Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
File: 3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier: ADBTieIx25rhsmceMJcTyp7TS0J6awIpp6AIBL0bO4s=
Subject key identifier: 85:8E:F5:9C:55:12:E5:77:47:BB:A0:C9:56:4B:C1:FF:ED:A0:A8:42
Certificate issuer: /CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Certificate serial: 4B7187E5E827F3928D4E721315DC05F78815A619
Authority key identifier: 00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
Signing time: Tue 25 Jun 2024 12:18:56 +0000
ROA not before: Tue 25 Jun 2024 12:13:56 +0000
ROA not after: Tue 24 Jun 2025 12:18:56 +0000
asID: 262503
IP address blocks: 167.249.168.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:71:87:e5:e8:27:f3:92:8d:4e:72:13:15:dc:05:f7:88:15:a6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0085D523C19EB69C5F086AF7848E34ABFC1D67A9
Validity
Not Before: Jun 25 12:13:56 2024 GMT
Not After : Jun 24 12:18:56 2025 GMT
Subject: CN=858EF59C5512E57747BBA0C9564BC1FFEDA0A842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cb:3e:b3:25:96:b5:87:d9:89:ac:ac:03:ac:
42:53:17:b2:9f:c0:58:cd:cd:d3:86:4b:77:53:3e:
22:fe:41:30:96:38:39:41:cc:c7:9a:dc:62:83:13:
1f:af:33:80:9f:5a:b5:62:99:ed:f1:e7:ac:fe:52:
df:53:ad:bb:2f:f0:fc:0e:6e:74:bd:9b:cc:f8:fc:
c6:4e:e3:d0:58:5a:44:30:40:da:1c:82:19:ee:a2:
f0:f4:8b:a8:60:03:70:f6:93:a9:0c:30:31:ac:56:
e7:5f:02:77:98:b2:6c:04:58:f7:47:89:84:e8:6c:
0e:3b:5f:ca:46:6e:e0:77:3b:a9:41:96:cf:86:9a:
43:8b:ce:5f:e7:16:f1:3c:f4:3c:6c:fe:5e:71:5a:
a8:0d:e8:41:c9:02:50:4f:6a:77:64:68:5a:f9:16:
6f:38:d6:cc:2f:bb:e6:fc:60:10:df:92:b7:03:cd:
35:4c:b2:6c:88:99:a5:40:79:4b:3e:9b:72:18:81:
d2:fa:2a:ef:85:f8:fe:7d:27:34:a8:aa:67:5a:e4:
8e:b1:61:d0:b9:60:bb:50:be:1a:dd:66:e5:6a:e9:
0b:b9:1e:42:e7:31:10:5c:f8:49:1d:92:4a:46:20:
e3:76:ce:fd:a4:3d:f8:8c:cf:b5:92:e5:ae:77:b2:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8E:F5:9C:55:12:E5:77:47:BB:A0:C9:56:4B:C1:FF:ED:A0:A8:42
X509v3 Authority Key Identifier:
keyid:00:85:D5:23:C1:9E:B6:9C:5F:08:6A:F7:84:8E:34:AB:FC:1D:67:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0085D523C19EB69C5F086AF7848E34ABFC1D67A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/3136372e3234392e3136382e302f32342d3234203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.249.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:17:8b:de:3a:c9:3a:17:2f:62:81:65:d2:48:44:83:7d:cb:
ee:91:2b:48:ad:06:70:15:6a:5f:2c:8f:ae:72:55:1a:f8:72:
63:1e:4d:f3:f1:50:29:90:ec:08:01:e8:68:3e:8b:85:89:24:
af:e1:5b:12:17:68:fb:7d:b2:01:47:bd:36:f4:36:f0:72:2c:
ba:ef:5e:4a:e4:73:6f:a8:19:d1:54:ba:4b:f6:c5:7a:94:30:
4c:44:4f:cc:4c:e7:d7:7a:04:cb:f1:74:da:dd:14:5d:96:c5:
82:5e:d2:39:e5:aa:7f:c6:62:88:99:04:52:63:05:bf:c4:fb:
df:bc:c9:79:cc:b4:b3:47:08:f9:5e:c9:62:57:be:dd:98:04:
02:b8:96:c3:67:f8:a6:fa:cb:7a:f2:24:ee:e0:84:82:8b:e5:
23:9a:90:09:33:87:99:27:fe:c6:53:18:78:7a:0a:c1:ea:54:
c6:64:f8:66:57:25:0a:6d:f2:73:8d:66:99:e4:2f:74:93:b6:
f9:c2:26:b9:79:9a:b8:61:ac:50:ec:99:5e:f5:63:14:33:dc:
2e:98:a5:75:82:c0:94:97:1b:94:b8:75:45:7d:18:f5:84:78:
03:73:45:1b:a6:a9:2b:ed:49:ee:66:45:7f:53:9c:2a:59:89:
f8:63:31:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 4 21:12:38 2024 by rpki-client on console-ams.rpki-client.org