Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
File: 34352e3232392e32302e302f32322d3232203d3e20323637303931.roa (raw, json)
Hash identifier: bWgXajUkFeyxKhim7GKy0ZwTMSXsVMXD2/I82LaQW7M=
Subject key identifier: 4A:B9:F3:E5:9B:B1:9C:F0:AC:53:D6:CE:25:5D:5A:5D:89:77:BB:22
Certificate issuer: /CN=0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1
Certificate serial: 31449DCD660AD37F13E7ED5E7C2000562298E15F
Authority key identifier: 0D:D8:5C:2F:8C:29:A3:DD:A5:88:38:B7:64:1F:E7:06:A0:AA:8D:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
Signing time: Tue 23 Jul 2024 20:50:48 +0000
ROA not before: Tue 23 Jul 2024 20:45:48 +0000
ROA not after: Tue 22 Jul 2025 20:50:48 +0000
asID: 267091
IP address blocks: 45.229.20.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:44:9d:cd:66:0a:d3:7f:13:e7:ed:5e:7c:20:00:56:22:98:e1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1
Validity
Not Before: Jul 23 20:45:48 2024 GMT
Not After : Jul 22 20:50:48 2025 GMT
Subject: CN=4AB9F3E59BB19CF0AC53D6CE255D5A5D8977BB22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:06:e0:84:3c:2e:6b:f5:5d:11:06:b6:5e:
e8:41:cf:da:95:5c:e9:58:cf:1f:96:5c:d2:75:c8:
49:25:37:d4:17:9b:90:09:b1:f2:fc:99:23:bc:04:
60:93:10:60:09:a3:ae:a3:4c:64:32:7c:8d:e2:08:
cc:8a:c8:e3:cf:81:d7:11:3d:5f:4f:3a:52:dd:5a:
92:d6:2c:df:d3:3b:12:12:86:65:45:81:09:e3:5d:
d5:33:9d:ae:2c:35:32:cf:4b:ff:50:ad:ac:7e:7a:
f5:41:e0:ae:ee:0f:59:a5:bd:05:29:f2:99:54:e4:
b2:9d:7d:96:12:af:6b:22:e6:ad:44:37:b1:11:99:
db:ce:3f:de:c9:25:10:10:02:b8:c5:4b:7d:d6:36:
20:b9:e1:bb:fc:1c:80:9e:5d:33:18:4f:97:ec:42:
6d:ae:c8:1e:ed:41:68:aa:34:66:00:b4:75:ec:12:
ed:b2:2f:5b:b7:54:2e:dd:e9:f1:4b:3a:ec:f3:35:
97:7c:54:38:62:d2:34:cc:b9:42:75:66:5f:a6:e6:
57:be:6b:01:ef:b9:38:9c:6d:75:50:81:76:da:27:
f8:95:4c:33:ea:2d:29:f6:65:72:cc:bd:02:aa:24:
dc:82:9a:31:79:61:1c:1d:41:98:50:b0:5c:2b:86:
c5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:F3:E5:9B:B1:9C:F0:AC:53:D6:CE:25:5D:5A:5D:89:77:BB:22
X509v3 Authority Key Identifier:
keyid:0D:D8:5C:2F:8C:29:A3:DD:A5:88:38:B7:64:1F:E7:06:A0:AA:8D:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32322d3232203d3e20323637303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.20.0/22
Signature Algorithm: sha256WithRSAEncryption
46:02:47:46:4c:a6:a8:91:7d:fd:9b:2a:23:c0:57:6c:81:05:
91:b6:e3:3a:31:0e:4d:ab:8b:44:c4:26:ff:9c:df:16:fd:5d:
2b:4b:93:ef:10:5b:ee:01:80:79:b7:5a:93:c0:89:42:7c:ef:
48:5c:f6:7e:34:f1:43:0e:55:e3:8f:3f:57:7f:bc:4e:5b:35:
e0:bc:05:6e:14:e9:dc:a4:8f:73:39:08:16:50:8c:08:75:50:
6a:a2:aa:e8:65:4b:32:8d:49:5f:74:4d:d2:8a:c0:0d:21:d6:
cc:5e:53:9f:8f:35:8b:29:98:a8:11:47:0d:9f:2e:5c:40:44:
c2:26:23:72:fa:a2:2d:4c:b9:7f:90:16:4d:2a:7e:af:26:81:
8a:62:d8:4c:95:f9:ef:4f:58:d4:f6:2c:13:1b:a3:5c:7e:f3:
1e:dd:ad:3e:f3:32:59:60:b2:7b:50:3b:ff:66:5d:68:04:c7:
ba:7d:70:29:2a:83:d7:83:d2:0d:f2:5d:31:42:d6:87:41:87:
06:b9:53:b4:21:47:a1:dd:91:62:2d:2b:3e:82:e4:38:a2:47:
8c:fc:d9:1a:dd:0e:49:6d:5d:a6:0d:78:46:a0:d4:df:4c:17:
f3:e9:f8:8f:f5:d1:66:56:a0:78:0a:d0:b7:16:98:3e:ed:2d:
91:11:bb:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 19:18:50 2024 by rpki-client on console-ams.rpki-client.org