Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
File: 34352e3136312e34382e302f32332d3233203d3e20323638343437.roa (raw, json)
Hash identifier: 2owZ0DViVpighzESjiZubZG2E42OZhrxZdBHn6ikw6g=
Subject key identifier: D8:8F:C5:54:E9:A8:2C:65:89:B6:9D:11:75:FA:6B:44:4B:46:B4:87
Certificate issuer: /CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Certificate serial: 71E23160F2C79C7AAE7742E5FD2C39B8E012A318
Authority key identifier: 3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
Signing time: Tue 08 Oct 2024 22:42:47 +0000
ROA not before: Tue 08 Oct 2024 22:37:47 +0000
ROA not after: Tue 07 Oct 2025 22:42:47 +0000
asID: 268447
IP address blocks: 45.161.48.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:e2:31:60:f2:c7:9c:7a:ae:77:42:e5:fd:2c:39:b8:e0:12:a3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B
Validity
Not Before: Oct 8 22:37:47 2024 GMT
Not After : Oct 7 22:42:47 2025 GMT
Subject: CN=D88FC554E9A82C6589B69D1175FA6B444B46B487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d5:50:c1:c5:71:98:fe:9e:40:50:6c:df:a9:
02:67:03:0e:fb:57:6d:78:c8:6b:73:bb:2e:6c:84:
7f:63:75:b8:22:ce:af:c9:05:c1:7b:8e:df:5e:45:
0a:99:a8:d7:bf:38:6f:d8:df:fc:e8:c0:2b:a1:9f:
ae:01:37:ca:41:3b:74:52:47:12:ef:47:65:96:b9:
d6:91:ac:c5:17:75:e4:05:1b:81:42:0f:30:f5:9f:
26:fb:5b:53:75:82:48:0b:96:59:bf:e7:c0:a7:7f:
75:65:05:80:ea:4c:92:74:fe:5e:b1:3a:12:47:0d:
47:1d:f5:78:3c:c2:26:8a:ca:06:0a:0e:ae:ba:f6:
3c:88:b6:44:4b:c9:22:43:82:29:b5:26:79:7b:77:
22:c6:b4:1d:b2:9d:11:f6:9a:79:e2:86:8b:76:40:
7e:bb:d8:18:1d:45:ba:33:92:8b:53:94:9b:1a:e5:
ca:25:bf:3b:4e:36:b0:57:59:58:ea:ed:56:ba:a8:
23:4a:37:6d:28:b3:1e:ed:64:e3:3d:81:c3:35:3e:
d4:25:22:92:cf:f3:09:43:f0:e1:8f:73:8f:96:6c:
c3:b0:16:9f:f7:bf:8e:b6:31:bd:99:d3:82:78:c2:
50:b5:bd:49:6f:25:3e:fb:12:c8:1c:20:aa:ed:04:
b4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8F:C5:54:E9:A8:2C:65:89:B6:9D:11:75:FA:6B:44:4B:46:B4:87
X509v3 Authority Key Identifier:
keyid:3F:F0:A5:DF:EC:FD:F8:D0:6F:63:C2:BA:6B:24:8B:FC:D4:B9:3B:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF0A5DFECFDF8D06F63C2BA6B248BFCD4B93B4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.48.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:17:91:07:46:5c:15:7e:52:4c:f2:24:49:92:70:f1:cb:bc:
77:f7:21:3d:02:0a:92:6d:ba:19:b9:1d:37:e6:b1:a0:7b:b1:
88:5c:e6:44:d3:e0:97:27:2c:c8:92:77:50:be:e0:fb:6d:9a:
b8:d7:90:96:48:24:e9:45:aa:73:81:f3:70:90:90:38:4f:62:
c4:82:0d:74:f4:73:50:23:c7:fe:26:6d:8a:04:93:0f:cc:4f:
18:7b:c7:61:5d:8f:05:90:b5:a2:53:4b:e4:bb:b9:35:69:af:
46:1e:f8:82:03:3e:43:b9:7c:9b:07:de:90:36:bb:20:54:b7:
f1:55:b3:b4:29:2e:93:b8:33:96:58:e9:ba:37:16:ad:cb:97:
af:cd:24:41:52:9d:e2:df:81:1d:b8:3e:53:69:1a:5c:29:24:
f3:0e:31:3a:c3:20:6d:6d:fe:14:f0:96:bd:a9:b7:e2:e7:86:
79:6d:41:0f:e4:58:3a:32:1f:d2:81:a1:4a:3b:d2:bc:c5:fe:
f8:93:d7:2c:4b:41:24:c1:43:fb:15:8e:cc:2f:86:c1:8d:e4:
97:05:45:79:af:27:6c:ce:eb:3e:64:85:3d:48:3c:8c:07:8c:
ad:bc:5b:0b:6a:9a:f1:3c:cd:54:63:3c:13:fb:64:e3:7a:7a:
bf:a9:8f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 21:31:32 2024 by rpki-client on console-ams.rpki-client.org