Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233302e302f32332d3233203d3e20323637363234.roa
File: 34352e37312e3233302e302f32332d3233203d3e20323637363234.roa (raw, json)
Hash identifier: JoFHCc786CWxC4uacDRPURtoIcvaw4EXWUKjcmKD0F0=
Subject key identifier: 09:F0:60:EE:34:32:8D:F8:83:B0:ED:97:33:97:16:F5:BA:9C:84:FD
Certificate issuer: /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial: 703454429F8356D91B6E79531E94F218B51C15B8
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233302e302f32332d3233203d3e20323637363234.roa
Signing time: Tue 27 Aug 2024 12:51:48 +0000
ROA not before: Tue 27 Aug 2024 12:46:48 +0000
ROA not after: Tue 26 Aug 2025 12:51:48 +0000
asID: 267624
IP address blocks: 45.71.230.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:34:54:42:9f:83:56:d9:1b:6e:79:53:1e:94:f2:18:b5:1c:15:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Validity
Not Before: Aug 27 12:46:48 2024 GMT
Not After : Aug 26 12:51:48 2025 GMT
Subject: CN=09F060EE34328DF883B0ED97339716F5BA9C84FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:6b:db:71:b3:fd:b2:50:28:a0:a0:0b:4a:
54:1f:18:ca:ee:14:c0:d4:52:72:6c:07:d5:c3:f3:
e3:51:8b:0d:a0:64:33:c1:d1:8c:5e:2a:76:c1:7a:
cb:3f:59:5e:34:9d:be:d5:8c:ef:21:a3:b5:b8:37:
d6:3f:97:ae:a0:68:b0:bc:b4:bb:df:f2:71:2f:b3:
0f:84:9e:fd:f3:ac:b7:2e:93:72:44:f9:17:6f:53:
ea:5c:73:29:4a:9d:3d:aa:21:51:f7:01:0b:60:99:
2d:aa:1c:ae:a4:0d:7f:b5:51:86:2f:54:5c:c5:1f:
cc:9b:b5:8e:c2:4b:0d:2a:17:10:34:35:e3:d9:a8:
fb:4e:60:56:d0:bb:3a:49:ae:e1:62:77:fb:03:85:
b7:b0:8d:0c:d5:fb:56:f6:4d:13:52:72:a9:eb:dc:
0b:eb:db:4d:21:99:a2:9b:92:ad:4a:f0:a4:d2:53:
1c:8a:56:33:04:a3:1a:5d:d6:8d:09:61:39:52:80:
5d:53:5c:d7:0d:fb:06:9f:52:d1:af:19:b3:c1:bf:
9b:e9:aa:80:1c:5b:1f:8d:18:c1:ca:81:59:d1:62:
f1:36:3a:cb:fd:26:67:7c:e2:3c:e3:aa:de:ea:6c:
1a:90:27:36:d8:90:77:f9:20:a8:f8:22:6d:0c:9f:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:60:EE:34:32:8D:F8:83:B0:ED:97:33:97:16:F5:BA:9C:84:FD
X509v3 Authority Key Identifier:
keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233302e302f32332d3233203d3e20323637363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.230.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:45:36:ee:22:b8:a7:99:2d:95:37:e0:b5:32:5c:d8:e7:fa:
f2:6f:de:93:bc:74:72:8c:74:b7:b2:e0:f9:45:fe:21:a3:6d:
73:96:da:af:22:fe:d4:59:ed:5a:db:6a:68:e3:22:84:b8:25:
45:14:1d:34:ed:0b:0a:f3:ae:4f:ac:01:46:31:b7:6a:7b:11:
a1:ca:32:34:35:5e:57:9d:cf:17:94:43:7a:31:27:f6:85:fa:
9e:37:ec:2b:b2:73:ee:33:d2:f9:62:91:4d:31:c4:6f:d8:15:
29:63:50:9a:bd:b0:55:31:09:8d:31:93:86:ff:a6:e9:7d:40:
f4:83:e0:3d:28:0c:fa:a9:85:b6:4d:89:fd:28:92:da:f6:3a:
32:fb:a8:07:9d:51:f9:08:9f:8d:f4:0f:74:5c:19:d7:da:63:
e0:69:3f:aa:0e:59:f6:f4:01:e8:e9:99:ae:66:98:35:11:18:
71:66:d4:63:6b:71:1f:2a:94:64:e7:c2:01:1e:e3:4e:aa:f8:
04:bd:fc:f7:21:d7:bc:d7:fe:57:d5:74:eb:4d:20:a5:f5:75:
18:c5:ff:4b:54:99:33:cf:bd:63:aa:01:c5:3e:15:da:e0:60:
ce:e5:ae:33:c4:2c:08:69:9f:fd:90:ce:a5:be:0a:09:ce:47:
5e:f9:a0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 08:59:50 2024 by rpki-client on console-fra.rpki-client.org