Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32332d3233203d3e20323639363637.roa
File: 34352e3139312e36322e302f32332d3233203d3e20323639363637.roa (raw, json)
Hash identifier: nCDHettX1NXSeGgBqGRJGVH8+j0kGODEyJzpfpytcHk=
Subject key identifier: 25:EE:96:28:B0:5A:80:E1:A6:AC:4D:87:C2:EA:2C:7F:6E:A4:89:8D
Certificate issuer: /CN=31037FF040C22F66E096B2D5B9EB165D6398002D
Certificate serial: 422AA469A152AA0FF6817357D61210740039F963
Authority key identifier: 31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32332d3233203d3e20323639363637.roa
Signing time: Wed 23 Oct 2024 20:04:23 +0000
ROA not before: Wed 23 Oct 2024 19:59:23 +0000
ROA not after: Wed 22 Oct 2025 20:04:23 +0000
asID: 269667
IP address blocks: 45.191.62.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:2a:a4:69:a1:52:aa:0f:f6:81:73:57:d6:12:10:74:00:39:f9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31037FF040C22F66E096B2D5B9EB165D6398002D
Validity
Not Before: Oct 23 19:59:23 2024 GMT
Not After : Oct 22 20:04:23 2025 GMT
Subject: CN=25EE9628B05A80E1A6AC4D87C2EA2C7F6EA4898D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b5:7f:d7:dd:db:36:6a:d5:b8:aa:8c:36:1a:
b1:dd:89:be:d9:e9:74:6d:3c:f5:3d:c9:2d:ce:eb:
e6:56:f5:9c:ac:6a:e9:26:78:13:89:e6:c4:b2:6e:
dc:8c:08:a1:a5:8e:d9:e3:1e:88:c6:53:ac:d7:01:
30:26:69:db:a3:8b:ea:cd:cc:0f:ca:f0:9a:e2:47:
b5:f6:cc:05:88:08:8f:7e:7b:fb:9d:73:c5:51:9c:
23:53:49:41:81:4b:6e:40:a3:9e:63:20:c8:de:3c:
c8:8b:fb:d3:13:48:f7:fc:12:be:ef:70:c0:76:84:
f6:d3:d7:80:de:41:b4:80:66:4c:4f:66:e1:cc:3d:
1f:9b:36:90:40:f7:e8:72:ed:ff:20:30:a7:b8:f6:
6a:84:c5:eb:77:5f:3e:27:fb:ef:97:55:a9:c3:b8:
5f:d3:03:84:8a:87:e6:7d:aa:a1:a8:2f:df:6a:04:
32:d7:d2:1d:8d:40:96:8e:cb:2e:2e:e6:56:79:ce:
ad:e6:f5:0d:bd:83:3d:cd:41:4e:58:ae:78:8f:6e:
ca:35:b1:d1:23:2f:83:9c:e2:3a:af:40:84:2d:83:
39:f3:26:a0:6a:de:82:7d:0f:04:d1:7e:ba:c3:27:
ef:8b:35:1a:d3:e6:0f:56:e2:95:fe:dd:ea:04:33:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:EE:96:28:B0:5A:80:E1:A6:AC:4D:87:C2:EA:2C:7F:6E:A4:89:8D
X509v3 Authority Key Identifier:
keyid:31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/31037FF040C22F66E096B2D5B9EB165D6398002D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32332d3233203d3e20323639363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.62.0/23
Signature Algorithm: sha256WithRSAEncryption
21:ad:70:4e:c5:61:57:54:2a:28:a4:c0:51:23:92:7e:cd:c7:
14:63:ab:38:08:94:ea:81:f0:8a:31:92:b5:ef:16:46:f1:37:
32:ee:3d:0f:13:a3:f1:0c:d0:90:c0:62:0d:7e:b3:f3:01:33:
4b:2c:7a:d1:00:cb:65:46:82:c3:bb:0c:0b:f0:b7:2f:84:f8:
4b:56:69:4e:9f:7d:15:e3:fb:6a:cd:62:b5:46:3f:dd:4f:cd:
90:bc:e5:ce:43:d7:d2:19:94:eb:7b:ba:2e:05:95:1e:30:57:
d1:25:dd:ce:25:14:69:3c:3d:7c:8c:fe:ea:63:b8:eb:75:12:
b8:cd:fc:10:d5:10:8b:9d:d7:e2:48:89:85:a4:f3:49:9b:c3:
4b:4e:ba:c6:fd:2f:de:ed:6d:33:66:e4:95:76:4b:06:70:78:
01:27:1b:39:ed:24:84:7a:c6:d2:fa:65:16:66:93:43:04:2e:
d2:3a:21:c2:0e:8e:bb:a7:0d:0c:cb:2e:a3:03:b5:7e:71:2f:
5f:be:a9:05:62:34:fc:67:a7:c2:68:29:f7:58:f9:89:69:d9:
73:d4:fb:49:9e:22:1a:5e:83:3c:d2:78:88:4a:25:af:5e:4b:
e2:ba:a2:56:97:f7:8a:21:eb:ea:89:b0:b7:dd:d0:88:c7:0e:
8f:c5:fd:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 09:06:31 2024 by rpki-client on console-ams.rpki-client.org