Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
File: 34352e3138302e35362e302f32322d3332203d3e20323639313331.roa (raw, json)
Hash identifier: c/ugvokmJlaV/FJR5qOJhkhNbIPikznS3w+XDbe3kj4=
Subject key identifier: 87:8C:D3:EE:87:EB:3E:53:06:71:AB:10:73:20:15:02:30:DC:4A:79
Certificate issuer: /CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
Certificate serial: 47EFA527657A04427C4D840638CF17E03C0DF55B
Authority key identifier: 29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
Signing time: Thu 04 Apr 2024 00:33:15 +0000
ROA not before: Thu 04 Apr 2024 00:28:15 +0000
ROA not after: Thu 03 Apr 2025 00:33:15 +0000
asID: 269131
IP address blocks: 45.180.56.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ef:a5:27:65:7a:04:42:7c:4d:84:06:38:cf:17:e0:3c:0d:f5:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295B9D364BD76A81DD34AA5D5C965BB1FC27A520
Validity
Not Before: Apr 4 00:28:15 2024 GMT
Not After : Apr 3 00:33:15 2025 GMT
Subject: CN=878CD3EE87EB3E530671AB107320150230DC4A79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:cf:06:45:1d:78:21:1c:12:d9:0d:1c:eb:
6e:e9:fb:1c:17:4b:9c:d5:68:62:c8:e5:3b:2b:7a:
b1:16:aa:8e:37:ef:eb:8a:be:89:9f:95:0a:16:09:
6d:b0:f3:ad:c0:b1:7e:69:29:f1:cd:37:ba:d9:f5:
47:33:8d:07:52:af:3b:c3:fd:4e:a7:bc:c9:91:97:
76:e2:ac:1d:d7:b6:a6:de:12:3d:c9:d1:6d:ea:8e:
5e:72:a3:a9:08:27:50:b7:83:b1:5b:48:45:61:88:
9f:40:c9:02:e7:2f:e3:f6:f7:ea:a1:95:8b:74:94:
0a:9a:7e:76:88:f2:ec:72:62:48:d9:1d:89:55:0b:
0d:35:50:d6:0f:aa:d7:69:3f:64:f9:1a:9c:99:6f:
96:4d:25:ef:2b:fe:1a:a4:1a:a9:99:1b:9c:f9:01:
48:a8:e1:ef:e7:fe:b4:7b:33:de:80:16:de:40:dc:
ac:a4:59:3f:7c:3d:5c:27:4d:18:67:46:b7:29:ab:
77:92:d9:56:2b:85:31:c6:ec:0f:60:24:15:da:c9:
df:b1:d8:a5:7b:5e:2c:eb:38:0a:87:64:1d:69:35:
30:cc:9c:d7:07:db:c6:b1:3f:2b:fc:5f:b5:69:21:
cb:30:b8:1c:e4:3d:b5:1d:c4:23:cc:bc:70:28:69:
4a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:D3:EE:87:EB:3E:53:06:71:AB:10:73:20:15:02:30:DC:4A:79
X509v3 Authority Key Identifier:
keyid:29:5B:9D:36:4B:D7:6A:81:DD:34:AA:5D:5C:96:5B:B1:FC:27:A5:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/295B9D364BD76A81DD34AA5D5C965BB1FC27A520.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4bNVhjyvsE6TAzkxTZWGGj6R1bbvyY1cJq3Typ8R859Q/1/34352e3138302e35362e302f32322d3332203d3e20323639313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.56.0/22
Signature Algorithm: sha256WithRSAEncryption
41:9f:78:15:cc:e5:5a:66:4f:1f:19:00:b4:29:db:79:4d:79:
57:28:bb:1a:bf:78:96:57:41:4c:67:e8:f6:d8:80:78:42:47:
ef:82:9b:66:55:3e:8c:1d:be:2d:03:f6:7e:9c:7c:da:5d:00:
27:e5:1b:9d:81:64:4e:47:bd:6b:8d:59:2d:eb:db:b8:20:b2:
a3:2f:bf:c6:66:6f:d2:4f:d3:4d:42:6c:ee:1d:9c:7b:87:e1:
97:fa:ab:a0:d6:5c:6c:3d:d0:f3:8a:97:3f:2f:fc:64:61:e9:
22:12:84:7e:1f:f1:04:7a:cb:10:2b:d5:bf:39:e1:32:24:d0:
69:fb:2d:8c:32:0d:c5:ca:84:8c:b6:82:35:8a:4e:2b:0b:1c:
d4:01:3e:b0:30:d3:30:b6:5f:a7:ca:c3:8a:4a:ac:7d:de:88:
65:dc:fb:b3:ee:d2:18:67:16:29:38:5f:31:bc:ed:ea:20:ad:
24:17:9f:15:10:cb:bb:5e:ec:99:d3:fc:01:89:34:05:e8:c2:
eb:60:a3:8a:37:47:18:aa:06:db:63:84:7d:e2:cf:18:2e:39:
13:f9:d6:14:4e:06:10:8e:b3:2a:b4:29:48:ec:ce:3a:dc:b6:
0f:ea:6b:12:da:a0:76:11:f4:0f:9b:6f:69:3d:0b:24:43:6a:
8a:9b:84:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org