Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e20323032.roa
File: 34352e3233302e38342e302f32332d3332203d3e20323032.roa (raw, json)
Hash identifier: yEX5D9fNnMxrL5u1CHqzQ9kH5/m9bbXTMbfJCt5sE2s=
Subject key identifier: 39:5A:2E:78:D6:ED:7F:DB:AD:05:61:E5:D0:67:6F:4C:C6:08:56:01
Certificate issuer: /CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Certificate serial: 1F3F2C7EEB6471E0AAF9FAF46AE88851118F5B53
Authority key identifier: EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e20323032.roa
Signing time: Wed 21 Feb 2024 21:40:49 +0000
ROA not before: Wed 21 Feb 2024 21:35:49 +0000
ROA not after: Wed 19 Feb 2025 21:40:49 +0000
asID: 202
IP address blocks: 45.230.84.0/23 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3f:2c:7e:eb:64:71:e0:aa:f9:fa:f4:6a:e8:88:51:11:8f:5b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA076A5314557BEDD4FA84612D12ED1A33EC7D8A
Validity
Not Before: Feb 21 21:35:49 2024 GMT
Not After : Feb 19 21:40:49 2025 GMT
Subject: CN=395A2E78D6ED7FDBAD0561E5D0676F4CC6085601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:f8:18:7c:85:8c:e9:46:c2:be:e9:59:49:
90:e3:8d:aa:79:d1:de:d8:92:b5:d5:50:eb:37:cd:
73:53:3b:dc:a8:4d:5f:fd:d3:89:27:5a:09:87:00:
47:46:8c:2c:07:97:35:97:e9:43:06:1b:2f:64:69:
2f:a7:b8:d9:9c:4a:82:d5:3a:33:2d:f8:04:a1:92:
dd:33:fa:8d:59:53:fc:08:9d:a4:c9:44:1c:c5:bb:
94:73:49:5d:34:78:d3:cc:4d:42:7a:d6:ab:5f:25:
52:a5:f5:c0:52:1b:4d:d5:9d:3b:40:ad:4a:d3:d7:
93:1c:bb:4c:37:23:c7:52:36:e1:37:91:46:eb:fe:
54:50:8e:e6:8d:d2:12:da:f9:00:94:aa:32:93:2d:
3d:a7:1e:03:3b:bc:26:6c:75:5b:18:c3:1b:26:1f:
62:70:ed:8e:5e:b5:39:7c:55:03:27:8d:e5:0b:c4:
e8:69:10:e5:a8:79:2a:59:2c:e6:8b:31:b8:12:85:
45:c2:92:79:f7:12:d8:2f:44:31:f3:97:ec:b1:73:
7a:b8:e5:04:fc:70:5f:1b:36:23:6a:36:b3:ca:1f:
8f:b2:12:eb:af:ab:da:3d:dc:e5:22:e3:3a:a0:31:
a1:f7:f9:3f:06:b3:cf:be:e0:15:fc:4f:e1:71:dc:
21:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5A:2E:78:D6:ED:7F:DB:AD:05:61:E5:D0:67:6F:4C:C6:08:56:01
X509v3 Authority Key Identifier:
keyid:EA:07:6A:53:14:55:7B:ED:D4:FA:84:61:2D:12:ED:1A:33:EC:7D:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EA076A5314557BEDD4FA84612D12ED1A33EC7D8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3332203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.84.0/23
Signature Algorithm: sha256WithRSAEncryption
19:ed:cd:d6:9c:e0:c4:07:3e:c0:60:92:6d:db:1b:d2:9b:65:
be:38:0d:de:08:f1:13:96:6a:0e:94:bb:42:53:fa:b6:44:82:
c3:83:10:a5:d2:7c:7b:db:27:ba:d8:07:dd:12:ed:da:e5:3a:
bf:63:75:66:df:9b:93:d7:ac:df:ae:5b:68:3c:8e:b5:ee:9d:
d5:f6:b5:c8:b1:93:eb:3e:15:96:58:5f:e6:ef:0f:c6:fc:a7:
5c:5d:db:8b:01:63:19:d6:9c:ba:45:b5:7b:a2:fe:ae:87:25:
5a:f8:75:af:43:b8:75:e3:68:68:0a:44:9c:83:89:f8:2e:4e:
07:9e:27:4b:6c:ec:79:30:c8:e8:2e:bf:57:b4:ca:27:e3:db:
67:ca:91:ca:62:1b:19:c1:d3:cb:f7:7f:3d:b9:64:1d:6b:cf:
f6:62:93:f1:15:c4:15:f4:f6:7c:ab:88:cf:35:ba:97:39:db:
24:f4:c1:33:20:5d:12:5c:a8:4e:26:17:fb:f7:9f:94:d4:06:
9c:fa:4a:6e:41:aa:d7:b2:ce:cb:f4:74:a4:f2:03:8e:e5:fe:
16:19:b5:83:65:0f:dc:98:c6:c7:cd:e4:a8:aa:2f:02:3f:31:
f8:65:f6:97:c6:40:9b:44:0c:ac:62:49:9a:38:f3:26:e7:bd:
7d:71:79:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 24 14:50:50 2024 by rpki-client on console-ams.rpki-client.org