Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
File: 34352e3137392e32302e302f32322d3234203d3e203631383434.roa (raw, json)
Hash identifier: w/wB7WHAI0JiNuikS8TXC3zK+f4DIavBRZMEPUqOZUA=
Subject key identifier: 48:DF:9C:A4:AC:A9:5F:19:60:5B:06:77:8F:98:6F:C8:C1:2C:98:A2
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 13BBAC74925BAEC0F31C5C3FE826AE674CD88A10
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
Signing time: Thu 31 Oct 2024 16:59:43 +0000
ROA not before: Thu 31 Oct 2024 16:54:43 +0000
ROA not after: Thu 30 Oct 2025 16:59:43 +0000
asID: 61844
IP address blocks: 45.179.20.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:bb:ac:74:92:5b:ae:c0:f3:1c:5c:3f:e8:26:ae:67:4c:d8:8a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 16:54:43 2024 GMT
Not After : Oct 30 16:59:43 2025 GMT
Subject: CN=48DF9CA4ACA95F19605B06778F986FC8C12C98A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e0:8f:3f:d2:b4:47:62:5a:89:d7:2a:f2:b1:
1f:5f:1b:b7:6a:0a:bb:f6:d3:d0:87:23:4c:7d:a6:
23:05:0b:b8:7f:8c:76:61:5d:40:fb:dd:58:9b:24:
b4:a0:66:9b:89:17:9b:cf:12:68:8a:1a:64:64:9c:
10:26:b3:b5:27:40:b1:45:af:9a:d0:28:1a:36:73:
4f:6e:17:ce:25:72:62:a7:c6:f0:c0:03:f4:ac:0c:
d5:6f:f3:59:61:56:75:12:0e:71:52:b4:f4:ab:f3:
f5:fb:16:96:41:72:39:ec:1e:52:fa:ac:19:ce:06:
57:be:83:ef:86:40:a4:c0:5e:34:62:c1:9d:ff:1d:
4c:3c:1c:3e:70:9d:9b:f8:9b:85:9f:68:e5:03:e1:
7b:eb:13:25:ce:de:ba:2f:f2:9b:44:7d:eb:9d:e4:
31:30:ee:1e:6e:af:9c:71:c3:bf:a5:a3:36:5a:00:
fc:45:68:24:42:3c:af:10:47:7a:db:45:a5:1d:a6:
92:57:8c:7b:fd:bc:a9:1f:f8:de:e2:d2:76:09:93:
26:1b:0b:88:2d:91:ce:32:05:01:84:61:e7:2e:f2:
84:99:73:a2:7b:4e:4d:b7:97:c4:04:fe:67:31:40:
1e:44:fb:28:67:00:fb:d3:2d:a2:e8:6f:2e:f3:90:
45:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DF:9C:A4:AC:A9:5F:19:60:5B:06:77:8F:98:6F:C8:C1:2C:98:A2
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/34352e3137392e32302e302f32322d3234203d3e203631383434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.20.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:e6:2b:b6:06:98:88:42:e4:93:74:da:6c:6b:43:24:81:79:
3e:dc:3f:f3:e9:b7:3e:26:cb:92:1b:df:0b:98:5b:fe:8d:cf:
22:d1:57:97:87:7d:b6:5c:29:39:1d:27:05:34:ba:30:b8:d0:
07:40:aa:b4:0c:f7:ec:84:fc:02:3e:c0:cb:39:d8:39:ce:eb:
75:45:4e:e9:03:dc:fa:a7:1a:32:68:fb:eb:1a:8e:31:44:dc:
9b:c9:fc:7b:44:2f:1f:5d:7b:08:3d:cd:b1:90:df:0d:80:70:
ad:28:09:6c:a9:58:a9:ed:03:7b:20:06:47:97:ac:cf:21:e8:
74:6d:ef:d5:3f:c9:a7:f4:2f:52:df:9e:06:e6:71:6e:d5:7e:
1b:3c:33:c1:64:e1:5e:14:2e:c9:80:2c:71:de:99:f1:e5:41:
44:9e:5c:5d:a2:75:66:d3:a1:20:1c:2c:d8:d7:5a:ed:3a:1f:
41:41:14:62:e5:f1:87:c0:d7:69:e7:ec:f4:f2:5a:2e:6b:57:
86:f6:dd:ce:07:84:55:b9:c1:fd:cb:06:85:2f:e0:68:97:0c:
57:29:d8:3e:e8:11:05:ba:ed:c5:c2:09:c4:a6:85:84:a1:41:
a5:82:91:6e:d9:07:8f:a8:4a:f0:52:90:17:da:b9:8a:56:7c:
0f:99:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 6 08:26:55 2024 by rpki-client on console-ams.rpki-client.org