Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa
File: 34352e37312e3232382e302f32322d3232203d3e20323637363234.roa (raw, json)
Hash identifier: UlfoLnWowBD5krFEgi4kfCNbIys9dyf6J2s4eEf1duU=
Subject key identifier: 90:84:DB:2A:EB:17:49:42:68:2E:AB:65:97:8C:4C:28:53:8E:C8:13
Certificate issuer: /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial: 771FCB7698BD37A8D1CD435D386BCFBDE65776B9
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa
Signing time: Tue 27 Aug 2024 12:51:06 +0000
ROA not before: Tue 27 Aug 2024 12:46:06 +0000
ROA not after: Tue 26 Aug 2025 12:51:06 +0000
asID: 267624
IP address blocks: 45.71.228.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:1f:cb:76:98:bd:37:a8:d1:cd:43:5d:38:6b:cf:bd:e6:57:76:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Validity
Not Before: Aug 27 12:46:06 2024 GMT
Not After : Aug 26 12:51:06 2025 GMT
Subject: CN=9084DB2AEB174942682EAB65978C4C28538EC813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6b:5e:ff:6f:bc:e1:6b:cd:8d:84:29:71:92:
ba:91:84:bb:c6:33:4d:d4:4f:48:bf:f2:75:be:e1:
51:94:1b:ee:ef:a9:06:bc:38:61:e8:46:46:e0:9e:
84:93:54:f5:66:42:7e:1a:e5:c6:83:32:f1:45:c5:
6d:28:dc:93:60:56:32:4c:bc:b2:53:95:86:03:5d:
62:a1:6c:b7:71:21:5a:d9:f1:0c:64:e7:ea:0f:08:
fd:3a:90:9e:2c:64:90:d9:1b:92:3a:66:24:39:5f:
95:3e:34:82:88:48:30:65:f7:2c:7a:e2:9e:87:ee:
18:f7:2f:1a:ec:63:b4:f6:e3:d0:eb:29:c5:54:ca:
3d:18:97:fc:1c:3c:29:bd:0c:e2:7d:fe:c7:90:fd:
9d:27:87:07:63:1b:3d:00:ef:bd:94:95:f1:c3:85:
97:11:54:88:37:84:38:91:1f:56:84:62:4d:3a:86:
75:7c:d9:be:ea:43:7c:74:8a:61:f6:c1:02:2e:f7:
47:ed:ef:e1:88:bc:09:dd:c9:d9:a8:58:dd:e5:45:
39:76:d9:b0:e7:42:79:4e:91:3b:aa:6f:78:c1:d6:
f5:c5:68:28:9a:7a:36:b9:23:a2:37:c0:0b:0e:a8:
2c:26:d1:bc:35:fa:af:9d:11:af:e4:2b:ae:39:78:
2c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:84:DB:2A:EB:17:49:42:68:2E:AB:65:97:8C:4C:28:53:8E:C8:13
X509v3 Authority Key Identifier:
keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.228.0/22
Signature Algorithm: sha256WithRSAEncryption
78:f3:b0:8e:8e:0f:40:bd:48:cb:91:50:78:90:1e:70:b7:67:
d9:32:d8:53:d6:96:74:be:ce:82:f7:5f:93:26:de:73:f4:a2:
62:c7:c5:8d:e9:19:9f:e6:b5:0e:51:e8:d0:c0:b4:77:6e:c3:
52:ac:17:d0:56:31:25:f8:a5:b5:f0:d2:7e:21:cc:9c:e3:82:
52:52:70:78:16:c5:e2:a0:80:f5:c5:ba:6d:71:aa:b1:70:ef:
7b:88:98:3f:85:55:2e:77:bb:43:a3:ac:59:e2:0e:72:26:31:
dd:98:51:16:a4:b1:6b:ad:62:ce:ec:6c:67:8d:a4:36:6d:77:
f9:a4:64:27:e8:02:09:86:c1:e1:a0:bb:92:58:76:25:43:fc:
84:48:e4:1d:c1:37:e7:16:0c:64:19:62:26:f5:3e:b8:cc:4c:
da:93:e7:3b:4f:e3:d7:a5:76:fc:58:ba:4e:a8:2b:21:d8:97:
8b:ed:9b:4a:4b:07:d7:03:eb:96:f3:d0:f5:5a:7d:f4:56:06:
36:e6:43:60:8d:ea:e8:f0:7b:7f:dd:71:15:6d:0b:28:ec:99:
f6:63:57:f6:ef:45:7d:71:9b:09:6e:da:51:82:03:28:b4:47:
70:05:b8:4e:ef:b6:05:2f:a2:47:ee:aa:49:85:57:a5:d0:61:
31:fb:4a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 09:37:16 2024 by rpki-client on console-ams.rpki-client.org