Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/34352e342e38302e302f32322d3332203d3e20323635393333.roa
File: 34352e342e38302e302f32322d3332203d3e20323635393333.roa (raw, json)
Hash identifier: Ucbu45nAv0+PHwfp5Vs/UFK1VrvNFdDIqU6VSjBxyIY=
Subject key identifier: FA:00:46:99:2A:35:41:E1:F4:F5:DB:38:32:7E:10:E1:B5:5A:F3:4D
Certificate issuer: /CN=71AF2164C86077B9032104B18C68026D9F9F9216
Certificate serial: 5DCF3B916FE6B8AB56A869FD2B476B9116F3E10F
Authority key identifier: 71:AF:21:64:C8:60:77:B9:03:21:04:B1:8C:68:02:6D:9F:9F:92:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AF2164C86077B9032104B18C68026D9F9F9216.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/34352e342e38302e302f32322d3332203d3e20323635393333.roa
Signing time: Thu 04 Apr 2024 02:22:13 +0000
ROA not before: Thu 04 Apr 2024 02:17:13 +0000
ROA not after: Thu 03 Apr 2025 02:22:13 +0000
asID: 265933
IP address blocks: 45.4.80.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:cf:3b:91:6f:e6:b8:ab:56:a8:69:fd:2b:47:6b:91:16:f3:e1:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71AF2164C86077B9032104B18C68026D9F9F9216
Validity
Not Before: Apr 4 02:17:13 2024 GMT
Not After : Apr 3 02:22:13 2025 GMT
Subject: CN=FA0046992A3541E1F4F5DB38327E10E1B55AF34D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:cb:79:6b:71:65:59:d4:a8:99:57:3a:de:
e3:13:44:2d:e6:51:90:af:d0:ba:e8:0b:64:e4:4a:
0f:aa:c1:a7:49:bb:5d:71:e5:c9:73:7f:5f:f5:a4:
ec:5d:97:da:8c:18:e9:67:cc:d5:8d:15:a3:b2:45:
43:41:55:5f:06:45:4b:28:b8:94:64:6f:1f:e3:18:
15:f9:f6:b5:2b:d8:4b:69:2b:0b:3d:ff:99:84:20:
7f:07:12:bb:f0:7b:39:5a:4a:74:9a:38:23:d2:0d:
f5:8c:07:db:38:81:fa:06:a4:e7:0b:22:7d:88:56:
0c:73:63:ab:27:7d:01:4e:40:38:0c:c2:df:df:af:
74:72:45:13:5c:1d:ae:59:f1:55:8f:82:eb:de:14:
d9:87:08:08:dc:a3:f0:40:f3:42:30:dc:69:37:89:
6b:ce:60:08:3d:13:8c:2e:d4:14:c9:c4:01:57:c2:
bf:2d:d9:86:9c:36:87:00:f1:72:cf:08:99:57:72:
b4:5c:14:0d:f2:33:1f:b9:b0:64:b7:ae:f5:69:52:
09:61:a3:c2:34:84:87:98:40:ec:a1:ab:19:c5:3d:
f4:ce:99:78:16:02:c0:16:63:36:a0:6b:98:96:3e:
e8:3f:f7:f5:6f:2d:24:cf:ab:0d:50:3c:28:36:6f:
6e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:00:46:99:2A:35:41:E1:F4:F5:DB:38:32:7E:10:E1:B5:5A:F3:4D
X509v3 Authority Key Identifier:
keyid:71:AF:21:64:C8:60:77:B9:03:21:04:B1:8C:68:02:6D:9F:9F:92:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/71AF2164C86077B9032104B18C68026D9F9F9216.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/71AF2164C86077B9032104B18C68026D9F9F9216.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/34352e342e38302e302f32322d3332203d3e20323635393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.80.0/22
Signature Algorithm: sha256WithRSAEncryption
95:34:4c:17:f4:e0:e7:b1:bc:3f:8a:d8:6e:74:9c:9d:5f:e7:
3e:87:42:19:62:0a:61:00:74:89:b4:3f:77:7d:eb:09:1c:63:
94:da:2d:f3:e6:f5:f9:69:a0:c5:10:1b:aa:88:81:c4:95:41:
b9:44:ad:ef:55:df:36:61:5e:49:97:75:9b:7c:e6:65:bf:7f:
72:b0:17:21:e8:2e:a6:9d:a8:04:2e:e8:b4:d2:ed:75:2c:f7:
8a:44:ad:41:a1:d2:be:82:08:4f:d6:ee:59:56:f0:ce:a5:61:
be:cd:b1:5e:ec:06:a3:17:b5:bd:58:ed:4b:c0:e4:d0:85:99:
9e:ae:c8:bd:c4:77:de:47:ef:49:08:c5:5b:2c:5e:a3:e7:54:
6a:da:41:c7:8f:31:59:ae:be:fc:34:73:f6:6f:24:00:af:c5:
df:2f:6c:80:69:81:64:eb:e8:25:38:57:42:bc:c4:22:0f:05:
dd:34:6e:16:de:c4:ea:21:80:1e:98:f9:84:f1:b1:ed:3c:d6:
11:7a:8f:0e:38:75:ac:a8:e9:1c:5b:6e:9f:91:cb:62:74:6d:
0b:d7:ae:d7:e2:d9:f1:cc:5e:8e:41:e0:cd:cf:b9:2c:88:62:
e7:b2:db:28:95:70:0a:31:35:fd:61:42:e9:7a:29:80:a6:28:
1d:43:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 10:01:18 2024 by rpki-client on console-ams.rpki-client.org