Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36332e302f32342d3234203d3e20323639363637.roa
File: 34352e3139312e36332e302f32342d3234203d3e20323639363637.roa (raw, json)
Hash identifier: Mrdcqq7MYibiXAcyPb51vmnsS5vYKFcq/QuURAJdRSY=
Subject key identifier: CE:AA:02:CC:FA:9E:26:8F:F7:B4:4B:3C:C0:5D:1D:C7:62:5C:C0:FC
Certificate issuer: /CN=31037FF040C22F66E096B2D5B9EB165D6398002D
Certificate serial: 5E29E967CE0A80A6EFBBDE8AFD53A4678F5FA3EC
Authority key identifier: 31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36332e302f32342d3234203d3e20323639363637.roa
Signing time: Wed 23 Oct 2024 20:04:28 +0000
ROA not before: Wed 23 Oct 2024 19:59:28 +0000
ROA not after: Wed 22 Oct 2025 20:04:28 +0000
asID: 269667
IP address blocks: 45.191.63.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:29:e9:67:ce:0a:80:a6:ef:bb:de:8a:fd:53:a4:67:8f:5f:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31037FF040C22F66E096B2D5B9EB165D6398002D
Validity
Not Before: Oct 23 19:59:28 2024 GMT
Not After : Oct 22 20:04:28 2025 GMT
Subject: CN=CEAA02CCFA9E268FF7B44B3CC05D1DC7625CC0FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:2e:62:39:87:ab:e6:d7:c9:68:d0:82:0d:2a:
ac:c9:73:2a:e7:ab:89:cb:82:67:16:7b:51:07:61:
8e:3b:d7:df:5e:9c:4c:91:0c:61:90:10:91:17:1d:
bd:1f:9e:58:4d:d3:d9:f9:9a:10:f8:0e:9f:80:0c:
2c:ef:a0:c4:39:7a:d2:d0:cf:80:74:a9:18:d4:d5:
33:50:06:2f:4b:93:88:0b:67:3e:64:7c:00:a7:2d:
d3:90:2f:72:03:53:0d:af:de:84:37:b3:3e:bd:a7:
0b:68:da:cd:ec:30:0d:3c:a0:14:c7:61:ac:6a:b2:
fb:b9:e0:24:80:ec:63:ad:a8:c7:9e:b4:69:13:b3:
73:65:c4:84:d3:95:07:11:ab:78:bc:a5:00:4d:a1:
ee:d0:cf:1c:a5:e8:89:4e:7e:38:6e:ee:30:0f:c1:
dc:26:71:2f:6c:06:a6:22:a2:b0:c0:4b:56:93:2b:
58:1d:49:a8:c0:1b:00:42:37:ab:85:b0:c7:07:87:
46:ab:31:aa:78:97:e2:d9:87:2f:46:0b:23:fe:1e:
ec:40:0d:77:e4:b3:54:3b:b4:0a:35:f9:fe:f0:7b:
c5:e9:bb:78:8b:35:d6:c2:57:04:c3:c1:6e:31:6f:
f8:9c:b2:a3:d6:d4:b6:97:82:36:0e:25:39:ba:e3:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:02:CC:FA:9E:26:8F:F7:B4:4B:3C:C0:5D:1D:C7:62:5C:C0:FC
X509v3 Authority Key Identifier:
keyid:31:03:7F:F0:40:C2:2F:66:E0:96:B2:D5:B9:EB:16:5D:63:98:00:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/31037FF040C22F66E096B2D5B9EB165D6398002D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31037FF040C22F66E096B2D5B9EB165D6398002D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36332e302f32342d3234203d3e20323639363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.63.0/24
Signature Algorithm: sha256WithRSAEncryption
39:a2:46:91:42:99:01:34:b4:37:07:81:ba:cf:f4:72:b2:9b:
a9:cd:19:4a:a0:48:47:2b:fd:92:b0:ad:af:b6:ad:3d:07:54:
6e:be:19:90:ab:f1:7e:cc:46:18:0a:62:e9:3e:8d:9a:6f:95:
f6:cc:6c:bc:2f:75:e3:4d:a9:03:16:e9:3b:b6:3f:d7:7c:32:
e3:78:37:1e:97:5b:01:a3:b7:0d:9a:57:78:fd:b7:9f:2e:48:
6d:2b:86:6d:b5:9d:ad:fd:90:44:87:ab:75:84:eb:51:a2:15:
a0:b3:18:b9:29:54:c9:36:66:f3:f2:15:a5:f7:2f:e6:15:96:
13:77:2e:3f:f9:c0:7e:ca:5c:2a:c6:bc:e4:70:97:51:03:c5:
c9:d9:1a:0b:ad:24:a7:32:96:c5:80:c1:32:de:94:36:95:e7:
92:fc:cc:45:fd:5a:a9:d5:59:ad:ed:4a:a6:c1:da:fc:e3:05:
67:b9:7b:0d:a7:3c:32:99:9f:41:e8:4e:97:fa:c3:7a:68:63:
11:f0:18:20:5f:1e:fc:91:67:a6:cd:b1:22:7d:0b:cc:f9:7b:
ca:24:48:2f:bb:5e:d9:78:07:ea:c2:81:4d:ef:c0:df:79:91:
3f:06:af:f5:2b:78:6b:0b:e1:07:25:d8:b6:56:62:19:fb:cd:
0c:b4:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 2 08:39:23 2024 by rpki-client on console-fra.rpki-client.org