Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32342d3234203d3e20323638383738.roa
File: 34352e3137342e31382e302f32342d3234203d3e20323638383738.roa (raw, json)
Hash identifier: /NGm9oZh19Ccj091sZU/9SJ3KZjNInWfwKm0JbMulSk=
Subject key identifier: 25:97:90:8B:35:4B:83:88:4C:0D:FE:38:A1:A9:08:1B:7D:A5:CE:27
Certificate issuer: /CN=B41C5D20FCE773495931567B28D958303BB191D0
Certificate serial: 3E68CD0AFE561A822E4E832047974325F8D9D639
Authority key identifier: B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32342d3234203d3e20323638383738.roa
Signing time: Fri 09 Feb 2024 12:32:33 +0000
ROA not before: Fri 09 Feb 2024 12:27:33 +0000
ROA not after: Fri 07 Feb 2025 12:32:33 +0000
asID: 268878
IP address blocks: 45.174.18.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:68:cd:0a:fe:56:1a:82:2e:4e:83:20:47:97:43:25:f8:d9:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B41C5D20FCE773495931567B28D958303BB191D0
Validity
Not Before: Feb 9 12:27:33 2024 GMT
Not After : Feb 7 12:32:33 2025 GMT
Subject: CN=2597908B354B83884C0DFE38A1A9081B7DA5CE27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d7:b2:e9:2d:e8:bb:71:02:75:34:c0:47:ce:
8d:89:33:80:ac:e6:d1:3e:73:9e:71:da:fa:f3:10:
88:bf:be:23:0d:a2:b7:ac:5e:a6:c8:c5:88:19:2f:
13:c6:e2:5d:12:ba:92:c3:ed:b1:8c:e2:c9:42:fa:
79:50:2e:7b:de:78:7d:30:6f:b1:a3:be:ec:60:6e:
20:2d:2d:d7:46:b3:c2:a5:e6:5f:11:60:72:45:51:
01:f0:37:06:a9:2b:fa:a0:cb:db:b8:e2:7e:96:25:
db:6e:83:9c:07:eb:3e:52:2d:78:f6:61:7b:30:01:
e8:26:a7:d4:74:9c:6d:55:be:59:da:84:e0:16:d1:
7f:0a:a3:52:ca:cc:fb:5e:cf:26:fd:e3:6d:16:7e:
0b:38:c1:32:cb:09:15:3f:6a:3f:b4:52:76:47:0a:
6d:f6:d4:13:28:06:55:61:5c:fe:07:03:ca:b9:2a:
d2:d8:28:96:8f:32:a7:25:e8:65:e3:70:d5:13:5f:
0e:08:52:f1:1d:aa:de:74:9e:b3:60:c3:c5:b6:f8:
bf:c9:bb:7e:fa:78:13:31:e4:9c:b3:92:67:4a:62:
d5:1b:ea:7e:06:d0:45:fa:fb:3c:65:1e:81:f9:27:
9d:b7:eb:80:90:db:27:ef:23:08:37:3d:33:a8:f4:
26:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:97:90:8B:35:4B:83:88:4C:0D:FE:38:A1:A9:08:1B:7D:A5:CE:27
X509v3 Authority Key Identifier:
keyid:B4:1C:5D:20:FC:E7:73:49:59:31:56:7B:28:D9:58:30:3B:B1:91:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/B41C5D20FCE773495931567B28D958303BB191D0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B41C5D20FCE773495931567B28D958303BB191D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32342d3234203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.18.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:66:2a:74:fe:38:c9:35:72:7c:71:e9:26:cf:d8:a8:79:66:
cc:52:9c:93:00:41:20:5e:a4:9e:5c:5e:f5:f5:9a:24:b5:34:
d3:17:f7:e9:4d:ec:af:36:48:27:96:8c:9f:95:74:b7:29:25:
75:23:3d:19:18:05:2e:a3:a9:bd:12:26:d5:ae:70:d4:de:ff:
5b:80:c3:c5:d2:0f:4f:8a:a5:e8:bf:8a:32:73:2f:48:b7:4d:
ff:e8:d6:2a:db:d4:ef:6a:ae:85:d1:0a:fc:da:f2:db:9f:ea:
66:40:76:d9:22:f2:2c:05:40:04:c6:95:1b:f8:b6:44:7d:ae:
8a:99:6c:93:e4:e5:1e:aa:41:d7:34:1d:16:d0:89:d0:ba:5b:
4c:e8:34:89:8a:b8:3a:df:91:bf:0e:07:e7:73:ff:fa:d7:6f:
f0:2a:70:8b:9c:57:78:0e:3d:9c:78:d1:4f:29:de:f1:ad:3b:
47:78:42:5d:7a:52:64:ad:df:31:49:07:49:77:d1:3d:8d:d3:
77:75:d5:dc:13:d4:c1:5a:cc:4d:12:8e:94:8c:8e:2b:a1:a9:
56:c4:0d:a6:a7:0d:71:d0:79:d5:d6:08:8e:6b:cc:25:b2:5b:
c4:5d:8c:69:e8:41:2e:d2:62:76:58:70:66:e0:b6:65:47:fb:
9d:98:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 05:37:51 2024 by rpki-client on console-ams.rpki-client.org