Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa
File: 34352e3137372e31322e302f32322d3234203d3e20323638393738.roa (raw, json)
Hash identifier: XSFqyGa2e1Cq6A4GHmHkLiySEir0LURydk8M7gjjctY=
Subject key identifier: 97:39:5D:78:68:62:2B:B5:EB:9D:E4:61:15:69:3A:24:3B:60:C5:CF
Certificate issuer: /CN=0E42C6CBC297BD1C3320047BC357003F3FA9B924
Certificate serial: 14390BEF4109A116CC1F4069F89FC8F33328218E
Authority key identifier: 0E:42:C6:CB:C2:97:BD:1C:33:20:04:7B:C3:57:00:3F:3F:A9:B9:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa
Signing time: Thu 04 Apr 2024 13:55:42 +0000
ROA not before: Thu 04 Apr 2024 13:50:42 +0000
ROA not after: Thu 03 Apr 2025 13:55:42 +0000
asID: 268978
IP address blocks: 45.177.12.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:39:0b:ef:41:09:a1:16:cc:1f:40:69:f8:9f:c8:f3:33:28:21:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E42C6CBC297BD1C3320047BC357003F3FA9B924
Validity
Not Before: Apr 4 13:50:42 2024 GMT
Not After : Apr 3 13:55:42 2025 GMT
Subject: CN=97395D7868622BB5EB9DE46115693A243B60C5CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2a:12:51:e1:a9:13:a4:ee:3b:19:87:24:b4:
ce:a3:84:05:bc:b7:14:14:0f:a8:98:7b:41:71:3e:
7c:cc:12:27:a4:c6:8e:c2:95:bc:6f:c8:39:b0:fe:
29:18:03:10:de:03:fb:c4:57:0b:15:72:af:3c:26:
d5:e7:60:9c:5c:5b:f7:ee:e6:14:30:fd:1a:43:66:
1b:ee:3e:08:60:f2:47:d0:71:90:51:86:79:36:46:
ba:5b:15:db:48:3e:3f:6d:c7:62:e7:be:40:e3:fa:
0c:92:09:a9:83:4c:84:fd:5e:20:88:54:35:17:de:
04:0d:64:92:cd:bf:7a:d0:e1:1d:60:85:26:69:ed:
37:bd:b3:f6:7b:a2:37:11:8e:0b:dd:7a:81:72:c0:
7c:a0:f9:98:5c:b1:4a:c8:a4:14:75:8f:42:36:c1:
f5:b7:bd:3d:72:b5:a4:0d:cf:f4:42:71:6d:96:b3:
88:f2:38:89:5e:cb:6f:f9:67:6c:23:cf:34:4b:fc:
27:40:2a:30:2b:0d:78:20:9c:d5:fb:2f:81:5c:87:
99:c1:70:50:0d:b6:1a:c6:99:bb:32:c1:b0:1d:a6:
f0:00:2c:7b:72:a8:49:46:e3:40:7a:02:36:1b:22:
d6:4a:4a:1a:9b:b8:82:68:e4:56:8e:90:95:9f:a8:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:39:5D:78:68:62:2B:B5:EB:9D:E4:61:15:69:3A:24:3B:60:C5:CF
X509v3 Authority Key Identifier:
keyid:0E:42:C6:CB:C2:97:BD:1C:33:20:04:7B:C3:57:00:3F:3F:A9:B9:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E42C6CBC297BD1C3320047BC357003F3FA9B924.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/1/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:c9:9e:a6:3d:26:33:7e:2c:bd:f4:2c:c1:ec:d6:7b:06:25:
9d:cc:b5:cf:78:9b:21:11:28:b6:45:f4:86:70:76:1a:9c:b0:
2f:45:a0:83:c3:88:0e:db:1d:f2:b3:c7:64:e4:ce:7f:0a:11:
61:f3:d5:43:74:89:be:53:b2:cf:74:68:2c:be:3b:71:8b:17:
3b:d2:d6:6e:c7:82:78:5b:a6:aa:59:eb:27:36:1f:ea:93:7d:
27:78:01:46:95:b7:aa:94:43:85:42:fb:94:b1:be:05:dc:e4:
e3:dc:d8:30:01:33:91:cb:1a:84:f4:e2:14:ca:54:cf:a9:1f:
47:48:36:9f:8e:5d:51:87:b2:4c:39:09:06:1f:ce:a9:33:0e:
d8:f2:4f:93:49:7c:1d:ef:8a:59:c8:6c:ba:c4:f8:e3:69:2a:
2e:01:27:9e:0d:2d:a6:39:55:0d:24:e5:2e:01:5f:71:81:a0:
53:b4:c8:36:d2:88:0e:d5:86:6f:97:dc:a8:f3:8c:83:f8:8b:
33:1a:51:20:c2:4e:3e:12:aa:4a:d6:3a:1c:8c:5a:fc:58:1f:
aa:2d:28:fd:d3:2c:e2:6c:d4:37:35:22:1c:a3:64:fe:75:2f:
36:35:d2:14:8d:c4:a5:73:17:2f:45:67:58:cf:5b:da:26:99:
50:1d:ac:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 28 21:06:02 2024 by rpki-client on console-fra.rpki-client.org