Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa
File: 34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa (raw, json)
Hash identifier: S+a7CPJ9XTnB8c+yBJLA51t60ji7b9rPha53uEpsM+8=
Subject key identifier: 8C:A3:7A:C6:46:35:0A:3F:E8:D3:05:75:C0:9E:DB:D5:39:67:5A:2E
Certificate issuer: /CN=D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977
Certificate serial: 4A06764866A39481C0C63954A54B3F0CB4A2498D
Authority key identifier: D9:8B:B4:B9:31:5B:7B:1D:C2:B3:F4:16:B1:9A:C7:88:B6:CA:89:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa
Signing time: Thu 08 Aug 2024 19:18:02 +0000
ROA not before: Thu 08 Aug 2024 19:13:02 +0000
ROA not after: Thu 07 Aug 2025 19:18:02 +0000
asID: 267093
IP address blocks: 45.228.194.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:06:76:48:66:a3:94:81:c0:c6:39:54:a5:4b:3f:0c:b4:a2:49:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977
Validity
Not Before: Aug 8 19:13:02 2024 GMT
Not After : Aug 7 19:18:02 2025 GMT
Subject: CN=8CA37AC646350A3FE8D30575C09EDBD539675A2E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:33:c7:ab:91:6c:7e:01:0c:d4:49:bb:fd:42:
6c:9c:a7:63:c1:87:19:3e:a3:fa:e0:a1:d8:8d:b8:
d8:33:29:24:e1:40:1d:3f:ab:83:4e:8b:cf:f0:65:
0e:a4:7d:12:29:97:b6:41:f8:53:8f:25:07:a5:0d:
ee:c2:da:37:c8:c9:ad:1a:d9:c7:ff:29:bb:a6:fc:
51:95:6f:2a:6b:00:45:50:19:b9:5b:26:e0:25:75:
69:af:b1:34:62:35:10:f6:c3:27:d2:e7:df:33:2d:
a9:76:98:39:0b:0a:2b:83:76:97:d6:f3:94:d7:e2:
43:73:63:e5:b9:81:eb:92:4a:b1:33:7e:c1:42:97:
1a:00:f5:53:14:db:a0:cb:a5:69:37:b5:21:86:10:
13:6d:a2:18:aa:9e:cb:03:ff:f7:b9:ed:22:74:dd:
61:21:49:33:9a:92:20:f5:97:f8:73:08:da:44:a4:
c6:37:c6:61:8d:c1:36:3b:47:ec:61:28:16:58:9a:
12:c1:80:ca:f9:90:1f:eb:47:38:82:30:5e:4b:d2:
01:c8:49:b5:00:ee:8d:e2:8f:0c:04:0e:43:fd:3d:
dd:af:e0:7e:53:ea:62:3e:f6:9e:c7:49:3a:4e:c7:
b0:97:8a:9d:0d:91:1d:7c:78:7b:f6:94:61:2b:b5:
e5:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A3:7A:C6:46:35:0A:3F:E8:D3:05:75:C0:9E:DB:D5:39:67:5A:2E
X509v3 Authority Key Identifier:
keyid:D9:8B:B4:B9:31:5B:7B:1D:C2:B3:F4:16:B1:9A:C7:88:B6:CA:89:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D98BB4B9315B7B1DC2B3F416B19AC788B6CA8977.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139342e302f32342d3234203d3e20323637303933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.194.0/24
Signature Algorithm: sha256WithRSAEncryption
50:ba:6d:c1:4e:d2:9d:c2:cc:37:f3:ae:df:08:fd:0f:79:d2:
87:0b:ab:ce:ce:1a:5b:3c:c0:d7:1a:11:8c:4d:dd:b1:d6:44:
e9:f5:43:ac:b6:a4:ac:d7:6e:fd:39:0a:30:f3:fd:db:f6:ae:
09:d4:e6:c7:fa:06:24:e1:d2:29:50:b4:cb:51:b6:bb:0b:00:
bc:d7:5a:a0:b4:1e:48:ff:cb:3e:c6:6a:88:80:ca:ac:f2:1c:
2a:de:bf:8c:fe:9f:7b:e1:cd:49:d4:30:3d:33:51:cc:46:b6:
8b:3b:6b:7a:02:9d:b9:e5:bb:c0:bd:87:05:e2:7a:e7:be:0a:
a6:ea:1a:ab:42:4d:2a:89:f1:d9:fe:0c:7d:2d:7c:a4:f0:d3:
71:b2:ce:70:56:58:89:cc:dd:0d:44:48:8a:75:8e:3b:8e:bd:
89:2c:7f:0c:a0:6b:81:07:4f:01:06:b3:36:86:d9:05:87:a0:
b5:23:41:95:30:6d:c5:7d:a5:a0:58:e0:71:71:f7:bc:2e:a3:
78:fb:f5:a8:1c:ad:f5:6b:a0:df:fc:32:d4:13:c4:05:f3:f5:
2c:60:d0:fe:c7:52:1c:87:6f:87:fa:12:5b:8b:34:fa:fd:cb:
89:1e:18:b0:4e:90:00:1d:63:bc:4c:e6:83:cf:ec:b4:c7:9d:
7f:b3:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 03:38:45 2024 by rpki-client on console-fra.rpki-client.org