Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35332e302f32342d3332203d3e20323639343131.roa
File: 34352e3138362e35332e302f32342d3332203d3e20323639343131.roa (raw, json)
Hash identifier: xbBbN+MK0lR+d7jmCr5WlPJcCQGdW7szZB35n8vzlgo=
Subject key identifier: 33:EF:62:26:91:68:20:40:44:2F:4D:FB:39:83:92:30:E5:8D:36:89
Certificate issuer: /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial: 40DD7546CD8B43C6E2AFA37D6DF80DFB69927C70
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35332e302f32342d3332203d3e20323639343131.roa
Signing time: Thu 23 May 2024 01:37:52 +0000
ROA not before: Thu 23 May 2024 01:32:52 +0000
ROA not after: Thu 22 May 2025 01:37:52 +0000
asID: 269411
IP address blocks: 45.186.53.0/24 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:dd:75:46:cd:8b:43:c6:e2:af:a3:7d:6d:f8:0d:fb:69:92:7c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Validity
Not Before: May 23 01:32:52 2024 GMT
Not After : May 22 01:37:52 2025 GMT
Subject: CN=33EF622691682040442F4DFB39839230E58D3689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b6:bf:48:59:da:ce:b3:45:78:c1:4a:06:d8:
84:8d:99:24:0c:a3:a4:86:11:54:ee:ca:92:13:7f:
d2:4b:1b:8b:22:21:99:ce:23:6d:36:b0:3a:a6:2b:
b6:0a:d3:93:e8:f6:1d:4c:c2:f8:8a:ef:9c:93:53:
c6:5c:5c:af:df:c9:d4:1b:ac:4c:0b:ed:b9:5e:ed:
2f:28:56:70:ca:17:56:2e:99:dc:df:9f:a1:a7:f2:
eb:4d:be:f3:0f:bf:91:d2:21:8d:91:88:43:c8:f5:
7a:19:5d:f7:6c:e2:60:6b:35:ca:c1:77:60:b5:8e:
3c:a4:b8:f0:f9:4c:96:f2:d5:3f:3a:37:7e:31:6f:
f0:63:c8:72:74:31:39:2c:16:76:29:42:8a:77:0e:
51:96:b5:97:5c:e0:39:b1:eb:19:5c:54:63:f4:6e:
a1:fe:b9:3d:bf:7c:10:8c:ce:98:b3:22:71:d8:c7:
72:42:d5:d9:41:60:c4:fa:d0:d9:1b:0b:3a:08:61:
58:67:23:85:62:c9:ec:80:f7:dc:bf:9c:05:09:c3:
be:eb:11:e4:0d:1f:58:b5:28:87:74:56:bf:56:42:
50:fc:5a:cb:da:35:ac:11:af:cd:d4:e6:c7:d6:78:
24:7f:b9:50:31:2c:c2:88:dc:42:6e:32:9c:d2:d4:
d2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EF:62:26:91:68:20:40:44:2F:4D:FB:39:83:92:30:E5:8D:36:89
X509v3 Authority Key Identifier:
keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35332e302f32342d3332203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.53.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:d9:53:75:ac:58:69:73:8e:9f:e7:87:e5:d7:1c:8c:fd:9e:
c9:ba:0e:8b:2f:f4:95:7b:18:19:14:13:81:68:61:a4:c6:7a:
96:82:72:48:2a:bd:96:ec:e9:44:b2:b2:45:61:92:44:2f:86:
b9:76:8f:a9:c1:13:a1:ca:4e:81:dc:f7:3e:9e:b5:ca:91:6d:
f7:92:c2:70:3c:6a:08:81:9f:5d:2f:63:28:8e:bf:0b:bb:7a:
6e:b6:fe:d1:41:d1:49:2f:45:b4:4c:e3:a7:1b:99:9f:0e:64:
9a:94:d9:a4:ff:89:34:7f:f0:a8:54:1b:c2:08:21:9d:c0:db:
0a:9f:6c:58:1b:e9:7a:8f:56:ec:1c:35:53:d0:14:43:c7:60:
b5:d3:1c:46:14:ee:89:d5:34:16:68:c8:1e:ec:7b:13:34:13:
d4:d4:0f:aa:4c:10:9d:83:99:fb:34:47:0f:2d:b8:93:7d:12:
f7:85:f4:89:7c:f7:ad:e3:57:69:0a:72:44:88:ad:da:71:3d:
5a:fe:dd:c7:13:95:b2:5c:2c:f5:12:fb:02:19:96:f4:46:7f:
fe:51:cd:c3:b8:d4:c3:85:af:e7:5d:cd:30:ba:25:64:89:2d:
1a:e4:04:0e:67:26:d4:a9:a6:35:ac:bf:86:14:27:64:09:64:
21:5a:f8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:34:18 2024 by rpki-client on console-fra.rpki-client.org