Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233302e302f32342d3234203d3e20323637363234.roa
File: 34352e37312e3233302e302f32342d3234203d3e20323637363234.roa (raw, json)
Hash identifier: LeWGYrNr/0t8pcN0l8EqYXeIl4wNVf13lwny6dP4ZBM=
Subject key identifier: 2A:DA:90:8F:67:9D:38:52:4C:C9:CE:7C:B2:43:65:20:2D:FA:AB:2B
Certificate issuer: /CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Certificate serial: 7F3F4CF109BD46F52476945D41D953383B2B7873
Authority key identifier: C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233302e302f32342d3234203d3e20323637363234.roa
Signing time: Tue 27 Aug 2024 12:53:11 +0000
ROA not before: Tue 27 Aug 2024 12:48:11 +0000
ROA not after: Tue 26 Aug 2025 12:53:11 +0000
asID: 267624
IP address blocks: 45.71.230.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3f:4c:f1:09:bd:46:f5:24:76:94:5d:41:d9:53:38:3b:2b:78:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C23528A13FE2AD3BF48F32427EA9BBDD87C12A01
Validity
Not Before: Aug 27 12:48:11 2024 GMT
Not After : Aug 26 12:53:11 2025 GMT
Subject: CN=2ADA908F679D38524CC9CE7CB24365202DFAAB2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b9:db:2d:9e:26:35:27:46:9f:17:df:61:3d:
6d:38:99:38:90:34:aa:4d:c0:cc:44:43:49:0a:be:
fe:30:1e:bc:d9:8e:8c:8c:a7:0d:eb:39:51:5f:a8:
56:81:d1:e8:ef:3c:ae:5c:03:01:be:e9:6c:f2:82:
7d:3d:66:e8:80:7f:74:7f:e7:06:3f:92:2b:c5:79:
3f:13:6c:df:ea:5f:23:0a:cd:68:64:f1:95:8f:b6:
11:6d:41:21:fb:ee:41:04:ea:db:53:0e:39:5e:bd:
ab:51:c1:b3:97:56:62:a3:2d:fa:2a:e1:e3:12:18:
d3:27:72:dc:0b:eb:02:3d:3e:35:50:a7:48:5c:4c:
71:a8:14:6f:b0:6f:45:bc:a1:1a:cd:d2:12:20:69:
78:87:40:78:23:bb:c7:91:7e:4d:34:19:17:0f:98:
18:0b:fd:d4:05:ea:26:9e:62:68:35:d3:b0:a7:32:
b4:d6:cc:ff:4b:78:29:5a:91:c8:85:d1:0d:e6:b5:
99:ba:bb:3b:fc:10:b8:32:ae:f6:e2:b2:1a:8d:d5:
48:7a:0c:a4:bc:c0:33:b2:01:69:88:b3:8d:25:c0:
84:4f:20:3d:8b:fb:fa:ee:9f:97:ea:62:db:a6:f3:
dc:06:d5:12:75:88:ee:aa:24:2e:d0:e3:46:a0:eb:
f3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DA:90:8F:67:9D:38:52:4C:C9:CE:7C:B2:43:65:20:2D:FA:AB:2B
X509v3 Authority Key Identifier:
keyid:C2:35:28:A1:3F:E2:AD:3B:F4:8F:32:42:7E:A9:BB:DD:87:C1:2A:01
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C23528A13FE2AD3BF48F32427EA9BBDD87C12A01.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/1/34352e37312e3233302e302f32342d3234203d3e20323637363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.230.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:7f:44:34:ca:9b:8a:e3:03:7f:fe:b9:4d:24:2f:95:83:e9:
f4:79:4c:a7:26:cc:e3:8e:b6:90:1b:2c:df:e3:0e:9f:6b:36:
07:13:e2:1f:cf:bd:e4:4b:33:38:fa:d7:d2:c0:a5:3d:51:b5:
77:38:9c:0f:09:e8:0a:49:5b:1b:2b:99:31:a2:be:6b:3c:a0:
4c:15:d7:18:39:78:43:af:7d:63:69:bb:56:bc:c9:fe:49:ba:
6e:d4:e0:d8:cf:23:f3:64:15:7b:5a:af:0d:3e:1f:f9:e6:93:
7d:b9:e8:99:f4:d4:ab:df:af:45:e4:9b:91:68:52:03:76:f5:
5c:27:7e:24:95:09:8e:ba:8e:50:54:ee:bd:38:16:6c:8a:96:
94:a0:a3:05:c0:58:bb:b1:f1:c1:60:00:97:9d:ae:5d:90:27:
65:fa:a2:e1:15:dd:51:cc:fb:cb:7f:b1:f3:51:0f:ef:17:ac:
9b:2b:4d:db:f9:e9:73:32:29:f4:14:76:b9:ed:ca:50:84:97:
5f:34:5c:84:72:52:a5:06:ca:42:63:fe:89:81:b1:8f:f4:13:
67:05:1d:71:14:64:f4:30:14:c6:98:3e:38:eb:a5:03:52:ef:
77:3d:c4:bb:d2:59:20:ad:2e:d7:b8:c4:67:2d:77:a9:1c:10:
11:b1:e5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 08:59:50 2024 by rpki-client on console-fra.rpki-client.org