Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
File: 34352e3136312e36342e302f32332d3233203d3e20323638343434.roa (raw, json)
Hash identifier: XSoJcVJ0xqVcXgam0uMigt8lkw8qJ15dItPpQWSLRwM=
Subject key identifier: 0A:A3:90:AC:E1:CA:C9:F8:20:8C:5E:24:5D:90:E9:B7:06:7F:3E:B7
Certificate issuer: /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial: 3D5B781CB3BA05DDA2044AEB6F6C2BEE81F833DE
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
Signing time: Thu 04 Apr 2024 18:50:02 +0000
ROA not before: Thu 04 Apr 2024 18:45:02 +0000
ROA not after: Thu 03 Apr 2025 18:50:02 +0000
asID: 268444
IP address blocks: 45.161.64.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:5b:78:1c:b3:ba:05:dd:a2:04:4a:eb:6f:6c:2b:ee:81:f8:33:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Validity
Not Before: Apr 4 18:45:02 2024 GMT
Not After : Apr 3 18:50:02 2025 GMT
Subject: CN=0AA390ACE1CAC9F8208C5E245D90E9B7067F3EB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:7b:8a:3f:95:c9:84:bb:0d:62:e8:a9:04:
31:a9:09:84:5b:0a:e2:b7:63:92:3e:62:bc:ec:e9:
f0:24:98:60:ec:b5:27:0e:5e:83:9f:35:a1:f1:6e:
43:7d:af:f1:fb:14:c5:ea:eb:e1:d8:fc:13:08:64:
0e:ac:c0:0d:60:fe:7a:38:88:17:97:a6:bf:66:5f:
dd:be:5c:80:79:1e:a2:2d:d1:3b:ed:95:62:ff:a6:
17:ed:7d:cd:1e:a9:19:9b:f4:cc:3c:31:76:5f:c5:
48:13:14:a1:7d:0d:01:00:dd:50:75:4d:08:09:fe:
29:bc:bc:8a:c1:da:65:02:3d:b6:d9:44:fb:d2:c2:
9f:18:b7:2f:81:23:a7:de:36:03:61:a4:77:cd:89:
17:d8:f5:28:0b:45:7f:ba:4e:f3:38:eb:d0:af:10:
82:65:ef:41:c7:f7:be:02:51:e2:2d:4f:48:a4:80:
4d:a7:00:8d:e7:b1:31:c4:de:75:b4:2c:a9:71:66:
c3:cb:4e:2f:8f:13:33:ea:0f:8e:12:f4:8a:2c:65:
0f:a6:5d:67:d5:25:dd:dd:83:83:df:6e:7c:42:a8:
02:9f:ff:44:f7:ff:53:99:59:cc:fa:17:30:5c:e8:
dd:b6:b7:b8:71:7d:cc:2b:4a:b2:0d:9e:3c:0e:ef:
f2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A3:90:AC:E1:CA:C9:F8:20:8C:5E:24:5D:90:E9:B7:06:7F:3E:B7
X509v3 Authority Key Identifier:
keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36342e302f32332d3233203d3e20323638343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.64.0/23
Signature Algorithm: sha256WithRSAEncryption
55:b3:e4:ae:4b:ba:ea:62:4f:49:cb:95:4a:fc:24:0c:f6:6b:
d2:60:c3:02:a1:79:dc:23:7f:08:97:54:bb:f8:55:07:a2:49:
f3:84:d5:09:12:8c:1e:fd:88:55:db:f2:33:89:49:02:b4:78:
40:22:53:ef:30:9d:c7:61:3e:3a:42:87:51:a9:d9:e3:3b:d0:
91:dc:aa:22:a2:70:42:28:6a:fe:88:e8:23:d3:6a:cb:4c:51:
90:83:a2:57:75:d3:df:00:18:87:e6:1a:08:98:c6:b2:56:27:
95:8d:9b:c1:e0:7b:4f:b4:1e:e3:15:5e:b5:32:e5:be:16:f8:
00:f5:73:1c:8e:5f:5d:ca:a5:da:71:ee:c7:a3:47:0f:f2:c9:
a1:22:0a:5b:42:49:5a:ab:ca:62:a7:5e:57:42:55:b0:17:5b:
76:b0:6e:f6:01:c6:82:3d:8f:fb:82:17:d0:91:26:87:13:0c:
a5:5a:6e:26:5f:5c:d1:48:f6:07:8a:92:8e:a6:0b:10:6e:48:
56:7d:ba:0f:4c:65:b9:1f:8b:ae:3e:e1:d5:ba:fa:4b:e1:97:
c4:06:a7:91:22:46:0d:b0:53:53:be:3f:8f:cb:af:f3:24:2d:
24:6a:49:80:b9:81:94:69:9c:a1:6b:72:7c:27:3e:64:fd:0e:
e6:f0:21:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 21:45:03 2024 by rpki-client on console-ams.rpki-client.org