Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32322d3232203d3e20323637353836.roa
File: 34352e37302e3230342e302f32322d3232203d3e20323637353836.roa (raw, json)
Hash identifier: Xy3CbGw2vMMX2Ozo4YxeMrgpdVMSSekoaJApkX3Rj90=
Subject key identifier: AF:A9:9A:F4:5D:49:E3:FE:37:A3:9E:45:E9:C4:16:26:71:61:92:BC
Certificate issuer: /CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Certificate serial: 1C017A6F7403DEAD1E335B754E9833E78FF20625
Authority key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32322d3232203d3e20323637353836.roa
Signing time: Sun 22 Sep 2024 20:48:29 +0000
ROA not before: Sun 22 Sep 2024 20:43:29 +0000
ROA not after: Sun 21 Sep 2025 20:48:29 +0000
asID: 267586
IP address blocks: 45.70.204.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:01:7a:6f:74:03:de:ad:1e:33:5b:75:4e:98:33:e7:8f:f2:06:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Validity
Not Before: Sep 22 20:43:29 2024 GMT
Not After : Sep 21 20:48:29 2025 GMT
Subject: CN=AFA99AF45D49E3FE37A39E45E9C41626716192BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:0b:27:86:4e:84:c4:b7:50:fc:4b:1a:c0:
36:e3:5c:78:9a:3d:92:fc:f4:8e:90:b8:a1:b1:94:
3a:14:84:45:7f:17:01:68:c5:80:65:e9:5e:5a:7f:
26:2c:e2:e4:f2:c9:27:71:1d:48:49:3d:d2:d5:ef:
21:d8:1b:09:9d:a8:72:51:93:15:8e:51:fb:65:55:
7c:eb:2e:d7:20:d1:d9:a4:59:b8:1b:60:10:fe:79:
3b:dd:cf:fe:59:47:b1:55:f3:85:e8:f7:db:08:50:
55:18:6c:78:6f:03:23:09:fb:5b:3e:51:eb:a8:d6:
26:d5:63:a5:aa:de:92:55:17:21:da:4d:ae:4a:8c:
7f:c5:be:30:b1:11:62:b5:d9:4c:20:d6:f8:6e:dc:
f3:ce:fe:6b:70:96:19:cf:a2:70:11:36:48:99:b6:
d8:d3:f0:4d:95:f1:33:0b:c4:63:8d:23:80:c6:44:
aa:6c:3f:15:41:76:e7:e7:46:f6:19:4a:aa:02:f7:
9b:fb:83:d5:79:90:55:51:b7:35:5f:78:a4:0e:d0:
47:a9:62:af:55:79:65:b5:4a:67:11:e2:0a:4c:f1:
5f:a2:38:af:54:0f:8b:aa:24:df:30:13:9f:5d:20:
a8:85:e1:4c:cd:04:47:5c:e2:77:0b:e5:95:10:b5:
1c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A9:9A:F4:5D:49:E3:FE:37:A3:9E:45:E9:C4:16:26:71:61:92:BC
X509v3 Authority Key Identifier:
keyid:D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32322d3232203d3e20323637353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.204.0/22
Signature Algorithm: sha256WithRSAEncryption
57:dd:63:8d:9b:7c:27:fd:12:23:41:0f:72:49:98:55:a7:f4:
f3:77:64:43:f1:00:e9:9b:54:a1:fd:23:fe:af:24:1b:09:ac:
a4:29:0b:e1:ab:ea:22:d0:74:74:fe:16:11:56:d0:ca:95:8f:
31:2c:f7:41:2d:26:5f:02:ed:27:fa:5d:62:ae:af:e4:d3:66:
04:a2:ac:d7:30:44:73:40:fb:4f:2b:36:9e:ef:19:94:13:90:
b8:04:d0:34:a4:c9:c9:fc:97:5e:51:95:32:58:aa:62:e3:92:
4d:c2:52:bc:af:de:4c:2a:fb:a6:8d:51:04:4a:14:7d:c0:8b:
8f:ec:a5:79:54:32:22:08:22:13:ef:61:14:fe:87:2d:5a:90:
c3:36:ad:65:00:b6:84:5b:35:29:d4:28:1b:2c:c7:d1:88:c6:
7a:37:3c:27:18:90:e3:45:9f:fe:15:f1:60:50:88:47:b2:1d:
aa:57:f4:59:cd:76:90:a4:28:bd:de:b6:c9:b9:08:36:f0:31:
97:34:0a:ef:07:8d:8c:59:a6:41:29:78:13:b9:a5:11:85:1d:
ee:c4:55:98:e6:f0:ac:44:9e:20:eb:74:e1:fb:c1:e9:d0:eb:
d0:56:91:2e:b3:30:dc:fb:08:32:b6:ec:63:04:b2:4b:26:c7:
6f:c5:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 21:17:34 2024 by rpki-client on console-ams.rpki-client.org