Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32322d3232203d3e20323638323239.roa
File: 34352e3233352e3230302e302f32322d3232203d3e20323638323239.roa (raw, json)
Hash identifier: JKCLMABkeiDvxQBqUeWOZG8FiT2QvNHMNKdMudnJbFo=
Subject key identifier: A2:5E:FA:FB:E4:84:B1:93:26:7B:6A:F4:5A:63:4D:8A:E5:0A:F5:2E
Certificate issuer: /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial: 3219452125E9DA1882E4E2D33176A8EDD43F9654
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32322d3232203d3e20323638323239.roa
Signing time: Wed 03 Jul 2024 21:10:26 +0000
ROA not before: Wed 03 Jul 2024 21:05:26 +0000
ROA not after: Wed 02 Jul 2025 21:10:26 +0000
asID: 268229
IP address blocks: 45.235.200.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:19:45:21:25:e9:da:18:82:e4:e2:d3:31:76:a8:ed:d4:3f:96:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
Validity
Not Before: Jul 3 21:05:26 2024 GMT
Not After : Jul 2 21:10:26 2025 GMT
Subject: CN=A25EFAFBE484B193267B6AF45A634D8AE50AF52E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c7:06:4c:5f:df:bd:e3:b1:8a:6b:3d:0e:0b:
76:3c:6a:bd:fb:c8:18:16:dd:5f:79:13:e6:49:28:
be:b7:e7:5a:2e:ea:bf:43:16:5e:99:0f:6a:b5:84:
ce:51:81:aa:ba:c2:ea:64:d6:97:db:8b:5a:e9:7b:
f1:c1:c9:b3:2c:0e:9b:3d:c4:8a:4d:f9:c3:62:a8:
01:52:3a:3e:a0:96:3b:76:58:0c:eb:20:cb:9c:9e:
50:55:d2:c9:6c:df:20:bc:94:ff:5f:4c:33:a3:c5:
f6:74:79:70:0e:e6:e4:6b:15:6d:26:46:1e:5e:47:
10:46:0f:d4:1d:79:6e:02:97:94:eb:65:c8:49:80:
e4:91:96:95:7f:e8:52:31:b9:b9:0f:97:8b:98:ea:
04:fa:8b:ed:6b:00:af:79:e3:93:41:3c:a0:fe:5a:
60:eb:62:fc:06:18:1d:34:64:5e:65:29:77:77:65:
37:a1:d9:af:a7:28:b2:d0:36:b7:29:b8:1c:05:4c:
71:c6:b7:d1:01:d0:e3:94:d4:fc:5e:b5:a5:20:97:
a6:5a:a0:33:15:b3:e8:16:45:81:f4:24:22:3d:ec:
f3:06:00:b9:52:0e:22:33:e8:93:18:9d:d4:c1:57:
df:46:63:85:4a:4a:b2:93:85:0a:e4:e0:94:41:c0:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5E:FA:FB:E4:84:B1:93:26:7B:6A:F4:5A:63:4D:8A:E5:0A:F5:2E
X509v3 Authority Key Identifier:
keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/34352e3233352e3230302e302f32322d3232203d3e20323638323239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.200.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:1d:1b:87:4e:b5:ce:70:15:08:a9:72:72:0b:75:9d:7f:82:
70:99:26:36:4b:66:cd:e0:91:fe:85:38:22:6a:7c:26:7b:53:
a9:1b:96:28:c5:8c:c4:6e:03:31:a9:32:d0:12:5e:09:2f:cd:
48:12:cd:5b:1c:62:3e:19:20:bf:06:53:6c:52:62:1f:6f:2f:
01:90:21:d4:60:27:bb:32:0d:36:7a:4c:78:1c:a0:b3:19:66:
d4:f4:56:9a:6e:c8:5a:01:1a:0f:75:3e:4b:b4:f8:47:48:2b:
50:05:0e:e8:34:90:41:44:b8:62:45:21:a0:17:e7:16:67:c6:
47:24:22:8b:3c:0b:c8:ca:75:c4:67:89:2e:6e:2e:4f:92:1a:
02:0c:99:86:9a:21:d0:5b:39:3e:aa:0f:22:31:f2:07:da:db:
72:a4:49:4b:b3:6e:7d:81:75:d3:2c:7b:03:04:96:dc:58:af:
ca:cb:63:ad:9f:ad:64:5f:fa:29:cf:a4:b0:25:bd:f5:d3:d2:
bb:70:7d:2b:de:44:77:a0:98:d2:c3:4c:42:21:83:4a:47:c5:
0b:bf:ed:4c:6e:c3:20:b2:d6:b1:4a:e2:5b:7f:f5:11:98:bd:
63:a1:1e:36:aa:3c:73:1d:f6:cd:30:5e:1d:2d:03:fe:ca:cf:
30:5d:c8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 06:59:21 2024 by rpki-client on console-fra.rpki-client.org