Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3232203d3e203631363133.roa
File: 34352e3137312e36302e302f32322d3232203d3e203631363133.roa (raw, json)
Hash identifier: F4AOSbWTPqDCnY5PIgjS9PGu/cq1e/jaCJZdUFiuamw=
Subject key identifier: D1:8F:70:CF:E2:1E:39:80:44:F3:32:2F:44:90:FF:9A:90:26:E6:FF
Certificate issuer: /CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Certificate serial: 0B0CCD41D6FACA92B0C7F02F3BD5384638C19295
Authority key identifier: 98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3232203d3e203631363133.roa
Signing time: Fri 05 May 2023 18:43:39 +0000
ROA not before: Fri 05 May 2023 18:38:39 +0000
ROA not after: Fri 03 May 2024 18:43:39 +0000
asID: 61613
IP address blocks: 45.171.60.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:0c:cd:41:d6:fa:ca:92:b0:c7:f0:2f:3b:d5:38:46:38:c1:92:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C29B6BAD3DFBA75179F32575AA4C93667C230F
Validity
Not Before: May 5 18:38:39 2023 GMT
Not After : May 3 18:43:39 2024 GMT
Subject: CN=D18F70CFE21E398044F3322F4490FF9A9026E6FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:db:1b:e7:e2:6f:c5:c8:2f:51:2c:f6:40:e7:
8b:35:cc:6d:b5:00:d0:8b:ff:d9:91:c1:24:4f:b1:
e8:0b:5a:8c:23:20:b5:08:38:3b:02:3a:0e:74:8d:
f1:d9:aa:74:66:d6:77:f1:e6:92:ca:00:3a:24:9f:
38:ec:02:c3:68:bd:73:d1:f9:95:f4:4a:23:b8:64:
26:61:50:e3:ca:7e:78:c2:71:85:f8:7b:a2:f4:f6:
0e:99:77:38:2a:17:10:66:13:80:56:ce:46:ae:78:
a5:c9:a8:32:6f:60:4f:2c:cd:4e:73:d0:99:28:22:
0d:5e:8e:fd:09:7f:b2:2b:9d:47:d7:71:4d:81:79:
e0:c4:9a:50:de:27:b2:55:12:c3:0e:69:2b:2f:08:
1d:67:c4:7a:df:09:15:7f:5b:6a:62:56:78:d9:02:
40:92:6e:76:f8:4c:6a:85:96:2d:9f:e1:2f:bf:60:
4c:65:9a:9e:f7:b7:a2:b0:bb:43:c4:ad:a7:ea:24:
84:0d:dc:78:ab:06:a2:f0:d5:18:54:3c:fd:c0:8b:
ed:10:f5:f9:c4:99:e8:9d:6f:28:8e:44:32:77:e7:
79:7d:23:e0:ae:cc:88:13:05:78:e9:ba:5d:1b:04:
bc:1e:fb:b3:6e:dd:ed:a0:da:69:64:6c:d6:a6:6a:
57:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8F:70:CF:E2:1E:39:80:44:F3:32:2F:44:90:FF:9A:90:26:E6:FF
X509v3 Authority Key Identifier:
keyid:98:C2:9B:6B:AD:3D:FB:A7:51:79:F3:25:75:AA:4C:93:66:7C:23:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C29B6BAD3DFBA75179F32575AA4C93667C230F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D63PA1hfJWr4RTdQnMTHXwmNSSs1ECUhUvPjxPNDXTwT/0/34352e3137312e36302e302f32322d3232203d3e203631363133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:94:04:a4:1d:cc:ed:85:9e:11:f4:b6:2e:02:4c:32:e8:6a:
e8:c2:a9:00:6a:26:b3:6a:f5:50:28:c8:9e:c0:cd:46:f8:9f:
95:55:e6:c4:01:dc:45:74:61:bf:59:d4:ae:49:63:96:b9:c6:
b3:85:29:85:64:0a:3b:5d:06:c9:1e:78:33:9c:ed:92:17:80:
75:b4:e1:73:c9:cf:56:50:b5:33:f7:b5:6f:97:7a:a8:90:90:
33:40:6e:13:0e:84:aa:ee:c9:8c:20:3a:97:59:14:57:6a:c7:
bf:12:c6:34:01:06:ef:67:4a:1a:d8:18:69:13:83:58:de:b2:
81:f9:53:2c:53:24:e5:65:64:72:d2:0d:fa:0c:a6:8e:22:b0:
55:ae:6e:04:cb:38:46:c1:a0:d3:11:5b:63:f3:e4:26:38:75:
e3:12:59:1f:cc:d6:fc:ae:9f:ab:9f:9b:ea:3b:a3:6f:21:33:
ac:34:ed:82:de:cc:4c:3f:4c:c2:6a:a6:41:3f:d5:ea:00:5b:
a5:2c:36:39:31:76:1c:55:89:72:e4:13:dd:f5:05:a2:f8:83:
14:23:4a:10:42:24:f9:87:0a:d9:cb:0c:a1:a3:8e:86:e9:b5:
13:72:0d:cf:93:5a:94:3b:0c:5b:5b:03:69:f9:30:62:b7:f9:
16:f5:75:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 15 05:52:01 2024 by rpki-client on console-fra.rpki-client.org