Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
File: 34352e3138362e35342e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier: /kPDNW0eI7sJd/VVJe9V645M5w1FtBLQdN4bqy81v4M=
Subject key identifier: 72:E3:C4:25:8D:4A:97:D1:96:0E:59:62:B5:27:D5:F3:FE:BC:52:50
Certificate issuer: /CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Certificate serial: 5FF356EB08FEA84DFF1B16139B254F905BE0ACB2
Authority key identifier: 70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
Signing time: Sat 03 Aug 2024 20:19:30 +0000
ROA not before: Sat 03 Aug 2024 20:14:30 +0000
ROA not after: Sat 02 Aug 2025 20:19:30 +0000
asID: 269411
IP address blocks: 45.186.54.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f3:56:eb:08:fe:a8:4d:ff:1b:16:13:9b:25:4f:90:5b:e0:ac:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=701FB1ACDA2A725C57E2F229678C45E6F0B66BA9
Validity
Not Before: Aug 3 20:14:30 2024 GMT
Not After : Aug 2 20:19:30 2025 GMT
Subject: CN=72E3C4258D4A97D1960E5962B527D5F3FEBC5250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:b4:b5:56:78:f3:a5:ac:36:87:a8:cd:99:
c4:7b:f4:ed:4e:f3:21:bc:37:b0:a0:58:ff:03:13:
44:f8:d5:b4:b5:18:0d:e7:98:52:19:ef:32:93:d0:
f7:0f:29:d8:e0:69:35:c8:e2:8e:8e:f8:02:ea:8b:
81:0e:39:f4:46:e2:e3:77:a8:63:7d:8e:ae:02:3c:
ed:fd:0d:5d:e1:26:81:b8:c9:8a:ab:22:9c:04:98:
ee:d8:0e:21:07:cd:f2:99:4a:fb:d3:6f:12:9e:73:
78:1f:77:fe:60:d6:6b:03:4f:dd:a3:3d:b0:0d:6d:
a7:04:a2:be:65:5f:37:4a:6b:a7:f4:16:69:ec:cf:
cd:f0:0d:88:3b:5d:c1:1c:cd:89:1f:c0:de:5a:d7:
9c:b2:5e:82:6d:6c:a7:e2:f6:95:ca:c3:56:77:e8:
38:a8:69:91:4d:95:f9:1c:e7:0a:eb:d0:33:54:0a:
3c:e4:1c:50:91:19:1c:98:22:5f:33:22:d6:a4:b8:
13:98:91:e5:b6:16:6a:81:45:01:a4:94:e9:ec:36:
3d:90:80:66:b3:6c:28:60:ec:7b:2b:bf:64:5e:b3:
45:79:54:3e:3b:a9:3f:3c:53:95:ff:47:dd:94:cf:
7d:44:31:c3:24:05:6f:b1:d2:b9:80:00:bf:f7:f2:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E3:C4:25:8D:4A:97:D1:96:0E:59:62:B5:27:D5:F3:FE:BC:52:50
X509v3 Authority Key Identifier:
keyid:70:1F:B1:AC:DA:2A:72:5C:57:E2:F2:29:67:8C:45:E6:F0:B6:6B:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/701FB1ACDA2A725C57E2F229678C45E6F0B66BA9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/1/34352e3138362e35342e302f32342d3234203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.54.0/24
Signature Algorithm: sha256WithRSAEncryption
59:0d:65:ab:2b:b6:0a:15:94:23:a5:fe:81:83:2c:02:db:23:
aa:fb:3c:34:87:4b:f2:16:bc:57:b9:e7:d5:39:73:e1:22:67:
72:4d:92:18:4b:d6:57:26:8f:7e:6f:3e:36:ef:f5:15:a3:1c:
bf:c3:62:26:e7:f1:1f:97:8d:db:36:64:82:f9:f8:50:bb:4a:
87:60:1c:7f:d0:d1:28:2c:fa:62:b2:46:70:06:cc:37:b1:40:
c2:3d:20:f7:fa:fa:5b:90:62:70:9f:91:5d:17:60:e7:ce:b7:
72:f3:ef:97:9e:6e:1b:88:7b:4d:01:0c:ad:0d:e6:76:5a:bc:
8d:23:46:65:48:13:e7:82:3a:a4:6f:7f:33:be:6e:e5:67:3b:
40:36:fc:6d:d2:29:e4:bb:33:17:d3:ec:3b:c1:0a:24:16:16:
0b:c8:e4:db:d4:f2:77:c0:b1:a9:b7:c3:36:61:a1:7f:c7:f0:
ba:24:f7:18:f9:bc:54:ab:6a:c5:f0:fd:ea:cb:19:69:45:60:
01:4b:cc:b0:cc:eb:06:95:38:bd:56:c1:62:8b:ab:d7:8e:51:
f2:fe:7d:b4:bf:d0:d6:63:ce:33:17:17:b0:d4:95:7a:e1:5e:
85:a9:6b:79:4b:e8:ac:44:46:ec:3a:ed:e4:55:21:bb:d5:9a:
8b:0b:2c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 21 16:36:45 2024 by rpki-client on console-ams.rpki-client.org