Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3231312e302f32342d3234203d3e20323638323134.roa
File: 34352e3233352e3231312e302f32342d3234203d3e20323638323134.roa (raw, json)
Hash identifier: 8mcoECLcsn/60fU8RLJL/IASUJ1PcyWmTpJBKaj0N8U=
Subject key identifier: 80:A3:E5:63:D2:CD:D9:C6:BB:5F:FD:00:3A:37:F3:64:A4:91:2A:90
Certificate issuer: /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial: 50C3A6230269C9EEA7E0F5E555A90D673DCEE169
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3231312e302f32342d3234203d3e20323638323134.roa
Signing time: Wed 22 May 2024 20:31:01 +0000
ROA not before: Wed 22 May 2024 20:26:01 +0000
ROA not after: Wed 21 May 2025 20:31:01 +0000
asID: 268214
IP address blocks: 45.235.211.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:c3:a6:23:02:69:c9:ee:a7:e0:f5:e5:55:a9:0d:67:3d:ce:e1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Validity
Not Before: May 22 20:26:01 2024 GMT
Not After : May 21 20:31:01 2025 GMT
Subject: CN=80A3E563D2CDD9C6BB5FFD003A37F364A4912A90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:29:8b:ab:43:48:3d:f0:13:2e:b8:db:c0:e3:
83:f0:8f:9a:ab:65:b1:6b:ab:52:fe:40:73:77:73:
dc:f7:fb:d9:84:8d:2b:d2:70:70:57:c5:d2:56:e8:
e7:f9:5f:5d:30:a0:d5:2a:f4:e9:27:b5:7e:d9:08:
9c:1f:19:ca:71:59:db:31:a7:58:08:07:f5:93:7e:
da:d7:d8:23:03:a8:a8:fb:95:40:69:d1:41:d6:1c:
5b:fb:01:be:9a:d1:a3:d4:f2:1a:4e:9b:a8:46:1d:
59:d4:19:78:f7:ad:4a:78:6c:36:66:49:a1:1c:35:
c6:11:00:a1:45:2a:e0:a9:2b:d9:d1:83:b7:84:15:
0a:6d:a8:5a:35:0c:b6:a4:ca:09:63:05:ca:e7:8a:
2b:70:b7:56:f3:27:c6:ea:24:6c:e8:2a:b1:22:b0:
30:7d:97:1d:26:6f:ea:89:c5:a6:ac:00:df:8f:3c:
22:67:a5:dc:2f:05:b3:85:15:1e:15:10:40:8a:00:
10:7e:ee:76:74:3a:07:85:cd:a5:f3:c9:e0:9b:e4:
4d:35:b8:3d:da:cf:af:74:78:4c:2d:c2:75:60:e7:
a2:3f:d8:ea:68:10:5d:cb:8c:77:51:1c:53:84:85:
9b:9b:c5:08:04:0f:9e:58:aa:ba:1e:51:ec:9a:c3:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A3:E5:63:D2:CD:D9:C6:BB:5F:FD:00:3A:37:F3:64:A4:91:2A:90
X509v3 Authority Key Identifier:
keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3231312e302f32342d3234203d3e20323638323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.211.0/24
Signature Algorithm: sha256WithRSAEncryption
92:ec:c2:ab:6a:df:4b:98:db:50:d3:0a:8d:99:f7:94:5a:53:
9e:2d:5f:4d:10:24:04:73:d6:6e:da:72:b7:65:89:6d:3b:8f:
99:34:26:1e:ef:ad:20:37:76:b4:c9:1f:18:02:12:ab:a7:f8:
e0:dd:51:68:dd:13:c0:c9:b7:4c:e1:e2:73:d2:fb:aa:3d:3b:
d7:13:9f:70:72:16:e7:30:ef:74:8b:03:32:14:b3:73:04:d2:
26:9a:4a:1c:70:c3:9f:49:7b:d9:9d:7d:d9:15:d6:c8:7b:e3:
16:6f:82:85:e6:4a:00:97:bb:2f:be:3b:29:63:bf:5d:a0:eb:
4d:72:0e:8d:6d:7f:2b:a5:87:73:14:5f:73:60:c5:03:ea:e0:
c8:b9:ce:0d:a7:93:b2:90:53:94:de:60:8c:e3:11:30:35:d5:
a0:59:77:ad:e5:ef:77:d7:10:59:5d:b2:80:68:25:0c:5b:a9:
01:21:63:3e:f8:bc:b7:87:f9:dc:a9:22:c5:de:7c:18:d4:ef:
6c:28:01:13:fc:b7:d4:3d:78:ca:a4:ef:75:0c:f3:87:b8:53:
29:8c:90:97:9c:8e:e9:6a:bc:25:d3:4d:32:c1:4e:0a:bc:43:
92:a4:ff:35:ad:26:23:5b:16:5e:ca:36:b5:be:30:c9:51:1b:
e3:52:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 14 23:20:23 2024 by rpki-client on console-fra.rpki-client.org