:d3:ff:bb:43:be:34:33:
0c:db:10:c9:ea:65:1b:e6:3c:46:8c:d5:7b:07:90:bd:81:4f:
56:3a:65:6a:4d:7b:95:6d:36:58:a0:7a:55:2e:6a:fe:55:97:
af:f8:d5:d5:fa:70:bb:1e:0b:04:af:e3:8f:85:43:f3:af:24:
23:e3:b6:87:82:5b:b5:44:89:3a:6d:94:d1:49:28:77:f7:8a:
55:d6:f4:6a:2b:74:d9:d6:59:c2:6e:04:c4:93:ea:47:5f:8e:
58:91:47:b0:77:dd:5b:31:b4:e3:5f:97:8b:a9:db:d0:32:ef:
90:ae:0b:89:b3:f8:b0:c4:b1:38:5c:a0:49:68:d1:cd:f7:6c:
fd:e8:5e:b4:e6:01:fb:f1:16:5f:ac:6f:b9:2b:da:b2:43:0d:
df:50:07:87:57:e7:90:6b:25:81:23:ef:25:63:4d:06:38:d1:
21:8d:7a:91:93:e7:51:64:6e:eb:9a:c0:f6:ae:06:ec:42:c6:
d9:a1:e9:29:19:c4:51:a5:9e:68:58:2c:e1:19:28:16:dc:67:
34:d6:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org