Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS267085.roa
File: AS267085.roa (raw, json)
Hash identifier: anapPlMW56VxA2bksF6NOo4hTGZGP3BX5xFTUbqEpa0=
Subject key identifier: DC:9D:DA:1A:1B:9B:DA:7B:7A:6C:B1:DF:5B:AF:3A:8B:C1:39:90:F5
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 7801F81A417A729E8A3212CEA67E300EA7832759
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS267085.roa
Signing time: Tue 23 Jul 2024 12:10:30 +0000
ROA not before: Tue 23 Jul 2024 12:05:30 +0000
ROA not after: Tue 22 Jul 2025 12:10:30 +0000
asID: 267085
IP address blocks: 45.228.240.0/22 maxlen: 24
2804:47ec::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:01:f8:1a:41:7a:72:9e:8a:32:12:ce:a6:7e:30:0e:a7:83:27:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:30 2024 GMT
Not After : Jul 22 12:10:30 2025 GMT
Subject: CN=DC9DDA1A1B9BDA7B7A6CB1DF5BAF3A8BC13990F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:6d:43:f8:b1:7d:03:05:a3:08:31:fb:73:
a6:82:f0:d5:f3:8a:11:57:e2:2e:93:be:78:e3:39:
71:e5:bb:02:66:26:7f:5b:de:4c:27:4d:20:38:cd:
f8:0e:fb:45:0f:0c:cc:be:39:25:09:11:98:df:2f:
a3:e9:89:5e:5f:59:7e:d8:41:77:fa:c9:7d:3b:21:
9d:0a:95:7f:29:16:4a:0e:41:16:d2:2e:7c:b4:fd:
d5:1e:6b:a9:7f:1c:e9:75:57:f3:76:d9:02:31:16:
23:34:18:4d:a4:b3:bb:47:39:1f:8e:ca:ff:c1:5c:
a0:77:23:9c:c0:35:ba:f4:f7:cf:5e:c9:c0:cd:51:
40:8a:13:0a:44:96:37:e5:7f:86:08:ca:e6:a5:bc:
5c:74:79:88:12:34:c9:40:4f:57:6c:f9:84:d9:79:
cb:0f:18:55:29:71:84:9d:ca:b5:16:25:63:8f:37:
44:04:e9:23:85:60:03:19:14:9e:22:b0:46:21:2d:
79:c1:39:ae:a3:40:eb:56:4c:b8:31:11:24:d6:2a:
8f:55:92:5d:fc:e3:0a:32:6c:f1:ba:e9:8a:9b:bc:
8b:80:a3:39:bd:88:2c:7b:42:1e:59:69:70:d0:7b:
4f:64:c0:6f:56:8b:c8:49:d1:a9:16:58:83:3a:cc:
67:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9D:DA:1A:1B:9B:DA:7B:7A:6C:B1:DF:5B:AF:3A:8B:C1:39:90:F5
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS267085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.240.0/22
IPv6:
2804:47ec::/32
Signature Algorithm: sha256WithRSAEncryption
50:1e:87:00:71:66:77:7e:26:d3:9d:fa:b5:5e:3c:28:3c:3d:
e4:11:6b:47:3a:e5:5b:3c:14:5a:f5:96:d5:ba:fb:4b:eb:78:
13:cf:a2:c6:96:38:ce:76:78:7d:b4:af:47:04:7c:6e:2d:ae:
89:44:1c:0b:ec:6e:84:4d:0d:c7:ac:bb:15:89:3f:4d:1b:4b:
06:4f:ee:74:8e:7b:16:38:47:e5:24:b9:81:ef:15:79:13:68:
c4:4c:ae:76:19:f2:91:67:82:97:cc:3c:ce:47:fa:97:3b:49:
3a:30:7f:e8:7b:fb:1a:74:82:50:db:f7:79:cf:7c:c3:97:42:
38:a6:a2:a4:81:26:ae:28:67:d6:5b:c3:aa:b7:55:60:50:f4:
49:6b:5e:e2:c4:b7:5b:97:56:0a:cb:89:5e:fd:32:dc:1b:1e:
b2:3f:ab:7d:43:20:5d:82:bb:4c:39:c9:a2:2b:af:45:9b:6b:
95:72:d9:95:4a:fd:8e:cc:2e:6d:40:89:58:4b:40:6c:f2:b8:
26:3e:9e:f9:04:38:ab:03:79:e8:10:08:5c:eb:2d:0a:d1:59:
40:44:69:9e:61:d4:f5:cb:1d:b3:e4:40:df:d7:2e:ae:61:64:
eb:93:03:eb:63:86:59:08:41:c3:ff:de:d7:0a:00:86:ff:6c:
21:c1:b0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org