Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3234203d3e20323638383738.roa
File: 34352e3137342e31362e302f32322d3234203d3e20323638383738.roa (raw, json)
Hash identifier: 16ppUjBoxDTTS4kUcrLpgHnpjdj+i8A9qhypywE5bD0=
Subject key identifier: 28:51:71:AE:95:B2:73:A5:3B:96:8A:4C:5C:F6:AD:9B:BD:56:1C:53
Certificate issuer: /CN=55086A695A81138C17CC984B7773F3BC07D84ADA
Certificate serial: 3D755BF3C3EE85CE244AC3F36B610A07FE8CD82C
Authority key identifier: 55:08:6A:69:5A:81:13:8C:17:CC:98:4B:77:73:F3:BC:07:D8:4A:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3234203d3e20323638383738.roa
Signing time: Mon 23 Oct 2023 09:27:24 +0000
ROA not before: Mon 23 Oct 2023 09:22:24 +0000
ROA not after: Mon 21 Oct 2024 09:27:24 +0000
asID: 268878
IP address blocks: 45.174.16.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:75:5b:f3:c3:ee:85:ce:24:4a:c3:f3:6b:61:0a:07:fe:8c:d8:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55086A695A81138C17CC984B7773F3BC07D84ADA
Validity
Not Before: Oct 23 09:22:24 2023 GMT
Not After : Oct 21 09:27:24 2024 GMT
Subject: CN=285171AE95B273A53B968A4C5CF6AD9BBD561C53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b8:92:00:55:ac:36:f3:79:bf:40:b0:39:57:
7e:4e:e3:d7:6a:44:6e:4d:e4:4e:ea:32:4a:20:93:
57:72:2c:d8:0e:28:b3:31:ec:ab:73:9e:3f:54:19:
f5:56:19:c4:8b:d0:a6:ef:0a:b9:e8:cd:75:ed:c9:
58:11:d2:5b:f6:42:bb:01:b1:95:ae:fc:26:f0:fd:
27:82:e0:be:a9:88:df:84:f8:43:e9:5f:c7:87:6b:
03:7c:1d:73:a4:3d:3f:4b:dc:19:dd:92:44:36:03:
af:ad:e3:95:b6:a5:f1:5a:a8:e1:dd:0e:a9:03:a6:
99:76:22:ea:82:cd:27:ce:a0:27:02:d1:47:64:1a:
9d:ee:bc:34:31:9a:e9:14:01:a9:de:90:80:f9:36:
05:bf:3d:25:a0:ca:6c:fa:cf:83:d2:b9:5d:51:73:
6d:86:c1:04:47:5c:55:f4:9e:62:22:62:fa:4a:f4:
c2:db:26:8d:d6:1f:1f:fc:04:d7:f1:cb:32:c9:c6:
bf:ca:68:91:4a:b0:77:55:55:e1:b3:5b:10:1d:b9:
56:f8:44:2a:1c:21:14:06:af:55:0b:64:3c:fa:d8:
0c:a0:7f:74:04:d4:f1:ba:79:72:82:fb:9d:47:66:
77:ef:16:24:82:c6:39:f2:98:13:0f:58:70:cd:33:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:51:71:AE:95:B2:73:A5:3B:96:8A:4C:5C:F6:AD:9B:BD:56:1C:53
X509v3 Authority Key Identifier:
keyid:55:08:6A:69:5A:81:13:8C:17:CC:98:4B:77:73:F3:BC:07:D8:4A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/55086A695A81138C17CC984B7773F3BC07D84ADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3234203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.16.0/22
Signature Algorithm: sha256WithRSAEncryption
83:43:ff:05:d6:60:91:a9:e9:c6:e0:fd:63:14:b8:5f:43:15:
bd:93:1d:66:7a:51:94:9a:1f:d2:e1:61:13:5a:79:8a:3e:48:
9a:44:8f:d0:53:d7:a2:e4:78:76:f1:e7:bd:bb:ee:c8:44:38:
b1:9e:e7:a0:0a:99:de:c5:bb:0f:d2:9f:1d:e8:99:60:4f:e9:
e5:3b:82:fd:36:f1:02:ad:40:2f:4a:39:e6:70:7c:d6:17:80:
a8:10:60:bb:14:25:bd:6c:7d:77:64:68:24:18:22:25:48:78:
fb:22:e5:b2:17:c8:5a:71:58:0d:d3:1f:7f:02:1b:12:87:86:
16:2e:50:70:dd:e7:10:7c:0f:26:26:8a:6d:80:57:15:89:66:
b5:97:59:e5:42:62:4f:10:1d:69:a3:ea:35:f5:00:f5:1a:3a:
5f:35:c2:15:70:d7:54:88:21:d5:23:e5:57:ba:66:db:ec:63:
db:5f:1b:b6:c7:b4:ac:7e:fb:9d:69:9b:2b:fd:2b:66:da:a9:
9d:56:ca:98:43:66:20:cc:de:c3:7b:8e:71:73:61:25:ea:de:
b5:e1:66:a9:09:91:f7:20:f0:cc:cc:e7:cc:cc:41:d9:da:55:
a0:19:3f:02:2f:01:0d:5c:ff:26:8b:cc:0a:34:66:50:5a:12:
d7:a1:76:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 00:45:09 2024 by rpki-client on console-fra.rpki-client.org