Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa
File: 34352e37312e3232382e302f32342d3234203d3e20323637363234.roa (raw, json)
Hash identifier: 4Bpq1dKwJ0A+ge2wygrbk8+pWiT07V9XLJjpIEoexAA=
Subject key identifier: 7D:49:4C:78:47:90:6A:DC:2B:4A:75:B9:94:49:A3:BE:89:F2:24:2F
Certificate issuer: /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial: 201AC30AC927BB98BE486F53B893D0B97E383BAC
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa
Signing time: Tue 27 Aug 2024 12:52:08 +0000
ROA not before: Tue 27 Aug 2024 12:47:08 +0000
ROA not after: Tue 26 Aug 2025 12:52:08 +0000
asID: 267624
IP address blocks: 45.71.228.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:1a:c3:0a:c9:27:bb:98:be:48:6f:53:b8:93:d0:b9:7e:38:3b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Validity
Not Before: Aug 27 12:47:08 2024 GMT
Not After : Aug 26 12:52:08 2025 GMT
Subject: CN=7D494C7847906ADC2B4A75B99449A3BE89F2242F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:43:97:f2:37:f8:2a:cb:15:7f:4c:3b:fc:bb:
a6:b6:8c:7d:ba:fe:d3:f0:38:81:c4:c5:ff:b4:16:
8c:10:61:09:eb:cc:41:8e:61:ea:bd:d2:b6:44:9f:
80:a2:52:91:e0:34:7d:3a:85:b9:84:50:25:51:1c:
8b:d7:68:0b:46:e3:fc:8d:f7:0f:36:8e:32:a2:e6:
df:e3:76:80:15:69:46:18:fb:92:cc:c2:e3:ac:4b:
d2:af:41:f1:b9:f2:8f:0d:f3:d8:45:dc:5b:3e:f1:
0d:15:e6:31:c6:ff:24:59:a0:72:2d:c0:1f:1e:18:
f0:9e:97:d9:bc:81:7c:9b:d6:42:45:67:2d:93:d5:
42:b7:ba:e4:f9:91:b5:99:75:71:e1:96:b3:df:33:
3d:a4:d6:05:07:1e:c8:9f:e0:26:42:26:4a:34:d8:
f5:ff:46:cd:ec:ef:21:a7:df:3c:45:39:0e:bf:77:
4c:e5:15:20:dd:14:b4:b8:c0:55:4d:40:a7:06:df:
25:92:37:f0:eb:1b:34:01:7a:a0:0f:91:c0:c4:b3:
2c:be:14:51:21:d4:bd:6c:18:18:f7:90:a1:5b:07:
f6:05:4a:4e:2b:69:e0:76:a5:fd:3f:df:96:14:ce:
05:f9:f7:51:72:e8:1f:9c:94:64:dc:00:3a:7f:4e:
98:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:49:4C:78:47:90:6A:DC:2B:4A:75:B9:94:49:A3:BE:89:F2:24:2F
X509v3 Authority Key Identifier:
keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:d6:74:2f:0c:28:aa:ee:0b:46:2b:a7:2a:c7:f0:c7:8a:65:
e3:ac:78:f2:7f:5b:5c:c6:9a:b8:38:80:22:ce:a6:c2:71:fc:
e4:07:bd:0f:78:60:d9:43:81:48:75:39:e8:94:f5:6e:89:60:
6b:4f:80:c1:bd:05:b0:19:01:be:d6:9a:71:77:f2:54:db:a5:
2d:1b:a5:2c:21:9b:8b:9e:6a:e6:4f:8b:2c:2b:74:eb:7d:58:
25:78:cc:1d:f9:e7:12:13:91:76:98:99:46:a7:dc:83:35:83:
12:6c:13:83:54:ba:e0:c4:dd:4c:5d:14:02:5b:fa:cd:2c:24:
16:b7:64:25:0c:e2:37:0d:89:9c:f8:8e:df:0d:10:a8:a8:82:
06:19:9e:f1:f0:0b:41:58:bd:f3:1f:8f:b4:13:a5:2e:b5:e0:
33:f9:44:77:56:95:fd:13:11:b0:fa:d0:5a:8e:e7:b6:47:4d:
f9:71:4b:34:66:5b:8a:ae:02:b7:f9:c9:9b:2e:13:e5:0f:db:
f1:a3:99:5e:14:c5:fc:de:65:eb:e3:03:c5:b7:79:19:ed:25:
3f:58:61:46:44:06:84:67:ba:10:4b:b6:da:b8:5f:62:a2:6d:
89:2f:11:2f:eb:2d:db:d5:0b:cd:f6:c3:b3:44:89:f8:7e:3d:
20:a8:73:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 09:37:16 2024 by rpki-client on console-ams.rpki-client.org