Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32342d3234203d3e20323637353836.roa
File: 34352e37302e3230342e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier: EnvmYxpD3vDmYz7Hhx7LsnEU9wgQnvkJUCiQpgzLUDE=
Subject key identifier: 0A:62:C7:7B:FC:AE:CB:16:65:22:19:28:40:91:35:5D:F1:C6:58:AB
Certificate issuer: /CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Certificate serial: 667EEF911D4CBBF3D6A225D9CE0C2D05E75C306D
Authority key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32342d3234203d3e20323637353836.roa
Signing time: Sun 22 Sep 2024 20:50:02 +0000
ROA not before: Sun 22 Sep 2024 20:45:02 +0000
ROA not after: Sun 21 Sep 2025 20:50:02 +0000
asID: 267586
IP address blocks: 45.70.204.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:7e:ef:91:1d:4c:bb:f3:d6:a2:25:d9:ce:0c:2d:05:e7:5c:30:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Validity
Not Before: Sep 22 20:45:02 2024 GMT
Not After : Sep 21 20:50:02 2025 GMT
Subject: CN=0A62C77BFCAECB16652219284091355DF1C658AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1c:3a:09:7c:04:ff:ad:bc:69:aa:11:38:45:
d6:5e:1c:e6:ae:b0:15:31:fc:96:55:09:a2:2c:eb:
81:92:22:82:88:ff:96:d2:b2:c3:6d:98:5f:80:80:
6f:95:57:23:1a:8e:24:22:63:01:a4:17:f5:82:a8:
0f:74:de:78:8f:19:d1:07:8b:8f:9d:98:be:a7:ff:
36:e2:d9:8e:c9:47:13:d8:82:59:10:ef:b2:bd:24:
d4:57:98:23:53:40:e2:2b:96:54:48:25:97:f5:f6:
ef:2b:c6:dc:22:95:27:5a:0d:f4:d0:50:3e:66:f7:
8e:01:01:5c:76:e3:c6:29:1d:12:d9:41:02:f6:73:
18:cc:22:22:11:25:8b:14:3e:ca:4f:5a:5d:95:f1:
33:67:ff:20:e5:2d:d7:b9:45:64:a3:6f:44:b7:93:
52:19:1e:ed:22:ca:f3:58:d3:2d:bd:cf:6c:3c:a6:
fe:ec:59:98:8d:e2:e2:ed:bd:01:f7:6f:03:29:53:
81:44:38:15:09:53:a7:0d:47:48:c5:ac:ec:d8:73:
f0:30:f7:b1:ad:99:22:2c:84:5b:66:5a:0c:7a:c3:
2d:2d:52:be:ef:c3:5b:1e:33:01:71:13:f0:bd:35:
2b:69:2a:b4:3a:4a:1f:33:80:63:5d:7d:f6:14:09:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:62:C7:7B:FC:AE:CB:16:65:22:19:28:40:91:35:5D:F1:C6:58:AB
X509v3 Authority Key Identifier:
keyid:D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32342d3234203d3e20323637353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.204.0/24
Signature Algorithm: sha256WithRSAEncryption
64:17:e5:68:8d:47:e8:16:d1:7b:2c:11:fb:09:96:32:68:70:
97:14:b8:2a:11:5a:c9:b2:de:70:a3:62:9f:50:55:dd:cb:1b:
6b:07:a3:04:7c:4d:12:7a:b9:4e:48:de:87:3e:7b:12:84:3b:
40:4b:f7:44:c9:8a:2f:fc:0d:1e:66:99:eb:65:f6:b6:cd:1c:
e2:32:7d:76:c9:3e:43:05:9c:d1:54:09:93:65:d1:42:ac:f2:
e2:8c:da:53:4d:d0:6b:7f:31:ec:7b:1d:ff:55:47:11:17:f5:
58:44:b4:f6:51:3e:03:09:11:a8:c7:58:d4:5a:d4:77:e7:f5:
88:0d:eb:c3:ea:56:37:03:74:6e:27:ae:33:0d:79:b1:4b:1e:
5d:9f:30:a4:80:99:c2:d4:83:8b:00:17:55:02:f8:dd:53:21:
96:d8:25:94:04:5b:82:af:d9:8a:55:33:69:7a:1c:cb:8f:c3:
2b:5a:af:72:10:ee:cd:1f:e9:9d:ae:27:df:68:0f:d8:29:24:
58:40:c5:ce:21:66:95:79:6c:75:1c:de:37:59:cb:4a:55:a9:
9f:f7:99:4b:66:b0:4f:b5:ab:98:0b:3d:8d:d3:f7:68:32:6c:
79:40:9d:a1:88:e1:06:e2:92:64:d1:2b:80:bb:a5:a5:cb:88:
76:20:af:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 19:25:32 2024 by rpki-client on console-fra.rpki-client.org