Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa
File: 3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa (raw, json)
Hash identifier: N3EjnqDGfLKBquOx7EAAf37HU5XzWn1PuI/6+MtyG7M=
Subject key identifier: 35:90:2B:45:CC:43:24:6A:0F:67:0F:3D:C4:14:68:69:FD:0C:88:5B
Certificate issuer: /CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Certificate serial: 54A891AA6B7197837765C34143AE7EBA36D4CC31
Authority key identifier: 99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa
Signing time: Thu 04 Apr 2024 13:14:19 +0000
ROA not before: Thu 04 Apr 2024 13:09:19 +0000
ROA not after: Thu 03 Apr 2025 13:14:19 +0000
asID: 264915
IP address blocks: 168.228.222.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a8:91:aa:6b:71:97:83:77:65:c3:41:43:ae:7e:ba:36:d4:cc:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=998C1B9397A86CDEC286CEC4DB5E599D5429D1EF
Validity
Not Before: Apr 4 13:09:19 2024 GMT
Not After : Apr 3 13:14:19 2025 GMT
Subject: CN=35902B45CC43246A0F670F3DC4146869FD0C885B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:59:62:60:3e:8d:22:69:b0:ac:de:ed:16:64:
d3:cc:6a:a6:1e:d7:21:25:f0:4e:9d:1c:bf:d3:b9:
ce:b2:35:a3:c6:9b:5f:b5:e7:10:5a:14:0f:bb:e9:
b7:29:07:27:17:3b:f8:7c:94:5e:56:ca:be:93:9a:
f0:9e:f3:18:74:16:3a:4a:c9:c0:58:29:24:6d:24:
48:84:df:95:10:69:26:df:d4:63:6f:44:be:b5:fa:
40:c1:3a:9e:11:d4:0f:ae:40:89:f0:0e:9c:eb:46:
3e:05:48:9f:32:72:8d:56:f8:a0:44:9b:97:32:0f:
bb:fe:10:1a:23:cd:8a:13:0f:f4:cc:b9:53:d9:99:
f6:b5:cf:c6:63:67:ac:bb:e5:47:67:d2:be:bd:51:
3a:ae:b3:fd:fb:84:ff:b9:87:fa:75:9d:9e:db:e9:
9f:a0:91:7d:ca:00:d2:20:e7:80:43:ea:74:3f:b9:
18:46:a6:94:da:e8:72:0f:6d:39:d2:10:16:c3:ed:
0c:66:de:0b:e2:12:61:61:ca:21:aa:8f:5d:70:30:
c6:96:c3:8b:cf:8c:44:b6:cd:83:a0:63:d4:f9:bd:
d5:ea:7f:56:8e:48:3a:01:63:d5:77:4b:6c:a8:4a:
07:77:81:28:2a:6e:4b:48:ee:2c:35:3b:ea:9a:63:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:90:2B:45:CC:43:24:6A:0F:67:0F:3D:C4:14:68:69:FD:0C:88:5B
X509v3 Authority Key Identifier:
keyid:99:8C:1B:93:97:A8:6C:DE:C2:86:CE:C4:DB:5E:59:9D:54:29:D1:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/998C1B9397A86CDEC286CEC4DB5E599D5429D1EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/1/3136382e3232382e3232322e302f32332d3233203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.228.222.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:fe:1f:92:71:e9:9e:fa:f0:a2:5c:1c:8a:2b:20:19:d0:ce:
63:35:e2:86:14:83:25:4a:16:45:05:c6:4d:fb:80:bf:29:ff:
6a:28:10:6e:2b:ee:81:02:77:04:c0:da:0c:18:8a:45:34:42:
f7:9d:17:6f:79:4d:bf:c3:42:ef:62:1a:de:be:4f:b4:97:d5:
08:e9:07:29:e4:fa:6e:4f:17:8b:eb:26:04:27:d9:d5:0c:ee:
e6:da:77:db:63:a0:b9:93:66:db:86:d2:65:77:2e:45:74:f0:
03:ca:a9:8d:3a:39:ad:6c:e8:41:7e:c6:eb:0d:ad:b8:cc:2a:
1a:f6:af:f2:36:a2:e7:b5:15:65:c2:3b:78:7c:e4:7d:cf:a5:
a2:27:a5:34:7f:d7:45:13:0d:a6:ad:e3:80:09:c7:b7:44:62:
76:27:a4:11:85:c8:b4:b8:01:ef:46:66:b6:79:71:31:24:47:
36:70:d7:e4:51:56:4c:f2:4d:47:7a:64:53:bc:ea:8e:02:9b:
c3:07:71:31:97:b2:90:b0:92:fa:7e:4d:04:eb:a6:8b:da:72:
d5:18:ab:5d:7b:35:e1:83:41:b4:45:01:01:e4:1e:b6:f7:4f:
00:42:3d:01:2e:20:1d:c6:94:1c:26:75:7d:a4:fb:03:70:bd:
a9:b1:b6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 1 10:33:28 2024 by rpki-client on console-ams.rpki-client.org