Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa
File: 34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa (raw, json)
Hash identifier: lcA7VLne9OMYMZRMKbquv6PFiSO9VVs+iWg5+yefyHY=
Subject key identifier: D7:71:F0:35:08:41:E5:D7:BC:A5:27:B0:25:91:AC:D4:A1:98:00:2C
Certificate issuer: /CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
Certificate serial: 3236DEEA67052029F62EACD654A5A3D30836031F
Authority key identifier: 14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa
Signing time: Mon 12 Feb 2024 12:26:43 +0000
ROA not before: Mon 12 Feb 2024 12:21:43 +0000
ROA not after: Mon 10 Feb 2025 12:26:43 +0000
asID: 269041
IP address blocks: 45.178.168.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:36:de:ea:67:05:20:29:f6:2e:ac:d6:54:a5:a3:d3:08:36:03:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14F61AD290A8DAF8B52D14976633A357B454AB5B
Validity
Not Before: Feb 12 12:21:43 2024 GMT
Not After : Feb 10 12:26:43 2025 GMT
Subject: CN=D771F0350841E5D7BCA527B02591ACD4A198002C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:64:ac:58:9d:c7:c2:da:3f:35:70:8e:cb:3f:
d5:5f:d0:e7:dc:2b:0f:8a:1b:d8:0b:f4:a1:fa:05:
32:db:23:0b:d4:07:8d:2f:6a:16:24:42:3e:37:2f:
6b:b2:cc:f4:67:2a:2e:cf:05:9c:9f:61:93:a8:dc:
18:98:47:d1:79:a5:5d:72:32:d4:3e:90:3a:6c:42:
9e:e6:be:ee:99:b5:79:45:04:d5:25:aa:29:10:8f:
9e:78:d1:6e:10:b0:f6:2f:bb:76:38:fd:90:f5:51:
d1:04:35:c7:ca:0f:78:34:f2:72:4d:d1:a3:45:64:
b8:fb:84:b0:7b:2e:d3:68:ab:29:42:35:14:32:22:
db:38:c0:6f:1e:87:37:bb:30:22:2b:ba:f3:58:0c:
72:51:2d:76:82:6f:bc:6f:ba:27:52:52:da:f5:be:
ca:58:3f:8c:fb:36:2e:4a:58:a5:d1:0e:90:73:a6:
89:36:be:ae:1f:72:d4:e5:c5:6d:f7:3d:15:82:c0:
f2:a5:8f:d7:d6:74:ab:43:aa:9b:12:19:d5:84:0e:
24:d3:af:83:ee:f6:e9:40:05:e4:fb:6f:83:cd:c9:
1c:d8:9a:09:3f:4b:00:23:f7:df:da:58:20:d1:73:
8c:df:4e:d2:f2:d2:2a:1b:a3:29:38:e5:30:ba:85:
f0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:71:F0:35:08:41:E5:D7:BC:A5:27:B0:25:91:AC:D4:A1:98:00:2C
X509v3 Authority Key Identifier:
keyid:14:F6:1A:D2:90:A8:DA:F8:B5:2D:14:97:66:33:A3:57:B4:54:AB:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14F61AD290A8DAF8B52D14976633A357B454AB5B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FX6j1SCCW1tqSAcMDnMcykSQopqLMfLQLh3MsnENKH4h/0/34352e3137382e3136382e302f32332d3233203d3e20323639303431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.178.168.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:14:27:46:0d:32:fd:3c:51:fc:9f:6e:7e:4e:0c:8e:f9:5d:
13:df:20:6f:6e:22:c5:fd:f2:78:5e:d8:5c:08:74:bd:0c:b1:
eb:c9:81:ed:60:b1:06:bd:49:1f:d7:92:50:66:b6:9f:96:9f:
e3:e4:50:54:89:ee:cd:2f:2a:b6:06:fd:79:f7:12:1b:75:ac:
0b:50:9f:b8:72:59:1b:3f:42:84:06:f4:29:0d:61:eb:0e:77:
df:7f:84:21:40:db:47:42:71:60:7e:80:b7:77:3f:68:e9:a4:
c0:aa:71:a7:86:4c:bf:6d:5d:a2:da:ab:4d:2b:02:c5:77:a7:
79:6e:c6:33:23:75:b3:85:82:fb:d8:bf:a9:84:58:19:2e:ff:
cd:c9:39:3f:22:c0:f9:70:c0:3f:dd:c3:6a:ef:13:f9:42:64:
3f:59:46:aa:43:d8:e3:e3:5b:b9:b7:ac:56:ef:68:83:39:0b:
88:85:68:c5:7f:cd:ec:bd:14:4e:98:e1:bf:1b:37:8d:52:ab:
af:bb:e9:5a:f4:74:49:45:5c:6d:9f:50:d7:81:ac:29:66:b0:
0b:66:83:2b:6b:64:ad:3e:ac:09:71:09:30:f0:8b:ee:df:00:
d3:11:6a:38:a4:61:0c:db:f1:db:ec:16:ad:42:eb:4f:d4:5f:
cc:be:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 11 03:38:55 2024 by rpki-client on console-ams.rpki-client.org