Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3231312e302f32342d3234203d3e20323638363932.roa
File: 34352e3136352e3231312e302f32342d3234203d3e20323638363932.roa (raw, json)
Hash identifier: rntFnvUO79VQSD9jk95cvz/dxupeThSDylDOco5TNIc=
Subject key identifier: CB:D9:0F:B4:C0:26:CE:08:EF:DD:A0:C1:75:A6:68:43:33:BE:CD:C2
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 695D6C559DC67B9139C7787C4C660518911048F2
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3231312e302f32342d3234203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:37 +0000
ROA not before: Fri 20 Sep 2024 18:52:37 +0000
ROA not after: Fri 19 Sep 2025 18:57:37 +0000
asID: 268692
IP address blocks: 45.165.211.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:5d:6c:55:9d:c6:7b:91:39:c7:78:7c:4c:66:05:18:91:10:48:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:37 2024 GMT
Not After : Sep 19 18:57:37 2025 GMT
Subject: CN=CBD90FB4C026CE08EFDDA0C175A6684333BECDC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e9:b9:42:39:fb:0d:10:e2:63:88:a9:15:96:
84:bb:6a:2f:c9:d3:96:76:47:f3:95:ae:68:cc:74:
86:34:28:ff:29:d6:73:5b:d3:c4:ac:be:a6:48:5f:
4f:95:a8:df:d4:70:f9:45:1e:f8:1f:b8:3c:d5:9d:
b7:ad:f5:76:8a:6b:bd:c1:0d:80:ba:2b:c2:28:0b:
53:2b:99:ca:8c:36:a2:ab:e8:cc:f5:8c:6b:00:09:
3c:b6:ec:43:68:a8:22:45:b0:83:c7:95:43:b4:90:
e7:d9:60:05:f7:69:b1:37:b5:e4:5c:1a:8a:b2:07:
ae:99:2b:76:1d:54:51:86:8d:d5:2e:d0:81:19:4e:
c2:50:a8:fc:04:5c:fe:ec:1c:1c:74:bc:cb:e2:32:
bf:bb:d7:3e:8b:32:37:17:b5:3d:5e:63:41:93:b4:
03:bd:13:7b:1d:3a:39:94:2d:db:39:18:7c:4d:e0:
fc:35:8e:fc:17:51:2b:06:52:ce:a7:e7:1d:e4:12:
b4:cd:f2:fa:ed:4a:b1:62:31:84:bd:8c:e1:49:80:
43:85:81:ec:68:86:ab:46:c5:dc:bc:a6:37:3f:9d:
a0:f0:47:9d:82:6f:71:e3:64:60:46:57:db:81:4f:
d2:af:3c:5c:f8:1f:b0:0f:31:ce:1b:47:9e:a6:ae:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D9:0F:B4:C0:26:CE:08:EF:DD:A0:C1:75:A6:68:43:33:BE:CD:C2
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/34352e3136352e3231312e302f32342d3234203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.211.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2f:73:69:2d:29:bb:d8:6f:ae:7b:5b:36:7c:cc:03:b5:1b:
6a:5e:88:12:e7:58:85:53:cf:3c:f1:09:fc:0b:65:73:93:87:
95:6e:4e:a9:3a:64:f1:ff:be:3d:7d:e1:08:ab:c1:ed:55:02:
5e:9b:b1:3e:dc:83:86:c0:ce:86:ed:d6:9d:29:4a:03:95:25:
60:32:c8:ec:db:71:ba:f1:2d:f3:5e:44:78:0c:b4:b5:14:77:
c4:6d:34:43:4a:54:0a:37:09:59:ea:fa:91:c3:3f:aa:e9:8c:
32:f2:b5:98:97:95:30:c4:39:df:41:9a:a7:e5:b0:c0:20:f6:
15:58:0b:22:ad:ac:15:2a:96:5d:88:27:b3:b9:5d:08:53:48:
ed:8d:db:cd:fd:bf:eb:81:b5:94:28:a6:23:32:df:60:32:ef:
13:e8:5e:88:7f:df:bf:83:72:75:29:f2:e4:81:48:09:82:66:
ec:7d:5f:1a:41:0e:0b:d6:0c:3d:d5:04:ae:9d:1b:e8:b2:ea:
21:79:3f:c8:13:0e:ee:9c:28:4d:43:b8:d2:87:38:f3:09:83:
71:a3:31:9b:a3:52:df:13:59:eb:90:be:91:f0:bc:fa:8a:79:
5c:b2:98:a4:60:f3:50:bd:e5:8a:f9:d3:22:10:cf:b2:fe:f3:
cc:d2:ad:c8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaV1sVZ3Ge5E5x3h8TGYFGJEQSPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYwMTI1QTEzMDhBQzRERTZBM0FDQ0FGQ0MzREFEOEQw
REM1MkUwNzAeFw0yNDA5MjAxODUyMzdaFw0yNTA5MTkxODU3MzdaMDMxMTAvBgNV
BAMTKENCRDkwRkI0QzAyNkNFMDhFRkREQTBDMTc1QTY2ODQzMzNCRUNEQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6blCOfsNEOJjiKkVloS7ai/J
05Z2R/OVrmjMdIY0KP8p1nNb08SsvqZIX0+VqN/UcPlFHvgfuDzVnbet9XaKa73B
DYC6K8IoC1MrmcqMNqKr6Mz1jGsACTy27ENoqCJFsIPHlUO0kOfZYAX3abE3teRc
GoqyB66ZK3YdVFGGjdUu0IEZTsJQqPwEXP7sHBx0vMviMr+71z6LMjcXtT1eY0GT
tAO9E3sdOjmULds5GHxN4Pw1jvwXUSsGUs6n5x3kErTN8vrtSrFiMYS9jOFJgEOF
gexohqtGxdy8pjc/naDwR52Cb3HjZGBGV9uBT9KvPFz4H7APMc4bR56mrjXDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUy9kPtMAmzgjv3aDBdaZoQzO+zcIwHwYDVR0j
BBgwFoAULwEloTCKxN5qOsyvzD2tjQ3FLgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGZrblZEZW1vNnJhMmpnbmJkaUU2WnhlMUZzdzRRQTNocXQybXNwZVRV
TksvMC8yRjAxMjVBMTMwOEFDNERFNkEzQUNDQUZDQzNEQUQ4RDBEQzUyRTA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJGMDEyNUExMzA4QUM0REU2
QTNBQ0NBRkNDM0RBRDhEMERDNTJFMDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzhma25WRGVtbzZyYTJqZ25iZGlFNlp4ZTFGc3c0UUEzaHF0Mm1zcGVUVU5LLzAv
MzQzNTJlMzEzNjM1MmUzMjMxMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNjM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpdMwDQYJKoZIhvcNAQELBQADggEBABMvc2kt
KbvYb657WzZ8zAO1G2peiBLnWIVTzzzxCfwLZXOTh5VuTqk6ZPH/vj194Qirwe1V
Al6bsT7cg4bAzobt1p0pSgOVJWAyyOzbcbrxLfNeRHgMtLUUd8RtNENKVAo3CVnq
+pHDP6rpjDLytZiXlTDEOd9BmqflsMAg9hVYCyKtrBUqll2IJ7O5XQhTSO2N2839
v+uBtZQopiMy32Ay7xPoXoh/37+DcnUp8uSBSAmCZux9XxpBDgvWDD3VBK6dG+iy
6iF5P8gTDu6cKE1DuNKHOPMJg3GjMZujUt8TWeuQvpHwvPqKeVyymKRg81C95Yr5
0yIQz7L+88zSrcg=
-----END CERTIFICATE-----
Generated at Wed Oct 16 13:21:09 2024 by rpki-client on console-ams.rpki-client.org