Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
File: 34352e37302e3230372e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier: PCE+kTKGfmGjMVxR3R9bURqzFH1WovU54JkMdEu4R4Q=
Subject key identifier: E7:83:B1:5D:AA:8B:1A:E3:99:3D:0F:F5:6E:70:C5:BA:AF:87:9A:AF
Certificate issuer: /CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Certificate serial: 119BB85EBB781BF8B9292D8741B21259B20A9FC0
Authority key identifier: D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
Signing time: Sun 22 Sep 2024 20:52:12 +0000
ROA not before: Sun 22 Sep 2024 20:47:12 +0000
ROA not after: Sun 21 Sep 2025 20:52:12 +0000
asID: 267586
IP address blocks: 45.70.207.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:9b:b8:5e:bb:78:1b:f8:b9:29:2d:87:41:b2:12:59:b2:0a:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D60A5069594F9BB626A3332DFE16DD7A74DE61A0
Validity
Not Before: Sep 22 20:47:12 2024 GMT
Not After : Sep 21 20:52:12 2025 GMT
Subject: CN=E783B15DAA8B1AE3993D0FF56E70C5BAAF879AAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:13:a8:fb:db:9a:84:8b:2d:91:1e:1e:ad:
49:e1:fa:43:c3:24:8a:1f:f0:77:4f:b6:7f:81:52:
0f:fe:d4:f2:a7:bc:d3:c4:36:4a:21:c4:e4:0e:43:
e7:78:4d:57:b6:24:62:0d:f9:3d:44:fb:96:7c:12:
26:1d:b4:c3:37:f8:58:6b:de:c4:4a:8f:5d:ed:61:
f0:24:57:47:64:0d:80:34:2b:d9:83:04:02:80:73:
f8:72:48:34:6b:68:bb:fe:3f:6f:7d:44:ad:54:27:
5c:61:7a:84:b2:f4:1c:80:0e:ae:41:35:fd:fe:74:
c4:13:d9:95:23:3a:4c:90:a0:dc:ea:0a:39:bc:5b:
a3:b6:af:c2:9a:13:34:2d:2a:fd:64:a8:f2:4a:ba:
ee:ff:bf:e1:5e:04:6b:4d:b7:21:a2:88:97:d8:31:
29:ff:a3:1d:c5:51:f4:de:1e:d4:a8:a7:29:36:ae:
c6:9f:71:92:d1:aa:4d:cf:5a:e1:80:85:ee:d1:b2:
71:05:17:7c:ce:1a:a9:51:8d:3b:75:d2:08:eb:90:
f3:4b:a9:f3:9a:06:16:96:85:95:85:4c:07:e2:dc:
9c:e8:9a:26:b2:f0:67:93:c2:08:25:7f:12:ca:ea:
99:3f:a0:98:aa:c1:35:66:32:2e:14:bc:3c:ba:1d:
f5:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:83:B1:5D:AA:8B:1A:E3:99:3D:0F:F5:6E:70:C5:BA:AF:87:9A:AF
X509v3 Authority Key Identifier:
keyid:D6:0A:50:69:59:4F:9B:B6:26:A3:33:2D:FE:16:DD:7A:74:DE:61:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D60A5069594F9BB626A3332DFE16DD7A74DE61A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.207.0/24
Signature Algorithm: sha256WithRSAEncryption
76:62:9e:f5:0e:1b:7d:a1:cc:b9:19:a5:b7:d9:de:05:f6:0d:
5a:d6:1a:39:40:46:c5:58:e8:c7:83:83:76:6a:50:c7:7a:7f:
a8:a8:9a:db:08:d2:07:98:b8:c0:7f:25:fe:f7:27:4d:41:20:
6f:21:b9:0a:c3:f2:98:aa:9d:2c:54:2e:ca:8e:86:39:a7:40:
f8:65:2c:e6:db:67:dd:a4:04:57:63:e4:0c:c1:d0:87:f6:0b:
d1:fb:d8:fa:29:6e:11:f5:bc:7a:a4:25:99:48:ab:68:85:84:
ae:66:27:a3:cd:c0:8b:91:4a:1b:6d:5e:77:9f:13:f3:f6:9f:
9e:ba:64:0b:8c:d4:ff:35:53:e1:78:c6:4a:81:de:6c:c0:6e:
19:af:91:09:72:3f:f0:53:b5:68:7a:1e:95:ef:fe:1c:46:9f:
57:04:66:6b:cf:7e:dc:2b:10:03:bf:67:23:dc:8e:1a:8a:56:
24:91:46:51:fc:45:33:05:0f:78:cb:7b:d3:77:b8:74:ad:ca:
2a:07:fd:79:2f:00:bb:94:cf:89:dc:86:b4:32:95:94:21:a4:
8e:e9:9f:2f:43:3c:fc:8c:3e:ab:49:6c:7c:3c:2d:59:fe:a8:
9b:14:8b:66:ea:e1:65:12:92:a2:2c:97:90:fe:6a:db:39:e3:
6b:2c:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 16 21:17:34 2024 by rpki-client on console-ams.rpki-client.org