Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3230302e33342e3231382e302f32332d3234203d3e203631363839.roa
File: 3230302e33342e3231382e302f32332d3234203d3e203631363839.roa (raw, json)
Hash identifier: TQIV1JQwtxn9ceiRU0S5zFlg0oN5QeexzJNSoa4Ra0Q=
Subject key identifier: 85:0D:27:AB:A0:94:D4:4A:70:6F:5D:23:4A:7D:D6:7E:5E:92:8E:A5
Certificate issuer: /CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Certificate serial: 2A00B2900930AAC409B90A22AE23AE611750B129
Authority key identifier: 25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3230302e33342e3231382e302f32332d3234203d3e203631363839.roa
Signing time: Wed 10 Apr 2024 13:37:18 +0000
ROA not before: Wed 10 Apr 2024 13:32:18 +0000
ROA not after: Wed 09 Apr 2025 13:37:18 +0000
asID: 61689
IP address blocks: 200.34.218.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:00:b2:90:09:30:aa:c4:09:b9:0a:22:ae:23:ae:61:17:50:b1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=255864F0CB72C240E9DCD6B0E6B40AC16495DBA7
Validity
Not Before: Apr 10 13:32:18 2024 GMT
Not After : Apr 9 13:37:18 2025 GMT
Subject: CN=850D27ABA094D44A706F5D234A7DD67E5E928EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f8:c2:ff:bc:b4:16:6a:c4:be:33:a7:07:54:
34:76:e0:49:74:d4:f2:3e:9c:4c:d8:61:1f:69:b4:
ae:dc:a7:8e:10:b5:a4:8f:0d:3e:ac:d2:a3:ef:1c:
99:e8:7f:7d:e6:7b:47:3d:ab:e2:a8:ce:dd:4d:36:
22:17:86:0b:b8:e1:0c:ec:da:c0:73:9d:bc:eb:ec:
16:d6:99:da:fa:92:19:56:47:96:ad:db:b3:1f:12:
bb:7c:60:20:2b:07:2b:d3:be:50:94:18:f1:5e:06:
45:79:ec:3f:88:d5:7d:30:33:1b:e8:4f:f0:23:00:
c8:45:a1:fc:6f:c0:d9:82:09:fd:25:bb:6b:19:7c:
6e:12:41:04:9d:6b:af:fd:10:7b:c1:6a:b2:b2:56:
16:e2:f2:2f:b0:5c:be:33:5d:1a:3f:a4:8a:6e:e1:
72:32:d0:a3:b0:78:87:e5:fc:18:bb:7e:64:63:2c:
5b:61:4b:21:5f:47:67:b8:c4:97:36:4b:6b:30:0a:
f7:d0:a2:c2:0d:b5:3f:75:08:5f:f6:57:b4:66:d2:
47:94:b4:43:30:c4:34:95:4d:7a:88:e2:4e:fe:cd:
a5:b5:2e:bf:65:1e:46:75:40:46:4c:76:ec:f9:ca:
64:36:87:68:b9:99:e1:4c:4f:b2:7d:89:43:7f:a7:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0D:27:AB:A0:94:D4:4A:70:6F:5D:23:4A:7D:D6:7E:5E:92:8E:A5
X509v3 Authority Key Identifier:
keyid:25:58:64:F0:CB:72:C2:40:E9:DC:D6:B0:E6:B4:0A:C1:64:95:DB:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/255864F0CB72C240E9DCD6B0E6B40AC16495DBA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85nwp9sPLtL25iEL1g4R2d9RzsmzkRVCG3WterEKZrXu/1/3230302e33342e3231382e302f32332d3234203d3e203631363839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.34.218.0/23
Signature Algorithm: sha256WithRSAEncryption
d4:60:67:05:dd:6b:24:00:1b:fb:33:03:da:e9:b7:01:28:75:
23:90:21:18:e3:bd:a3:c9:57:22:13:ae:63:2b:7d:45:8e:95:
2b:ee:43:e4:5e:65:0d:bc:80:cb:4c:9e:e8:df:99:24:ec:9f:
91:ef:be:27:5b:e8:28:b5:29:b9:24:1e:48:6d:92:85:eb:c2:
6a:56:3c:48:9f:1d:ba:1b:d1:ca:e3:99:e2:62:35:5e:a3:0f:
17:8b:46:ff:ab:10:25:50:3d:1c:6e:3b:1d:9a:08:7c:1c:75:
f6:0b:82:4b:b2:89:68:ea:34:98:35:6e:9d:76:1a:bd:44:9f:
c0:15:ec:86:27:66:27:06:1d:b1:2f:02:46:da:2f:6f:82:8b:
ea:aa:b1:c5:d5:c1:eb:6c:92:b8:3f:83:29:a9:1f:02:b0:dd:
9b:75:74:fc:94:54:08:ec:b7:5a:8d:19:9b:72:cb:51:34:8b:
fe:1f:44:34:35:5f:f5:43:1f:db:c7:eb:84:18:d8:a8:8a:dc:
a9:a1:9d:11:dd:c8:2f:fa:62:a5:b5:62:8a:df:a9:95:c7:ff:
13:9f:a2:99:5e:cf:97:09:62:d7:02:28:e6:d3:a9:1a:79:32:
04:f8:d5:a4:6c:71:96:76:84:0f:58:0b:5e:24:7e:04:b6:8f:
73:86:48:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 12:20:55 2024 by rpki-client on console-fra.rpki-client.org