Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
File: 34352e3232392e32302e302f32342d3234203d3e20323637303931.roa (raw, json)
Hash identifier: m+xZR0bAnfpMOFyYmVTdJwcyaRBJ95rg3E1TIY9ZR0k=
Subject key identifier: DA:3B:7D:FF:72:A5:6F:AF:91:1B:A4:84:54:90:5D:E9:F6:E4:AA:1E
Certificate issuer: /CN=0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1
Certificate serial: 15086C7A44662A8D2BAF4B26D4DC3F23722C4E37
Authority key identifier: 0D:D8:5C:2F:8C:29:A3:DD:A5:88:38:B7:64:1F:E7:06:A0:AA:8D:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
Signing time: Tue 23 Jul 2024 20:50:52 +0000
ROA not before: Tue 23 Jul 2024 20:45:52 +0000
ROA not after: Tue 22 Jul 2025 20:50:52 +0000
asID: 267091
IP address blocks: 45.229.20.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:08:6c:7a:44:66:2a:8d:2b:af:4b:26:d4:dc:3f:23:72:2c:4e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1
Validity
Not Before: Jul 23 20:45:52 2024 GMT
Not After : Jul 22 20:50:52 2025 GMT
Subject: CN=DA3B7DFF72A56FAF911BA48454905DE9F6E4AA1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:fd:3e:1f:33:d5:a7:c7:ea:d3:78:93:22:
81:04:f3:40:30:89:93:a2:e4:e6:37:6f:ea:b1:89:
a3:45:9a:ef:fc:32:e9:14:e7:22:ec:39:8b:48:c4:
98:3a:78:7b:09:8d:f7:83:b8:21:93:21:bd:31:51:
13:a9:1d:ea:df:02:d6:9e:2f:37:a7:6d:42:fc:27:
1d:0e:5d:3c:ac:61:f7:88:b6:87:33:a6:73:5e:b3:
3c:6d:7d:a0:e2:3d:1d:8b:f5:ea:00:4f:1e:b1:24:
8e:f7:c9:bc:45:4c:5e:b7:45:16:1f:68:25:fd:b1:
77:8d:5d:2c:6e:87:a1:7d:80:c9:92:e4:17:7e:26:
78:c4:b1:a9:62:8b:0b:45:c9:20:76:e9:e3:d1:55:
8e:af:2e:e6:17:0e:01:a1:cc:3d:dd:88:1f:1c:a9:
9b:71:96:14:f4:9a:c1:1b:08:65:13:c4:0b:52:d1:
d3:5a:8b:a1:d8:d2:e0:71:54:3a:ec:f7:50:f6:ab:
0c:dd:ae:41:50:24:97:f4:3f:44:18:7f:7f:e3:ed:
4d:25:92:a4:ed:8e:65:46:00:7a:dd:ff:5a:e5:3c:
b7:f1:92:2f:75:e2:1a:3e:d0:67:0e:2a:6f:04:70:
fe:c9:34:91:d6:31:2f:7a:d8:10:7b:7f:ef:8f:0a:
e8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3B:7D:FF:72:A5:6F:AF:91:1B:A4:84:54:90:5D:E9:F6:E4:AA:1E
X509v3 Authority Key Identifier:
keyid:0D:D8:5C:2F:8C:29:A3:DD:A5:88:38:B7:64:1F:E7:06:A0:AA:8D:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DD85C2F8C29A3DDA58838B7641FE706A0AA8DB1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eBwtPoedPg96nZ5o4FkqqYpB9No8Zzn7UeC9Ph8qdGW/0/34352e3232392e32302e302f32342d3234203d3e20323637303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.20.0/24
Signature Algorithm: sha256WithRSAEncryption
af:09:29:91:e4:e9:54:e7:09:0e:3e:79:3f:58:5f:97:c6:2e:
28:ce:4c:32:44:84:da:46:96:ab:cd:44:b0:6e:98:a2:87:84:
8f:5f:b5:2d:92:1b:b3:5a:77:e4:67:e5:c8:0a:aa:34:bc:36:
7e:0e:58:d4:52:33:eb:4b:af:fd:f0:7c:e2:11:00:84:cf:3c:
96:54:cb:92:0f:94:e2:2a:a0:3b:46:c7:c5:32:66:b2:84:76:
6d:77:ea:5b:5c:aa:5d:d4:ea:d7:d5:92:bf:cd:6d:85:2a:a2:
11:c6:33:5d:5b:32:d1:e4:ca:e3:ed:e0:bc:47:50:60:a9:da:
95:89:4c:a1:11:be:eb:d3:31:ba:f6:75:f3:cf:21:a0:44:1d:
47:95:33:6d:37:6d:5b:d2:7c:22:4d:a1:57:68:83:c9:72:7a:
9e:34:f0:1f:a7:de:31:d9:93:4f:71:40:6a:d3:4d:44:67:87:
83:ac:62:5e:c9:da:d4:0c:62:fa:68:65:2a:34:33:99:52:cd:
64:5d:30:ec:8b:57:7e:e5:9d:05:53:a8:e3:a3:ce:ee:0d:d8:
92:3b:59:2b:1a:57:c2:6a:9f:e0:fd:39:dd:71:a9:25:7b:0c:
79:6d:00:5d:37:e6:5c:de:da:76:73:f9:3e:5b:ef:a8:86:88:
8f:6e:86:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 25 19:18:50 2024 by rpki-client on console-ams.rpki-client.org