Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32332d3234203d3e20323638313630.roa
File: 34352e3137302e3134342e302f32332d3234203d3e20323638313630.roa (raw, json)
Hash identifier: KGLPQ5U2eIX1U+pfnFl9iRMwvmcyLAnix1D69p7TNIM=
Subject key identifier: 79:83:51:7D:32:79:21:8D:FF:51:59:CA:2D:96:E0:28:0C:B2:03:5D
Certificate issuer: /CN=B795E64BA1E2F5B1580AA0E798426FEAF258FA8F
Certificate serial: 1CD28511187B3593B2344CBAB3C67E4600C725BE
Authority key identifier: B7:95:E6:4B:A1:E2:F5:B1:58:0A:A0:E7:98:42:6F:EA:F2:58:FA:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32332d3234203d3e20323638313630.roa
Signing time: Mon 20 Nov 2023 21:24:45 +0000
ROA not before: Mon 20 Nov 2023 21:19:45 +0000
ROA not after: Mon 18 Nov 2024 21:24:45 +0000
asID: 268160
IP address blocks: 45.170.144.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d2:85:11:18:7b:35:93:b2:34:4c:ba:b3:c6:7e:46:00:c7:25:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B795E64BA1E2F5B1580AA0E798426FEAF258FA8F
Validity
Not Before: Nov 20 21:19:45 2023 GMT
Not After : Nov 18 21:24:45 2024 GMT
Subject: CN=7983517D3279218DFF5159CA2D96E0280CB2035D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:49:7c:d7:9c:eb:cc:f0:0f:a3:a9:6b:58:3e:
b9:c0:de:2b:8a:e7:a2:ec:6c:8d:77:bd:28:95:09:
24:b2:3b:62:1e:ce:c7:46:7f:ef:62:e6:a0:be:ea:
08:86:8d:95:2f:52:c3:3d:9d:bf:9b:db:f4:80:06:
5d:9e:1b:68:38:46:f2:ff:8d:7d:0c:a2:16:17:b1:
7e:6e:57:cc:99:cb:b7:97:38:8b:42:83:b6:35:86:
05:31:4e:a6:ae:84:56:94:ba:fa:8f:a0:32:1c:4b:
21:98:6b:3c:da:55:aa:8d:63:d2:42:69:54:32:6c:
2e:c1:e4:ed:33:91:de:3f:73:3f:73:26:2f:3f:6f:
01:13:03:e5:8f:df:bc:ed:53:9c:67:34:cd:d5:91:
40:06:d8:3d:50:e5:bd:5e:4e:9a:47:cc:07:96:86:
26:86:4a:66:4f:4a:ad:59:fd:fd:39:cd:fa:aa:dd:
d9:90:ce:a7:b4:39:86:cf:89:ad:f6:28:e6:9e:71:
4c:15:14:80:0a:42:cf:d1:7b:8a:0c:3f:fc:c3:62:
88:b9:43:24:34:a6:96:f8:d6:9a:18:21:7a:1e:ea:
74:9f:4d:ef:22:35:d2:a3:63:58:a8:ea:bf:4a:d1:
9b:6c:60:c3:53:44:89:bc:63:7c:4e:33:b5:f3:a5:
7f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:51:7D:32:79:21:8D:FF:51:59:CA:2D:96:E0:28:0C:B2:03:5D
X509v3 Authority Key Identifier:
keyid:B7:95:E6:4B:A1:E2:F5:B1:58:0A:A0:E7:98:42:6F:EA:F2:58:FA:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B795E64BA1E2F5B1580AA0E798426FEAF258FA8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/34352e3137302e3134342e302f32332d3234203d3e20323638313630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.144.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:3f:52:5d:97:bf:2e:9e:19:88:99:b8:3a:82:c4:71:34:bf:
76:c5:f6:d8:71:a9:f0:a4:74:74:8a:18:c8:62:37:65:2a:5f:
1e:33:9c:1c:0d:6a:80:3b:9f:d9:fd:e5:20:59:30:25:a0:8e:
eb:36:00:33:15:79:eb:db:9c:ad:cc:fb:9e:b8:67:a5:a3:97:
a8:f8:ba:98:86:08:76:ed:20:bd:a1:11:ff:5d:cc:1b:82:5b:
05:3c:b2:b5:e0:50:32:20:2f:d5:9e:9b:d9:e9:05:e0:89:9e:
ec:fb:b2:b7:f0:5a:a3:f0:2f:78:bf:55:6a:ee:2a:46:9b:e7:
da:64:ee:05:29:3e:0b:e1:dd:20:15:2b:bc:02:20:15:8b:ce:
82:5e:55:ad:52:42:ff:d0:8d:e1:84:a7:aa:3a:9f:2e:f0:63:
5d:8c:d2:cb:bd:3a:d5:0f:79:80:19:27:27:bc:0f:bd:bb:61:
6b:da:1e:b2:13:02:2a:ab:f1:9f:00:35:b7:24:f3:7b:91:3d:
a9:04:36:d3:20:17:7c:eb:a8:6c:31:c3:e0:43:7f:27:ea:ef:
66:2f:26:a4:69:0e:e8:f1:14:ed:3a:1e:a2:46:78:1c:8d:d3:
ec:35:56:46:ce:34:2e:fa:04:0e:41:bf:7a:88:96:09:f6:53:
5f:b6:62:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 18 22:06:15 2024 by rpki-client on console-ams.rpki-client.org