Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
File: 34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa (raw, json)
Hash identifier: 5TCfpAX5Im9+nTlpgK+F+R0+bM8bun8MVOLKlCL5F7Y=
Subject key identifier: 97:F6:72:A0:67:76:F2:07:6D:00:1B:A6:F1:30:E6:12:1A:85:0E:C7
Certificate issuer: /CN=00128F95DB8A5B29D029F4525401E18331575DBD
Certificate serial: 532D1F4D60C0A2D8DB4E43992A29297BD05D9662
Authority key identifier: 00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
Signing time: Thu 04 Apr 2024 07:33:59 +0000
ROA not before: Thu 04 Apr 2024 07:28:59 +0000
ROA not after: Thu 03 Apr 2025 07:33:59 +0000
asID: 268230
IP address blocks: 45.235.220.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2d:1f:4d:60:c0:a2:d8:db:4e:43:99:2a:29:29:7b:d0:5d:96:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00128F95DB8A5B29D029F4525401E18331575DBD
Validity
Not Before: Apr 4 07:28:59 2024 GMT
Not After : Apr 3 07:33:59 2025 GMT
Subject: CN=97F672A06776F2076D001BA6F130E6121A850EC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:31:e5:1e:ab:1f:6d:a8:a9:b1:78:b0:b8:
74:1a:c8:ed:e8:68:c2:57:69:36:86:6d:89:a0:5d:
f5:f7:11:b0:38:dd:32:cd:7d:f7:8e:fc:66:aa:2c:
3b:b1:07:d1:26:35:4c:5a:48:3d:7c:bf:c4:0a:e9:
d4:b0:c9:3b:97:68:3c:93:8a:2c:39:60:bf:9d:8d:
23:77:a8:5d:1c:0e:fa:6b:47:df:c9:65:b8:f3:1b:
05:d3:44:09:42:dc:c7:b5:55:57:b2:22:5e:88:e2:
9c:e1:42:bc:66:27:dc:64:ca:a0:a4:de:2f:c2:78:
d6:87:87:56:85:11:42:b2:58:60:8f:1b:54:a0:a0:
6b:57:52:df:b5:d1:5a:d2:2e:f9:2a:40:e5:5c:2e:
c7:cc:a0:09:6a:04:61:d1:c3:41:af:8e:66:1d:03:
c8:12:3f:d3:c4:e7:5f:bd:3b:37:b7:5e:e4:42:17:
0d:f8:f7:0f:b6:60:f4:88:18:be:3b:08:61:03:f4:
b2:08:76:24:70:2d:7a:a4:9a:34:20:ae:48:26:3c:
72:e5:a8:3b:c6:c9:77:97:53:0a:03:f3:e4:88:89:
f7:80:33:dd:c5:67:6d:6f:52:4f:7e:c0:7c:9b:c2:
9f:df:85:ca:d4:de:40:43:67:12:7c:3c:34:b3:55:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:72:A0:67:76:F2:07:6D:00:1B:A6:F1:30:E6:12:1A:85:0E:C7
X509v3 Authority Key Identifier:
keyid:00:12:8F:95:DB:8A:5B:29:D0:29:F4:52:54:01:E1:83:31:57:5D:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/00128F95DB8A5B29D029F4525401E18331575DBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00128F95DB8A5B29D029F4525401E18331575DBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4RQHaHAxFCaGxukVGF8nC7U1yF716bnWF7FpEg6c1sTB/1/34352e3233352e3232302e302f32322d3234203d3e20323638323330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.220.0/22
Signature Algorithm: sha256WithRSAEncryption
24:40:c5:74:80:4d:d6:aa:3c:95:f8:36:62:ee:73:75:b9:ea:
e7:0f:07:cf:f3:6a:b9:27:49:bc:4b:e8:11:59:4e:ee:6d:dd:
1f:4e:27:21:70:d2:28:36:ac:b9:43:67:dd:88:86:61:43:65:
8a:92:98:7a:de:08:94:12:24:ec:7b:23:33:88:0e:8a:88:4a:
4e:28:47:40:65:49:1e:8d:cf:95:00:e0:20:e4:0c:56:6b:db:
90:09:53:05:c5:90:7a:82:04:2b:e3:98:23:c8:21:e0:1d:ce:
b7:56:b8:f7:c3:3c:fb:06:5a:b8:8c:f6:79:28:c6:fa:33:a4:
f1:8b:9d:f3:8b:4c:9d:e5:c9:01:f8:15:5a:fa:22:e6:2a:f7:
26:ff:9b:9b:4f:e3:16:6a:7a:04:86:92:28:61:4c:5a:31:20:
05:15:98:cb:fe:85:69:d3:72:0d:76:6b:88:be:46:15:ef:e7:
9c:dd:e1:9c:2a:cc:54:8c:c7:62:66:14:a8:82:ff:28:72:6d:
50:d0:76:2d:a6:9a:d9:dd:09:77:9e:a4:23:79:16:b6:19:74:
b8:98:90:63:8d:a9:1b:37:ba:01:57:e6:17:bb:b5:eb:b4:1a:
52:ac:d8:af:7a:bc:dd:c7:d7:b9:56:6f:71:77:1f:2f:16:27:
b5:89:da:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 13:33:45 2024 by rpki-client on console-ams.rpki-client.org