Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3235302e302f32342d3234203d3e20323638373239.roa
File: 34352e3137312e3235302e302f32342d3234203d3e20323638373239.roa (raw, json)
Hash identifier: cyToy1slvnWRs8hY0tSScNk2eUUSZ2kyLa2Zo27Wx2U=
Subject key identifier: 0C:D8:5F:6D:B8:57:40:FE:47:79:23:88:48:A5:D3:70:B6:41:D7:A1
Certificate issuer: /CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Certificate serial: 0A117E6D478E0BCA8B457898AA6B2EBFA5880F5D
Authority key identifier: 88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3235302e302f32342d3234203d3e20323638373239.roa
Signing time: Thu 04 Apr 2024 07:56:18 +0000
ROA not before: Thu 04 Apr 2024 07:51:18 +0000
ROA not after: Thu 03 Apr 2025 07:56:18 +0000
asID: 268729
IP address blocks: 45.171.250.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:11:7e:6d:47:8e:0b:ca:8b:45:78:98:aa:6b:2e:bf:a5:88:0f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8881C2C20AAAF7924613B94374865D8C137EAD42
Validity
Not Before: Apr 4 07:51:18 2024 GMT
Not After : Apr 3 07:56:18 2025 GMT
Subject: CN=0CD85F6DB85740FE4779238848A5D370B641D7A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:17:7a:c2:cf:32:7c:e1:95:ce:90:f7:95:f9:
23:9e:15:e0:1b:a4:dd:10:0a:90:ca:24:31:0e:e2:
af:ef:68:b7:a0:5f:d8:b0:30:15:c0:98:55:22:04:
2b:29:29:29:34:68:53:e9:e9:d2:64:7b:3c:4c:6c:
de:c5:15:e6:ec:1c:d7:49:26:a2:1e:90:ac:fa:49:
2f:d6:20:d9:f5:cd:08:38:31:e2:2f:ac:ab:e7:e4:
83:fa:71:84:68:ed:8a:a1:62:b7:89:76:7a:56:ca:
f0:6e:1c:07:7b:41:47:cd:16:af:d9:72:ac:09:36:
be:ed:ef:02:d5:52:c2:ed:03:23:26:09:9a:4a:b3:
7f:e3:38:86:1a:ab:e7:d8:4f:0d:ea:6f:18:4f:0b:
bc:5b:a4:bb:6e:0a:9e:8d:40:61:e7:89:24:25:63:
bc:6e:03:20:10:eb:59:ed:2a:4c:d1:0c:5f:33:ff:
6f:c7:18:3d:ab:e6:b6:24:32:ba:00:a0:ff:b8:a0:
ce:37:ef:dd:04:12:ad:20:a3:44:cf:11:86:57:6a:
20:0f:9e:83:df:a6:46:c2:f5:87:24:5b:2e:cc:62:
d0:79:47:e0:3a:69:a9:24:f9:f7:77:b7:1b:b0:ef:
1a:96:6d:86:09:6b:1b:a0:6c:78:70:26:c3:06:7b:
de:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D8:5F:6D:B8:57:40:FE:47:79:23:88:48:A5:D3:70:B6:41:D7:A1
X509v3 Authority Key Identifier:
keyid:88:81:C2:C2:0A:AA:F7:92:46:13:B9:43:74:86:5D:8C:13:7E:AD:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/8881C2C20AAAF7924613B94374865D8C137EAD42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8881C2C20AAAF7924613B94374865D8C137EAD42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/1/34352e3137312e3235302e302f32342d3234203d3e20323638373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.250.0/24
Signature Algorithm: sha256WithRSAEncryption
91:91:53:df:a2:a6:32:56:dc:80:6a:8b:96:c6:49:d4:51:54:
10:38:12:47:78:d3:68:a7:91:6f:e1:90:b1:1b:a2:3a:00:62:
b4:a5:a5:fa:d3:9e:75:62:6f:3c:eb:7d:46:f7:e1:de:e0:22:
19:37:c1:8e:95:50:51:e7:ff:2e:9c:49:3b:d6:c0:55:d8:e2:
e0:0f:cd:dd:14:aa:ed:83:d8:83:a4:bb:e6:7a:a7:de:5b:a8:
9c:f4:b3:9c:5f:6c:1e:40:5f:1c:34:fa:dd:c8:73:72:66:ed:
87:b1:4b:74:dd:cb:b6:c8:49:c5:b0:87:d0:36:39:a3:1d:2f:
1a:ff:d8:e5:63:4b:c3:38:66:64:10:2c:f7:94:18:c3:d9:84:
da:17:ef:f4:b8:7d:d6:70:ec:5b:d3:c3:e1:53:cd:92:aa:66:
2b:e5:c2:44:09:f2:4d:b8:ba:67:70:14:62:42:fb:1b:80:80:
da:6f:9b:c4:71:c6:46:e0:0e:6b:6b:99:30:7e:81:4c:d6:32:
a1:d2:d6:b1:32:9a:f3:6d:73:fe:9a:7f:88:5a:b3:f4:5c:1d:
d8:82:75:34:ae:a6:31:e3:1d:0f:a4:b4:c2:71:4d:68:96:66:
1d:9f:c2:fa:69:c0:67:6a:e2:0a:ac:e0:c2:5b:be:54:ed:93:
c3:46:f1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 14:49:05 2024 by rpki-client on console-fra.rpki-client.org