Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230392e302f32342d3234203d3e20323638323134.roa
File: 34352e3233352e3230392e302f32342d3234203d3e20323638323134.roa (raw, json)
Hash identifier: rrV9eH4rKSmvOSRl80lh32HUnBnJ1OXeFgUwDvFjcdg=
Subject key identifier: F1:E4:7F:31:03:6E:7D:9B:13:27:4A:C7:2A:DB:10:A4:A6:FE:46:EA
Certificate issuer: /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial: 2ABDC6CC2A2BB75A760E4DA20DBDF6BB0D5BF6E9
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230392e302f32342d3234203d3e20323638323134.roa
Signing time: Wed 22 May 2024 20:30:42 +0000
ROA not before: Wed 22 May 2024 20:25:42 +0000
ROA not after: Wed 21 May 2025 20:30:42 +0000
asID: 268214
IP address blocks: 45.235.209.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:bd:c6:cc:2a:2b:b7:5a:76:0e:4d:a2:0d:bd:f6:bb:0d:5b:f6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Validity
Not Before: May 22 20:25:42 2024 GMT
Not After : May 21 20:30:42 2025 GMT
Subject: CN=F1E47F31036E7D9B13274AC72ADB10A4A6FE46EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:9f:91:2a:d4:cf:bd:ef:20:c1:e5:68:a4:bf:
65:e5:1f:0d:f7:6a:cf:1c:19:91:d6:52:ef:06:b0:
04:21:74:6f:42:8f:c5:a3:09:96:6f:42:ad:c4:a8:
8f:66:47:d3:3b:0e:cb:af:3f:33:6d:0e:26:13:c2:
93:94:36:03:f3:24:e8:33:e4:1a:0b:9a:a8:ed:47:
00:0d:85:db:e8:ce:a9:d3:31:25:b9:63:68:b6:87:
b6:e1:9e:56:bc:13:2a:a6:58:38:c4:54:e8:4f:52:
be:f4:62:35:4b:68:39:84:d3:c6:c0:68:60:8e:0a:
32:7d:80:e3:03:82:de:c5:14:8e:77:41:9b:40:8b:
57:c5:0d:50:bd:0d:bc:34:7a:6e:f2:b4:01:11:66:
fa:a8:bb:93:ab:9b:e3:04:94:75:e7:cd:b5:48:ba:
f8:f4:57:df:91:73:6c:8c:a1:88:55:21:5f:69:cc:
14:0f:60:88:b5:cd:f1:ed:57:7d:dd:1c:ec:73:9d:
35:88:fe:43:c1:2a:e6:e0:73:24:6f:50:39:d9:74:
d4:60:28:2d:0a:f7:3a:ed:c4:50:93:ea:4f:a9:65:
e0:ee:d1:9e:e1:bc:e7:64:2d:a7:07:7b:6f:d5:bd:
62:43:05:93:58:fe:e1:12:c3:77:a7:74:19:82:00:
6d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E4:7F:31:03:6E:7D:9B:13:27:4A:C7:2A:DB:10:A4:A6:FE:46:EA
X509v3 Authority Key Identifier:
keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230392e302f32342d3234203d3e20323638323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.209.0/24
Signature Algorithm: sha256WithRSAEncryption
49:86:84:93:43:bc:b5:f8:e3:84:d8:1f:60:ab:38:ad:7d:1f:
54:08:a8:19:e0:59:a6:4d:ad:55:85:cb:18:96:35:5c:6e:dd:
b7:bc:49:22:90:79:80:96:f5:1c:41:53:f6:41:04:a7:25:c6:
30:13:e4:c2:48:79:ba:fa:2c:2e:88:43:34:96:e0:32:e1:f5:
9a:63:f8:90:90:b1:d3:69:2e:b2:92:6d:a8:d9:5b:5a:2a:47:
c5:f8:95:28:7e:b1:4e:18:3f:ee:fe:99:60:dd:3e:4b:db:7e:
8f:17:85:f8:d1:e7:5e:98:d3:69:cb:20:2f:a4:f1:93:41:5d:
4b:0d:20:8f:11:9a:e4:03:92:1b:54:b6:2d:c8:94:60:18:42:
9c:ee:9a:3f:8c:03:6d:13:78:3e:cb:32:c1:1f:b9:ba:f5:3f:
0a:a3:80:3f:b7:8a:48:1e:fe:56:5a:8c:f7:6e:93:21:50:8a:
b5:96:a0:ba:b2:c9:37:99:2c:0d:d6:9c:bc:96:9a:9a:ec:27:
3a:d5:4e:cf:1c:d6:da:67:0d:33:10:d3:0d:ba:96:b9:eb:2d:
23:b6:7a:4a:84:82:d5:d4:26:cb:85:a3:d2:82:09:cf:be:31:
83:ec:33:2a:39:06:55:6c:01:cc:6d:80:df:9d:a7:cd:87:f2:
73:b2:a7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 23:20:23 2024 by rpki-client on console-fra.rpki-client.org