Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32332d3233203d3e20323638313335.roa
File: 34352e3137302e342e302f32332d3233203d3e20323638313335.roa (raw, json)
Hash identifier: 3tniCsVw+8HiKGraWvt50j2j6qErVwDtEXBJmY878HA=
Subject key identifier: C4:A8:BA:79:47:D6:4D:94:31:C2:80:D7:E7:E2:20:48:DA:0B:F3:B7
Certificate issuer: /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial: 16667D0DF99A0D368E2B668BC9B97A4E556EA96B
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32332d3233203d3e20323638313335.roa
Signing time: Fri 12 May 2023 13:17:03 +0000
ROA not before: Fri 12 May 2023 13:12:03 +0000
ROA not after: Fri 10 May 2024 13:17:03 +0000
asID: 268135
IP address blocks: 45.170.4.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:66:7d:0d:f9:9a:0d:36:8e:2b:66:8b:c9:b9:7a:4e:55:6e:a9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Validity
Not Before: May 12 13:12:03 2023 GMT
Not After : May 10 13:17:03 2024 GMT
Subject: CN=C4A8BA7947D64D9431C280D7E7E22048DA0BF3B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:cf:0b:f0:b3:9f:5b:eb:b1:65:2e:00:6d:8a:
2d:c6:3a:06:c5:6f:33:44:d4:05:d9:ae:f0:22:6e:
45:0d:a1:37:8a:35:5e:3f:2d:f6:94:a4:be:28:24:
be:b0:fd:9f:e5:a6:8e:29:64:6c:41:47:50:61:80:
e8:6d:a5:8c:6e:85:cc:e6:7b:62:44:03:b7:7f:d7:
a6:6f:be:e4:87:99:88:cf:4e:ce:ee:e9:9c:db:dd:
df:73:4c:3e:fd:04:2c:df:2d:ad:45:a9:f2:76:17:
43:a4:53:9a:e6:67:8b:a4:87:f5:64:a0:ae:3c:6d:
61:16:25:e5:32:31:6e:a5:49:a0:3d:be:c5:10:e5:
83:54:a6:94:0d:35:91:e8:6d:35:d5:8b:3f:90:0e:
70:4e:39:4b:72:02:b7:2c:ed:d0:5c:c3:5f:50:b1:
93:ec:fd:7e:6c:c2:1b:25:c6:15:74:6a:ed:23:58:
f3:48:58:cb:d4:c3:d7:eb:96:97:d0:0c:9b:cb:dd:
f3:df:88:99:1d:88:64:b8:40:8e:83:fe:b7:10:ab:
3e:01:a0:41:6f:20:95:b1:c2:ff:e5:fa:45:47:62:
0e:3c:bd:06:f7:5d:b4:be:42:3b:c9:88:37:0a:01:
33:52:7a:e7:90:ff:4c:da:0f:29:aa:78:2c:bd:68:
81:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A8:BA:79:47:D6:4D:94:31:C2:80:D7:E7:E2:20:48:DA:0B:F3:B7
X509v3 Authority Key Identifier:
keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32332d3233203d3e20323638313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.4.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:5f:dc:63:e7:df:74:1a:a8:b4:0d:84:27:b8:08:29:8f:7a:
5b:b3:f8:60:f9:aa:92:56:3f:c0:ad:0a:98:41:57:03:1f:bb:
6d:d8:90:38:de:b7:18:a5:d9:9c:8f:ee:66:4e:5f:69:18:95:
ef:73:a6:18:c6:c3:43:93:ad:6a:48:69:3e:cb:04:c0:bb:47:
c3:b5:75:a6:0e:cc:52:1a:33:40:fd:1e:bc:04:0a:b1:32:57:
87:3b:b6:6e:12:ca:67:af:ab:5b:12:32:c5:2e:ed:17:ac:d8:
f9:04:f5:80:00:b1:c5:a2:e3:4d:9a:1f:25:94:9b:ad:ff:e6:
e4:5d:2c:48:c9:4b:89:e9:77:32:47:70:90:d8:ea:8a:90:da:
7e:c7:31:44:a3:cd:f5:d6:3d:ec:92:60:b8:27:bb:05:d8:30:
39:09:d5:e4:40:47:f4:40:a0:29:d7:5e:b3:74:30:d1:69:01:
09:ce:c7:c8:ac:e0:d0:73:51:a2:29:96:a5:11:81:8f:b0:54:
1a:61:d7:da:77:23:27:42:a2:fa:34:e8:f0:9a:c8:d7:e4:f8:
76:a4:bd:10:41:30:51:d9:49:11:fc:8b:1b:03:2c:e2:0c:53:
d2:a4:ad:33:11:76:43:d9:be:0f:08:5b:96:80:5b:55:43:4e:
19:24:2d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 12 21:09:40 2024 by rpki-client on console-ams.rpki-client.org