Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS267404.roa
File: AS267404.roa (raw, json)
Hash identifier: RfcqlJtf4SUQ4H0CtEKeWug+2HcIOCdvjfigizsChho=
Subject key identifier: 25:CB:82:94:89:3A:91:16:D8:1B:1F:2C:E2:12:48:6A:A5:36:9B:51
Certificate issuer: /CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Certificate serial: 1871A2A3347C732BE023C57483C7A055EEEEDA4E
Authority key identifier: D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS267404.roa
Signing time: Tue 23 Jul 2024 12:10:29 +0000
ROA not before: Tue 23 Jul 2024 12:05:29 +0000
ROA not after: Tue 22 Jul 2025 12:10:29 +0000
asID: 267404
IP address blocks: 45.234.240.0/22 maxlen: 24
2804:4cf8::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:71:a2:a3:34:7c:73:2b:e0:23:c5:74:83:c7:a0:55:ee:ee:da:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7B86B5B6E0677EED89A37670E1D04CE759EFB26
Validity
Not Before: Jul 23 12:05:29 2024 GMT
Not After : Jul 22 12:10:29 2025 GMT
Subject: CN=25CB8294893A9116D81B1F2CE212486AA5369B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:ae:87:b8:30:bb:78:cd:11:a3:7a:98:e6:
1c:f4:66:d7:a7:a7:62:ab:75:ac:f9:4b:93:36:62:
6c:d8:ad:1b:fd:32:18:dc:62:00:7a:8d:79:76:7d:
19:bd:fa:12:fd:ec:fd:44:2a:f9:b5:bf:80:2f:bb:
64:58:b8:bf:8a:a6:db:8f:17:11:da:1d:38:c2:a2:
7e:80:1d:29:2d:02:43:d7:88:56:ec:11:70:7b:96:
e7:76:2a:13:db:64:4d:a6:cf:92:2c:37:a0:6a:0f:
3d:97:03:86:2f:77:72:cc:d8:97:78:3d:8f:4b:58:
08:71:19:de:5c:a0:0c:b5:a1:86:9e:4d:0f:19:87:
48:71:e0:9b:28:3a:68:36:a8:e0:0c:c3:da:41:db:
8b:40:80:bd:cf:a1:dd:63:43:ca:59:cb:0a:22:dd:
70:eb:54:bc:88:2b:cc:87:10:37:76:5f:db:ed:51:
b8:4b:51:f4:ef:1a:47:b9:01:cf:f1:cf:80:f0:8f:
b0:11:bf:b5:19:6c:cd:3e:fb:a7:5a:c3:61:0e:2b:
f3:48:01:92:a1:ed:20:48:2b:db:4f:d7:e7:cc:db:
ee:0e:97:ea:79:3d:01:87:74:a5:7d:15:9b:46:db:
d4:66:65:27:50:a7:ad:5c:9d:e6:3a:07:b7:4b:d0:
8b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:82:94:89:3A:91:16:D8:1B:1F:2C:E2:12:48:6A:A5:36:9B:51
X509v3 Authority Key Identifier:
keyid:D7:B8:6B:5B:6E:06:77:EE:D8:9A:37:67:0E:1D:04:CE:75:9E:FB:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7B86B5B6E0677EED89A37670E1D04CE759EFB26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/2/AS267404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.240.0/22
IPv6:
2804:4cf8::/32
Signature Algorithm: sha256WithRSAEncryption
7e:d8:cc:ec:62:4b:02:7b:60:2f:79:0d:17:0b:10:09:c7:f1:
00:0d:8a:bf:0c:f0:89:d7:3f:a0:3f:5c:a9:16:10:8f:c8:bc:
16:56:e9:d1:52:db:83:50:5d:3d:49:c9:4e:a0:52:e2:0e:67:
bb:72:5b:4c:98:b3:c5:91:6d:be:4b:d9:8f:95:c9:f7:ba:e0:
5e:a0:20:11:c1:ec:a2:4e:b1:96:9a:13:a2:1d:3a:cc:64:d8:
dd:02:78:60:56:6d:ff:1f:f1:b1:46:a0:fa:60:c1:80:97:d3:
2e:a7:69:ed:8e:2d:03:26:48:5b:47:bc:5a:66:41:ee:9f:0a:
15:e1:1f:35:87:db:50:cf:b2:96:ef:dc:7d:4d:08:5f:32:6e:
00:c5:dd:f6:fb:b0:d0:51:44:a7:84:9d:67:1b:bd:2c:90:dd:
eb:19:33:7d:f7:2e:32:b0:c5:64:58:e5:59:9c:b6:33:05:1c:
31:f1:40:5a:0d:fb:7c:7a:4a:72:ab:05:2e:0c:34:69:d9:b1:
d2:33:6a:72:f2:2f:29:2b:fc:18:0f:ac:89:f1:b4:81:59:32:
dc:6a:94:43:41:82:fe:22:bd:72:7e:36:c5:11:bd:53:15:66:
a8:b1:05:b1:37:73:42:c1:21:be:60:52:c1:8d:44:07:58:e1:
36:bf:6a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 15:16:06 2024 by rpki-client on console-fra.rpki-client.org