Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa
File: 34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa (raw, json)
Hash identifier: dr1F35BStNYFzptpR4k3fff2d7vpLrg347nEGfBnUNc=
Subject key identifier: 85:1D:EE:D9:5A:5F:F5:D2:21:A2:C0:41:21:A7:E2:16:B5:72:3D:16
Certificate issuer: /CN=1EFFCE8480188138CE6428270E5D1F413360AD3C
Certificate serial: 277FBCD308426016B28A9A52C72AFCC841FBEC19
Authority key identifier: 1E:FF:CE:84:80:18:81:38:CE:64:28:27:0E:5D:1F:41:33:60:AD:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EFFCE8480188138CE6428270E5D1F413360AD3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa
Signing time: Thu 10 Oct 2024 00:02:46 +0000
ROA not before: Wed 09 Oct 2024 23:57:46 +0000
ROA not after: Thu 09 Oct 2025 00:02:46 +0000
asID: 269681
IP address blocks: 45.191.120.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:7f:bc:d3:08:42:60:16:b2:8a:9a:52:c7:2a:fc:c8:41:fb:ec:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1EFFCE8480188138CE6428270E5D1F413360AD3C
Validity
Not Before: Oct 9 23:57:46 2024 GMT
Not After : Oct 9 00:02:46 2025 GMT
Subject: CN=851DEED95A5FF5D221A2C04121A7E216B5723D16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:f2:1e:d8:e5:13:c7:98:38:d4:02:d5:81:
2d:35:5e:6b:3b:2e:8b:c5:73:53:8c:ab:0d:c2:71:
7f:0c:94:ad:d8:1f:19:17:f0:db:d4:27:91:e8:79:
d2:d3:a7:1a:eb:3a:0b:4e:57:7c:7f:71:29:0d:bf:
9e:86:62:49:98:5e:d4:08:25:1a:fc:14:1e:30:aa:
8d:75:bc:b9:d2:cc:5b:d8:40:d1:41:47:f5:5a:c1:
56:97:c6:f6:12:a3:9c:b3:c3:be:4f:ac:4a:18:f6:
c6:0f:6a:89:8e:91:59:91:0a:71:a3:1f:26:08:16:
cc:c1:17:cb:7b:69:91:6e:0c:a2:00:42:e1:20:7c:
a0:5a:cf:43:cc:c5:2d:11:fc:21:ed:17:e8:8a:9f:
f4:9a:64:72:98:c6:e6:0c:31:b5:25:f6:6b:cb:c5:
77:00:f0:a2:be:90:1f:75:3c:5d:b7:8b:f7:53:e5:
5d:46:7a:9c:b5:c3:3a:b4:9d:18:b2:92:3f:b4:d1:
ed:95:56:eb:84:1d:64:af:e3:ff:01:9b:6d:ec:8c:
f6:bf:d7:b7:37:b1:22:38:a9:17:77:22:70:43:20:
38:65:c9:eb:7a:f7:73:c2:8b:29:0a:e8:ea:44:5f:
32:fc:86:04:c4:9f:5e:0c:d3:fc:45:1d:62:96:e2:
d0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1D:EE:D9:5A:5F:F5:D2:21:A2:C0:41:21:A7:E2:16:B5:72:3D:16
X509v3 Authority Key Identifier:
keyid:1E:FF:CE:84:80:18:81:38:CE:64:28:27:0E:5D:1F:41:33:60:AD:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/1EFFCE8480188138CE6428270E5D1F413360AD3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1EFFCE8480188138CE6428270E5D1F413360AD3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QLJnR6BK4ETR5D8hDsXRFYoPhAfcgAkw5CZEpSwLN3C/0/34352e3139312e3132302e302f32322d3234203d3e20323639363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.120.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ef:df:e5:ff:36:0b:3b:97:59:0c:1d:41:a9:47:c4:fb:98:
24:93:d0:9c:4c:74:0a:a3:96:2b:a1:40:b3:6a:04:12:f6:4a:
0b:df:6a:fc:74:a8:d7:3c:54:94:31:36:8d:41:93:2a:3f:69:
89:9f:10:63:c8:21:ba:dd:9c:7c:bc:52:2c:c7:f9:2f:b4:4e:
fe:c4:b3:65:e7:03:94:47:40:4c:aa:8b:c9:5d:e7:78:01:ee:
40:95:f9:37:cc:f6:3f:21:ae:ad:d0:e5:11:69:6d:46:b3:9e:
61:8a:b4:11:b1:0a:69:37:a4:91:e1:26:a9:f5:2a:90:17:d8:
44:8c:1e:4f:11:94:eb:3a:1a:00:a2:e1:1c:a2:b8:12:5c:0d:
fb:4c:9c:5c:69:5a:83:28:79:27:15:3f:9c:f5:96:83:31:ee:
02:fd:4c:77:73:3d:90:a5:3f:73:28:4e:1e:81:21:8e:bc:d0:
57:27:dd:61:43:d1:55:d2:eb:1d:b1:fa:24:cb:0f:9e:f0:75:
7d:ec:65:b1:d1:e2:db:13:c8:91:cf:7e:cb:43:e7:99:8b:83:
57:a5:a8:59:d6:64:ab:f9:96:ef:d8:50:f8:0b:e6:41:b6:3a:
72:a4:12:a6:8f:c3:c1:14:f5:4a:d9:c6:f1:5f:12:45:27:b5:
1f:92:fd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 08:44:35 2024 by rpki-client on console-ams.rpki-client.org