Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa
File: 34352e3136352e31322e302f32322d3234203d3e20323638363633.roa (raw, json)
Hash identifier: iLUGhaPcZ4GvlROHJe5zJApWn77Ql29GkfzVuCFYtZY=
Subject key identifier: 83:7B:47:55:B2:0D:A1:D0:C0:B4:59:E3:79:C7:BD:DB:B6:AE:B9:8B
Certificate issuer: /CN=4342F208064EBCB011C73985AA522F27EF39E196
Certificate serial: 35308416008C13ABE0B2DA26B8A8CD2F26A9BADC
Authority key identifier: 43:42:F2:08:06:4E:BC:B0:11:C7:39:85:AA:52:2F:27:EF:39:E1:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4342F208064EBCB011C73985AA522F27EF39E196.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa
Signing time: Thu 04 Apr 2024 08:38:00 +0000
ROA not before: Thu 04 Apr 2024 08:33:00 +0000
ROA not after: Thu 03 Apr 2025 08:38:00 +0000
asID: 268663
IP address blocks: 45.165.12.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:30:84:16:00:8c:13:ab:e0:b2:da:26:b8:a8:cd:2f:26:a9:ba:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4342F208064EBCB011C73985AA522F27EF39E196
Validity
Not Before: Apr 4 08:33:00 2024 GMT
Not After : Apr 3 08:38:00 2025 GMT
Subject: CN=837B4755B20DA1D0C0B459E379C7BDDBB6AEB98B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:87:0a:7a:ec:64:c6:a9:b6:f9:bb:60:2e:ed:
c3:59:85:21:bb:18:12:21:c8:df:76:8b:2b:14:9a:
7e:aa:c1:8c:7f:74:0a:b2:8c:e4:5d:fc:07:4d:68:
dc:03:1d:6e:de:87:70:bd:24:15:34:f0:ab:49:f9:
61:b2:7b:c7:2b:12:aa:9d:e9:45:b0:1a:b9:19:de:
80:e6:3b:47:d1:30:f6:97:4a:f2:2b:94:76:de:30:
e5:2f:0b:85:7e:b2:02:c5:bf:97:14:a0:33:89:86:
07:28:2d:3d:14:f0:a1:cd:29:a2:0d:fe:1d:c8:6d:
25:81:34:48:fc:9b:a4:c5:d6:67:21:2e:84:35:b6:
c9:20:c3:42:45:70:a0:4d:69:6d:ee:7d:35:2b:96:
4b:81:56:26:db:37:d7:4a:dd:3d:ef:fe:f2:a2:8d:
71:fa:f3:60:46:28:dd:49:22:d7:a4:ac:c5:16:60:
d6:a7:2e:95:8a:d8:dd:88:ed:8c:d3:02:55:bd:d1:
76:a1:00:76:c7:b3:8e:69:20:1d:ca:98:7f:e1:81:
80:4a:ea:b1:33:df:b7:6d:81:55:9b:5b:e9:05:79:
3e:3b:f8:da:26:36:cd:9d:10:ba:1f:4a:27:15:87:
bb:71:0a:aa:f2:3a:83:9b:dd:0d:a4:77:8a:ad:76:
c0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:7B:47:55:B2:0D:A1:D0:C0:B4:59:E3:79:C7:BD:DB:B6:AE:B9:8B
X509v3 Authority Key Identifier:
keyid:43:42:F2:08:06:4E:BC:B0:11:C7:39:85:AA:52:2F:27:EF:39:E1:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/4342F208064EBCB011C73985AA522F27EF39E196.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4342F208064EBCB011C73985AA522F27EF39E196.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/1/34352e3136352e31322e302f32322d3234203d3e20323638363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.12.0/22
Signature Algorithm: sha256WithRSAEncryption
25:d2:11:ad:e4:b5:15:67:9c:d3:a5:a6:d2:f3:f3:fe:34:c8:
0b:43:e7:db:8a:16:b1:6c:38:d4:44:de:9c:0f:61:b6:48:19:
07:e8:ce:c7:45:dd:56:41:58:f0:74:58:fb:78:18:03:94:0f:
fc:c0:a6:ba:ba:30:a2:68:4b:fc:44:05:c6:13:01:c9:cf:e1:
9b:4d:38:51:c9:b0:57:87:75:e4:a2:bc:b6:87:52:6e:68:46:
d4:9d:55:96:2e:a1:c4:ca:56:c7:6b:f3:a1:86:16:e1:7d:25:
46:9a:8a:04:6a:83:08:6b:8b:c7:e7:23:7f:0e:39:55:88:87:
1b:ac:b7:ab:ad:f5:ce:7b:e5:e2:c1:dd:b5:e7:aa:7b:b4:8c:
4e:e9:d6:7e:4c:a5:57:78:f2:03:4d:3b:8d:c1:bb:83:3c:e7:
50:dc:82:e1:ed:8f:88:72:3b:2c:38:d3:ef:3d:17:94:37:6a:
1b:23:a1:dc:c9:b8:e6:0c:0f:e8:b6:60:2a:63:88:eb:68:98:
39:62:bf:29:b7:f2:af:c0:7b:c1:5e:95:87:a9:01:79:5b:25:
93:02:4c:bc:03:a9:5d:77:e1:34:31:b1:61:2b:9d:57:67:44:
66:9a:47:c3:8f:85:e4:39:5c:42:86:17:c3:db:28:0a:1a:af:
78:98:a0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 4 07:23:11 2024 by rpki-client on console-ams.rpki-client.org