Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32332d3233203d3e20323637353836.roa
File: 34352e37302e3230362e302f32332d3233203d3e20323637353836.roa (raw, json)
Hash identifier: 0gkfR12F03pVtlMp9xC9/QSetaW0pXalQxRuYGinCr8=
Subject key identifier: CB:B8:12:6D:9E:76:BD:AD:A0:85:EE:91:41:10:79:AC:5A:7F:E1:B7
Certificate issuer: /CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Certificate serial: 335D7A0ADA6890358C99555A6B6C5F350FDA8C45
Authority key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32332d3233203d3e20323637353836.roa
Signing time: Sun 22 Sep 2024 20:49:40 +0000
ROA not before: Sun 22 Sep 2024 20:44:40 +0000
ROA not after: Sun 21 Sep 2025 20:49:40 +0000
asID: 267586
IP address blocks: 45.70.206.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5d:7a:0a:da:68:90:35:8c:99:55:5a:6b:6c:5f:35:0f:da:8c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Validity
Not Before: Sep 22 20:44:40 2024 GMT
Not After : Sep 21 20:49:40 2025 GMT
Subject: CN=CBB8126D9E76BDADA085EE91411079AC5A7FE1B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:3c:70:96:11:31:05:0f:3f:e6:88:f6:6b:
9b:7d:68:d8:49:00:7e:6a:03:43:bb:ce:33:63:ea:
07:f8:f3:0c:77:85:f7:67:7c:37:fe:52:20:b5:b5:
e0:2c:c2:bf:72:d3:67:7e:e6:81:8d:be:13:26:5b:
e1:9d:b4:a6:83:d3:66:7a:ee:d7:7d:ba:6c:5e:ba:
3b:e3:ae:ed:54:f9:82:c4:2c:62:be:46:ad:e3:e4:
fa:30:a1:e7:db:5a:4a:bf:b5:90:88:fd:9d:34:7b:
5b:66:12:8f:ff:9c:65:65:12:21:20:a8:43:a1:aa:
90:b3:59:ff:a0:04:8d:8c:17:fb:5d:6b:32:5b:6c:
f9:e1:c7:cb:63:f0:9d:9c:63:35:b5:1f:ac:21:34:
16:c0:bb:5c:42:1e:46:b6:43:30:79:72:6e:d0:f2:
51:7a:4a:ae:17:f3:38:8f:2b:36:c4:42:bf:6c:a2:
5d:26:a6:11:c4:e6:96:0c:c1:b5:da:2b:b4:ec:e1:
dc:a3:2f:1b:3f:9c:4c:bd:c2:d0:1e:ad:41:04:a9:
e1:c8:68:b8:ad:15:65:40:fe:8e:e1:c7:e8:3b:70:
ed:fb:e1:1f:4e:ba:b6:6f:02:cc:25:03:ce:8a:c1:
15:8e:f8:0f:f3:da:72:92:4c:2b:18:45:5d:91:d8:
a8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:12:6D:9E:76:BD:AD:A0:85:EE:91:41:10:79:AC:5A:7F:E1:B7
X509v3 Authority Key Identifier:
keyid:D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230362e302f32332d3233203d3e20323637353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.206.0/23
Signature Algorithm: sha256WithRSAEncryption
38:ba:55:ac:39:25:ab:9e:25:9d:47:6a:ec:94:8e:62:1f:1c:
53:12:a9:c1:40:21:9a:05:9b:16:92:9d:49:8a:00:03:14:c5:
ef:dc:81:a6:74:33:b1:19:e7:b2:2c:ef:e8:99:58:7d:f7:80:
6e:76:44:f0:65:8e:45:88:e1:9e:d9:68:4b:dd:bc:58:55:b3:
cb:98:32:7f:ce:0d:3a:a8:01:1b:87:40:20:cd:77:4d:83:c4:
e2:7b:13:2b:e8:33:ec:41:8c:cb:c1:c1:2c:c3:ce:ff:72:59:
5d:14:b6:17:50:47:e4:80:e9:74:0e:c8:4d:c2:a9:80:95:f9:
db:4b:e6:7a:72:52:28:ba:36:19:02:e7:d5:24:2e:65:c2:97:
20:fe:42:28:d0:da:8d:96:cd:b1:1e:a1:ec:d4:c9:ab:28:ba:
f8:04:c3:43:1d:dc:3c:ec:90:86:de:d4:fc:02:05:62:ef:10:
8d:c0:1b:06:9f:32:aa:92:55:61:25:e3:47:93:10:4f:62:89:
8a:af:e9:b0:79:af:9e:15:fe:1f:07:c0:ad:66:cd:70:c9:9c:
19:41:e6:32:aa:bb:c0:f1:90:f9:58:fe:5a:00:04:e9:28:c4:
72:11:1d:cb:e1:21:6b:a1:1f:9f:d7:08:fe:b2:21:0b:3b:2b:
45:b3:ff:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 19:25:32 2024 by rpki-client on console-fra.rpki-client.org