Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32322d3232203d3e20323638343434.roa
File: 34352e3136312e36342e302f32322d3232203d3e20323638343434.roa (raw, json)
Hash identifier: A+kBUWTatQnshmAQpixzWayNbRLsliT1ADxG31U0X9g=
Subject key identifier: AE:5C:EF:A5:B2:D1:B5:D1:82:54:58:9E:E5:49:8C:4C:A9:F7:AF:04
Certificate issuer: /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial: 791CFFE392AC4AE8C9FF6136BB83CF5E7D82E10B
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32322d3232203d3e20323638343434.roa
Signing time: Thu 04 Apr 2024 18:50:02 +0000
ROA not before: Thu 04 Apr 2024 18:45:02 +0000
ROA not after: Thu 03 Apr 2025 18:50:02 +0000
asID: 268444
IP address blocks: 45.161.64.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:1c:ff:e3:92:ac:4a:e8:c9:ff:61:36:bb:83:cf:5e:7d:82:e1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Validity
Not Before: Apr 4 18:45:02 2024 GMT
Not After : Apr 3 18:50:02 2025 GMT
Subject: CN=AE5CEFA5B2D1B5D18254589EE5498C4CA9F7AF04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:16:71:b9:48:0e:a9:13:30:e4:6c:a1:5a:
aa:46:ef:ef:cc:3a:9c:b5:c1:f4:19:ce:0d:2b:99:
96:01:c6:17:29:8f:67:66:9a:0f:76:94:91:a0:6f:
23:88:b6:b6:76:57:49:9a:d9:2a:cd:19:b0:53:a8:
8c:dc:c4:d6:cf:e4:76:72:98:c7:08:2c:13:90:69:
1a:dc:a3:da:9d:ca:34:38:0c:fa:30:f7:09:17:db:
86:b4:75:bd:3f:f4:aa:21:de:85:9a:28:40:d1:d9:
3d:28:05:0c:46:d0:48:22:52:cf:11:55:5e:ac:f6:
59:ba:79:92:6d:75:a7:2e:dd:05:33:49:a1:8f:73:
9b:b5:b6:0c:c5:1e:a8:be:15:27:04:d5:b2:77:b6:
ef:0f:5e:0e:45:44:0b:6e:bd:05:46:08:94:77:7a:
f0:42:2f:e3:59:cd:0f:68:d1:41:84:96:35:06:3d:
e7:4d:9c:28:a5:c8:b6:52:08:3c:48:e1:9d:6a:76:
72:9f:c4:9c:e4:a5:93:b5:71:9d:3c:2e:14:d6:c1:
be:69:26:29:31:b1:e5:9c:af:6a:46:66:1c:3f:0a:
31:70:e6:7b:b8:ff:7e:ef:f6:41:9d:73:63:5c:c1:
7e:ae:5a:9d:de:65:2a:f9:8b:2f:03:7f:5d:d8:87:
81:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5C:EF:A5:B2:D1:B5:D1:82:54:58:9E:E5:49:8C:4C:A9:F7:AF:04
X509v3 Authority Key Identifier:
keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32322d3232203d3e20323638343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:dc:85:1c:2f:6d:d2:f8:24:90:d5:1b:1c:94:04:ba:d3:eb:
5b:ab:a0:5e:4b:d2:a5:c6:1a:f9:c4:e6:17:88:e6:c7:0e:b5:
01:de:05:04:c0:65:97:ed:ac:4d:cf:0e:de:a4:63:cb:dc:df:
3f:cb:4b:c0:f0:bb:60:0f:ef:cc:67:87:10:b7:0c:4e:d9:d0:
93:6e:5c:b4:ed:61:20:48:ee:f9:e5:7d:ea:9a:35:fe:64:b6:
d2:5d:df:e1:b5:dd:8e:3a:98:5a:95:a2:98:2a:f0:63:61:10:
0c:e3:40:0a:6a:89:26:85:70:01:1f:4a:1e:a1:b7:8e:00:ae:
a6:b7:e4:00:09:a9:eb:71:c8:cf:38:d4:0c:09:81:91:5f:07:
d2:2e:19:66:74:82:6a:4b:a8:47:50:86:b0:b4:ac:e3:3c:46:
37:ad:83:ad:22:92:48:fc:46:bc:44:d2:f4:e7:f7:d3:a9:c7:
3c:1e:8e:a2:de:c8:f7:eb:86:25:5c:62:07:83:61:89:5d:88:
a0:f0:87:a6:95:02:3a:d8:63:87:3f:37:4d:86:b3:59:dd:f2:
4e:4d:8c:54:19:f2:62:61:7e:cc:7f:56:d9:14:6e:5c:fe:02:
ec:25:e6:16:d2:70:7d:61:0b:3b:cf:e4:aa:54:69:4a:ee:76:
e0:9c:53:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:10:59 2024 by rpki-client on console-fra.rpki-client.org