Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36372e302f32342d3234203d3e20323638343434.roa
File: 34352e3136312e36372e302f32342d3234203d3e20323638343434.roa (raw, json)
Hash identifier: v39rVGzqSw+k/Ayp6AkuOCDhiad4pk37zS9Qi7az45k=
Subject key identifier: 70:5F:09:45:4A:C0:B3:88:D0:7D:76:0C:86:E0:9C:1D:8B:11:D7:4D
Certificate issuer: /CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Certificate serial: 78FFD15DC0EB8F544D6935EEB3C9D9A603BCF49A
Authority key identifier: D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36372e302f32342d3234203d3e20323638343434.roa
Signing time: Thu 04 Apr 2024 18:50:02 +0000
ROA not before: Thu 04 Apr 2024 18:45:02 +0000
ROA not after: Thu 03 Apr 2025 18:50:02 +0000
asID: 268444
IP address blocks: 45.161.67.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:ff:d1:5d:c0:eb:8f:54:4d:69:35:ee:b3:c9:d9:a6:03:bc:f4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2B319B1450F44E4DA3E3080C1BD341451656202
Validity
Not Before: Apr 4 18:45:02 2024 GMT
Not After : Apr 3 18:50:02 2025 GMT
Subject: CN=705F09454AC0B388D07D760C86E09C1D8B11D74D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:34:24:8d:66:26:fe:88:c6:f8:03:f9:7d:
9d:13:84:c4:16:77:9a:28:bc:e7:c4:f0:24:d0:0e:
c9:40:11:2c:6c:89:b8:49:59:26:6e:f6:26:09:df:
86:a2:ba:d8:64:eb:eb:ba:1b:2a:ef:56:53:e7:cb:
46:33:3e:14:e3:cb:34:31:e8:5a:4e:bf:24:07:ad:
0b:47:2a:0b:3f:9c:7b:ee:07:a6:01:67:21:00:25:
6c:6d:ea:a4:51:d1:f8:d5:67:77:38:ae:1b:bb:57:
dd:83:e0:67:b9:7e:5e:1d:6d:84:4b:46:66:a5:ff:
a7:8f:28:24:80:49:39:90:3e:28:e9:60:fb:cc:2f:
b4:1f:0a:7c:c3:3f:49:a5:2d:60:cf:f2:41:9a:d2:
02:9a:b0:bd:af:78:af:86:c0:d4:32:7e:11:27:f1:
e4:4c:32:7d:5d:9d:66:71:74:45:28:d5:87:cf:86:
3a:2c:07:c4:49:f8:4a:d1:f6:0c:13:0b:f7:f8:a1:
99:f5:71:3b:1f:af:91:62:e6:3f:a8:ca:a0:31:92:
5f:b6:fa:af:d9:49:60:2d:9b:6e:8b:21:32:90:52:
08:58:54:02:39:72:d7:84:d7:d8:7d:ed:73:e9:8c:
ab:b6:f4:d0:38:90:fd:cf:c3:3f:0b:1a:b5:ae:80:
cb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5F:09:45:4A:C0:B3:88:D0:7D:76:0C:86:E0:9C:1D:8B:11:D7:4D
X509v3 Authority Key Identifier:
keyid:D2:B3:19:B1:45:0F:44:E4:DA:3E:30:80:C1:BD:34:14:51:65:62:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/D2B319B1450F44E4DA3E3080C1BD341451656202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D2B319B1450F44E4DA3E3080C1BD341451656202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/1/34352e3136312e36372e302f32342d3234203d3e20323638343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.67.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ff:da:b2:3e:00:19:fd:17:0d:88:1a:b6:68:f1:69:77:4b:
10:da:3f:7c:8f:90:10:f4:bc:b3:5d:d5:e8:ce:8a:78:f4:66:
1d:6f:67:88:70:0f:90:cf:b2:1d:77:15:71:45:e3:4c:bd:22:
d3:78:bc:df:36:08:32:48:67:d2:df:3e:95:81:d6:98:35:3b:
f8:aa:9d:36:0c:56:bb:9e:af:ae:8d:02:cf:c4:b4:b8:84:e8:
ed:b3:a2:62:60:96:95:27:e5:12:ff:15:7b:9a:d8:1c:9e:ce:
19:7b:35:26:c3:d6:0d:7a:7a:98:7f:18:43:db:c1:2a:e3:a5:
61:de:5c:89:0d:19:b6:55:49:ad:2f:ee:ab:64:4b:6a:61:1a:
00:43:79:d7:7f:9a:d8:b2:a7:78:6e:4f:26:ca:4b:0d:d5:88:
bb:b5:8f:ae:4e:18:7b:63:80:a0:5f:c8:87:dd:56:f0:16:34:
33:5d:a7:3d:44:03:ed:ac:22:a2:b6:6e:d5:9b:6f:ff:80:93:
d3:b7:fa:9d:e8:68:93:1b:74:6f:e9:0f:10:23:9a:81:76:0d:
f7:d0:bb:31:fa:59:06:46:5c:ec:fd:b5:78:a9:40:d8:a9:a8:
cc:c0:e8:11:4b:b7:04:ce:56:8a:12:12:5a:67:08:e7:01:a4:
41:09:fc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 19:10:59 2024 by rpki-client on console-fra.rpki-client.org