Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/34352e3233342e34342e302f32322d3332203d3e20323637333433.roa
File: 34352e3233342e34342e302f32322d3332203d3e20323637333433.roa (raw, json)
Hash identifier: Dis4bvHTtN5bnwgl3r6vWaRmrUn6jDg/Uu9PQLqzEQ8=
Subject key identifier: BC:BB:AB:2B:15:41:94:26:19:06:10:7B:F6:D3:B7:1D:59:D7:C5:23
Certificate issuer: /CN=BEF490EECDB1D2A3F8499B8782FFBF15EE18159B
Certificate serial: 264654D82233120EDC559D5B055358E955409F06
Authority key identifier: BE:F4:90:EE:CD:B1:D2:A3:F8:49:9B:87:82:FF:BF:15:EE:18:15:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/34352e3233342e34342e302f32322d3332203d3e20323637333433.roa
Signing time: Fri 14 Jun 2024 07:14:21 +0000
ROA not before: Fri 14 Jun 2024 07:09:21 +0000
ROA not after: Fri 13 Jun 2025 07:14:21 +0000
asID: 267343
IP address blocks: 45.234.44.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:46:54:d8:22:33:12:0e:dc:55:9d:5b:05:53:58:e9:55:40:9f:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BEF490EECDB1D2A3F8499B8782FFBF15EE18159B
Validity
Not Before: Jun 14 07:09:21 2024 GMT
Not After : Jun 13 07:14:21 2025 GMT
Subject: CN=BCBBAB2B154194261906107BF6D3B71D59D7C523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:fe:99:55:7e:39:3b:bf:41:65:5d:86:40:
a4:dc:c8:42:cd:8e:fb:8e:d4:bc:77:ee:04:10:37:
94:79:c8:34:fe:a8:47:2e:66:53:75:b6:ef:ee:2f:
f3:90:8c:de:76:64:ce:d9:8f:96:ce:a2:f7:7e:d6:
10:25:c4:9b:f8:9d:b4:72:0f:23:00:80:28:0b:3f:
be:b4:13:bc:94:67:58:3c:5e:9b:62:8c:54:81:cf:
6d:a2:12:a3:78:24:c4:90:ac:fc:49:d0:a4:32:65:
94:f4:38:a4:12:b8:9f:35:30:46:4e:84:6a:4a:2c:
80:4d:1f:64:f1:b7:40:3a:97:bc:c9:15:2e:9f:94:
12:76:b0:70:7c:b7:02:c1:e1:d5:d3:ab:0a:49:44:
9b:84:b8:d7:5c:87:bc:c1:92:a8:0c:f1:b1:89:1f:
cc:53:f7:f7:d1:57:6e:d2:3f:4a:89:2d:2b:46:c0:
66:16:06:cc:bb:e3:8a:08:84:88:eb:80:a7:2f:b3:
3a:64:a3:5c:09:aa:f8:85:85:3c:c0:28:ef:9a:25:
14:f2:c4:9c:33:c8:fa:31:99:e6:af:63:2f:f4:c6:
27:09:73:98:49:0b:29:4c:9b:69:c5:38:68:8f:ed:
7e:f0:e4:d3:c3:ce:e8:de:7b:d0:35:25:d4:8a:78:
aa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BB:AB:2B:15:41:94:26:19:06:10:7B:F6:D3:B7:1D:59:D7:C5:23
X509v3 Authority Key Identifier:
keyid:BE:F4:90:EE:CD:B1:D2:A3:F8:49:9B:87:82:FF:BF:15:EE:18:15:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BEF490EECDB1D2A3F8499B8782FFBF15EE18159B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9AYHVd7oce2p1jbon5zij6QU8TKS9zR8GDbwXHhzK5va/0/34352e3233342e34342e302f32322d3332203d3e20323637333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.44.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:2c:e2:f8:17:01:3c:5d:d1:f8:36:76:ed:79:ba:9b:bf:5e:
61:72:c8:57:b7:3a:87:aa:f9:08:a0:0b:e5:1b:ef:51:c1:1b:
64:0c:dd:1b:d1:73:73:bf:6d:b3:35:b6:2d:17:f4:db:a3:46:
1e:35:ee:1f:50:61:80:c8:40:38:84:1b:83:44:23:57:23:1a:
be:a1:fa:dd:05:59:3a:f3:09:e2:23:8c:bd:96:d3:92:82:aa:
ce:c4:14:07:5e:8f:fb:c9:42:8c:1e:9f:bb:0e:ba:6e:e0:90:
af:16:0f:a9:89:f4:25:c2:2d:d7:d9:c7:7b:94:fd:a2:d6:62:
cb:9d:8d:25:ef:47:84:0f:80:66:51:34:26:d4:58:3c:22:e3:
a9:72:56:9f:06:fb:dd:02:1f:9d:07:51:da:26:1e:01:79:62:
8f:8d:56:02:99:63:89:3d:2a:95:c4:c6:11:fe:38:d2:84:d3:
02:8d:86:a4:29:b1:e3:4b:b4:3f:b8:35:34:22:e7:ab:2b:2f:
93:ca:26:83:5d:f7:f8:1e:69:7c:b5:cc:65:23:3e:b3:05:41:
de:c5:de:04:f7:ea:3a:de:eb:4a:92:59:7d:60:89:d3:c1:5a:
f1:a6:f9:43:44:b1:21:58:83:f7:6e:42:dc:b9:ad:2d:9a:22:
9e:02:49:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 8 22:29:11 2024 by rpki-client on console-ams.rpki-client.org