Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
File: 34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa (raw, json)
Hash identifier: /HX2daACqr+ZDUaKpm/AycqMhmKMzUO7G7oaCFhNKag=
Subject key identifier: A9:CA:69:78:6F:6B:9D:07:CD:A4:04:82:E6:F2:9B:69:CC:2A:60:0E
Certificate issuer: /CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Certificate serial: 68EA328909E73976E1AE1F44038C2352FF1F6315
Authority key identifier: E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
Signing time: Thu 04 Apr 2024 07:20:51 +0000
ROA not before: Thu 04 Apr 2024 07:15:51 +0000
ROA not after: Thu 03 Apr 2025 07:20:51 +0000
asID: 268678
IP address blocks: 45.165.148.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:ea:32:89:09:e7:39:76:e1:ae:1f:44:03:8c:23:52:ff:1f:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E16D74041965C3729D5552BEFB00E767BB091F4E
Validity
Not Before: Apr 4 07:15:51 2024 GMT
Not After : Apr 3 07:20:51 2025 GMT
Subject: CN=A9CA69786F6B9D07CDA40482E6F29B69CC2A600E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:ba:f3:0b:02:f7:39:94:85:d1:28:32:9d:
8b:c7:d9:b7:44:d1:47:d6:8e:17:2d:ad:c7:67:6b:
d3:58:34:17:1b:e4:7b:ed:47:85:52:b2:4f:ee:23:
53:cb:ae:5f:1a:d1:1d:4d:ca:13:b4:9d:3e:1f:d0:
a2:3b:10:27:e8:8c:6a:06:e4:0b:15:a5:bb:2c:d0:
ad:4d:11:5b:79:51:9f:d0:07:f9:79:e5:57:a1:bb:
a3:fe:3d:a6:c9:b1:e1:05:3b:57:ac:f7:a0:2f:c8:
e4:01:7a:87:07:21:53:34:ce:04:7f:6a:1a:b4:b2:
7a:e1:8f:f6:87:10:86:b0:4f:2e:17:40:c5:96:e9:
11:3a:02:25:fa:10:ee:38:0d:37:e0:70:c0:7e:ad:
63:6f:77:c5:54:65:01:9d:c8:eb:73:3c:82:59:3a:
a4:df:89:20:8f:14:97:2b:ce:79:31:22:1d:ab:ae:
da:52:8a:5f:97:22:ed:f4:19:2c:ed:ff:92:31:74:
52:94:83:e9:ec:e5:ff:a5:9e:f7:8e:98:da:3d:38:
c4:11:39:de:40:be:89:ad:93:92:e0:36:12:31:03:
93:33:ba:07:15:46:cf:09:0b:3e:97:19:62:2b:55:
ee:25:37:2d:ee:5c:2d:78:cf:18:2b:6a:13:26:4e:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:69:78:6F:6B:9D:07:CD:A4:04:82:E6:F2:9B:69:CC:2A:60:0E
X509v3 Authority Key Identifier:
keyid:E1:6D:74:04:19:65:C3:72:9D:55:52:BE:FB:00:E7:67:BB:09:1F:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/E16D74041965C3729D5552BEFB00E767BB091F4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E16D74041965C3729D5552BEFB00E767BB091F4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GrgjKDWNJh2gndV1ixdRzPUbfCwL1uMX36AKiwSv2Tz/1/34352e3136352e3134382e302f32322d3232203d3e20323638363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.148.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:f2:dd:f4:3c:b9:d4:b0:4d:2f:58:48:e8:21:46:40:16:fd:
5b:59:d0:c6:49:18:c4:78:ec:04:52:f6:9a:7c:07:6c:53:71:
1d:08:3a:c2:35:28:de:b7:2d:26:0a:0a:6f:24:51:bf:19:94:
11:82:03:29:ee:dc:7d:c8:86:ea:50:de:99:fd:1a:75:97:3b:
79:ff:e6:72:0d:9b:af:20:be:71:d0:94:ad:f9:4f:bc:82:a7:
3e:37:92:98:8e:f9:0c:e5:14:85:87:f2:bc:0d:05:6b:df:9a:
7f:0d:ab:00:76:17:61:9f:e0:11:cd:a2:d5:ad:4e:c8:1d:d8:
94:19:12:cd:99:9b:17:a6:e2:67:44:de:a5:11:99:b3:6c:2b:
7f:9e:ab:73:54:91:95:43:0d:64:9f:6d:72:cb:0b:ea:a5:75:
0f:ee:bf:2f:b2:2a:44:2a:9f:70:0b:89:c7:46:35:e4:69:df:
8f:a1:ef:30:47:02:6e:36:1a:34:13:56:20:fd:8c:9b:66:e5:
af:53:60:21:55:6b:3f:73:98:c0:5c:ec:eb:7a:66:a1:c3:4b:
57:c9:08:b0:ad:23:64:54:01:21:2c:3f:f0:ed:94:94:6a:4c:
af:f8:49:9b:00:3d:70:e7:5d:85:62:f4:f9:34:bd:60:e7:cc:
f4:12:b5:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 10:21:37 2024 by rpki-client on console-fra.rpki-client.org