Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3234203d3e20323638383432.roa
File: 34352e3137342e34302e302f32322d3234203d3e20323638383432.roa (raw, json)
Hash identifier: qmHE/gYfREzJXFBGtJhzPj6s6/i+afmVYb3rQkbe7o8=
Subject key identifier: 5C:89:49:29:84:C3:57:BD:51:33:B7:7A:1B:8B:CC:F7:8E:91:53:C4
Certificate issuer: /CN=0F047AA6C1AB573EF113512D5843094035A22397
Certificate serial: 7E14459026A45EECC1181533D290B0FEBB7129D7
Authority key identifier: 0F:04:7A:A6:C1:AB:57:3E:F1:13:51:2D:58:43:09:40:35:A2:23:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F047AA6C1AB573EF113512D5843094035A22397.cer
Subject info access: rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3234203d3e20323638383432.roa
Signing time: Tue 07 Nov 2023 12:19:01 +0000
ROA not before: Tue 07 Nov 2023 12:14:01 +0000
ROA not after: Tue 05 Nov 2024 12:19:01 +0000
asID: 268842
IP address blocks: 45.174.40.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:14:45:90:26:a4:5e:ec:c1:18:15:33:d2:90:b0:fe:bb:71:29:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F047AA6C1AB573EF113512D5843094035A22397
Validity
Not Before: Nov 7 12:14:01 2023 GMT
Not After : Nov 5 12:19:01 2024 GMT
Subject: CN=5C89492984C357BD5133B77A1B8BCCF78E9153C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:32:dd:4d:f6:e2:2d:74:66:07:ec:ac:e7:0a:
97:48:19:86:03:7c:9c:8f:23:c4:20:82:f9:f9:d7:
ad:20:83:0d:02:c5:c0:1f:17:68:19:cb:d0:e8:2d:
2f:0f:5a:f8:e3:e9:f7:0a:fe:c7:5a:82:5e:d0:1a:
51:86:a5:35:42:a3:61:cd:d1:e9:ef:f5:57:d6:cc:
e9:d5:f6:7e:e4:3c:7a:86:74:a1:da:c2:23:7d:f4:
2e:c4:c6:86:b3:d5:cc:22:8e:09:e5:2e:26:2a:c9:
49:7a:90:d5:69:bb:f3:95:b8:eb:27:a5:25:bd:24:
e4:08:50:db:c9:bd:d4:01:fe:09:1b:b3:aa:1f:01:
42:cc:65:0d:3c:da:25:2f:8d:9d:2a:db:f7:59:6e:
5d:29:c6:48:7b:cf:8e:09:42:55:04:31:bc:45:6e:
7e:75:3c:cf:c4:2f:b0:b0:b4:62:9f:b0:11:9b:92:
41:34:e8:8f:c5:41:0e:ba:24:92:62:55:39:0e:d3:
71:f6:1f:0c:43:ba:c4:59:43:bb:d2:0e:a5:e8:b5:
16:7e:14:43:97:3c:f2:28:c3:41:9d:31:26:e2:8b:
97:c7:a0:46:ed:9b:d0:8e:e9:52:43:64:e5:a2:06:
50:d1:25:82:a3:f3:65:17:a9:5c:12:a1:a7:65:f9:
df:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:89:49:29:84:C3:57:BD:51:33:B7:7A:1B:8B:CC:F7:8E:91:53:C4
X509v3 Authority Key Identifier:
keyid:0F:04:7A:A6:C1:AB:57:3E:F1:13:51:2D:58:43:09:40:35:A2:23:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/0F047AA6C1AB573EF113512D5843094035A22397.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F047AA6C1AB573EF113512D5843094035A22397.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/63eThNL8QKF3SaxphnP3ojRLhDABfZhooi2HQH21x8Hq/0/34352e3137342e34302e302f32322d3234203d3e20323638383432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.40.0/22
Signature Algorithm: sha256WithRSAEncryption
56:12:0d:b7:1e:13:98:a5:90:91:20:b9:63:71:fc:25:a8:84:
59:2f:dd:95:6e:a5:94:f3:43:e4:6f:e7:ab:77:4f:f8:e2:31:
46:cc:d6:d8:38:57:6f:46:3b:81:c1:92:73:4d:6c:c5:b2:c7:
5d:10:4b:eb:1a:51:05:08:c6:07:05:f6:44:1c:d3:d9:46:92:
a6:f3:8d:d5:4a:7f:49:e2:52:1a:2b:33:b4:01:63:af:d2:c5:
04:89:fe:c6:ef:d5:74:7e:aa:d3:90:5c:85:95:40:e4:d0:32:
50:28:fb:07:8e:25:46:b0:00:b4:e0:0e:8e:de:c7:12:98:fd:
68:1b:f4:1a:cb:06:bf:46:ca:82:8a:78:70:c9:86:a4:c5:94:
70:fc:8c:29:e8:8a:61:51:8a:a6:c2:49:b5:73:fd:13:46:4d:
3b:ca:03:11:76:0a:a9:c0:30:99:01:06:15:a9:43:59:04:54:
fb:f1:44:9f:bb:ec:c9:44:ff:21:fd:61:d2:ca:48:e5:89:4b:
12:c5:56:b5:cd:e4:60:df:43:d6:c3:1a:4a:79:c4:01:98:04:
40:58:e9:5c:5b:4c:91:4b:7e:35:6b:c1:17:4d:1b:66:4d:17:
94:f8:e9:dd:37:8c:71:e0:3e:82:bc:b8:06:cb:6e:55:d5:74:
76:b2:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 19 00:40:49 2024 by rpki-client on console-ams.rpki-client.org