Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235332e302f32342d3234203d3e20323637393334.roa
File: 34352e3136352e3235332e302f32342d3234203d3e20323637393334.roa (raw, json)
Hash identifier: Ve3hZBConWF6sO4u/MB9aoO6SnOpWyUYNUB2bEao8xM=
Subject key identifier: D9:B8:45:B1:96:DA:ED:9B:99:F5:C8:AE:A6:81:40:D0:BA:34:24:0D
Certificate issuer: /CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Certificate serial: 14E1ADCC8B029433090DF11B5F6067C5E2454B8B
Authority key identifier: 3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235332e302f32342d3234203d3e20323637393334.roa
Signing time: Tue 09 Jul 2024 22:54:34 +0000
ROA not before: Tue 09 Jul 2024 22:49:34 +0000
ROA not after: Tue 08 Jul 2025 22:54:34 +0000
asID: 267934
IP address blocks: 45.165.253.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:e1:ad:cc:8b:02:94:33:09:0d:f1:1b:5f:60:67:c5:e2:45:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Validity
Not Before: Jul 9 22:49:34 2024 GMT
Not After : Jul 8 22:54:34 2025 GMT
Subject: CN=D9B845B196DAED9B99F5C8AEA68140D0BA34240D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2b:4d:13:b5:93:90:17:e8:4c:90:74:ce:bc:
ba:98:94:df:c8:1f:88:eb:a9:17:87:2a:2f:18:c5:
27:ef:c3:c2:34:67:a1:e7:4a:f8:00:da:73:c1:c1:
99:8b:f5:fd:fb:6d:bc:a7:41:f7:e1:69:78:1b:c5:
53:2f:5d:5f:c3:23:93:49:dd:30:ba:ae:9f:37:ee:
48:a5:5c:e5:17:3e:5d:91:6e:a2:41:fd:df:2c:68:
cb:59:48:21:19:99:8d:1b:a3:f7:f7:c3:ac:43:0d:
26:f8:58:7e:b2:22:fc:8f:1a:16:95:db:65:5f:eb:
7f:1d:07:48:15:61:db:32:7b:9a:70:9f:a0:61:1c:
f6:40:a1:02:19:0e:e1:8d:47:cb:6c:8a:a5:be:fa:
18:77:6a:fd:0c:7e:eb:60:72:36:62:4f:72:0e:4c:
01:7a:5e:f9:fb:69:b2:26:6a:a3:a0:18:f6:ea:b1:
9c:12:e3:b7:dd:67:33:d7:5e:e4:21:1d:0f:ae:51:
56:5a:a0:f0:01:5f:9c:c8:62:28:de:bb:67:d9:5a:
40:72:2c:4f:6e:d5:81:a3:d7:e1:08:83:0e:4a:8e:
a7:63:f3:54:14:c8:9a:1e:c0:9b:61:4b:c0:21:f9:
ea:07:d5:47:f1:d0:74:e2:21:6d:57:f9:29:35:7d:
bf:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B8:45:B1:96:DA:ED:9B:99:F5:C8:AE:A6:81:40:D0:BA:34:24:0D
X509v3 Authority Key Identifier:
keyid:3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235332e302f32342d3234203d3e20323637393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.253.0/24
Signature Algorithm: sha256WithRSAEncryption
33:6f:b3:a2:54:4a:e4:6f:15:58:ff:94:e2:6f:e1:3e:f4:4b:
0c:ca:48:dd:a4:fe:2a:51:c5:7e:c9:00:7b:e9:28:a9:a1:09:
3d:7b:0d:bf:12:f9:e7:07:7e:06:31:24:ec:e0:c4:e1:cf:0b:
ca:20:6c:3b:55:44:0b:17:10:a9:3c:07:a0:95:69:1c:2a:81:
9f:7c:3d:64:0d:9a:2d:8f:bf:d6:18:45:5d:95:1b:85:91:0e:
d5:10:ac:e1:d3:56:9a:4c:bb:a4:2a:32:28:4c:35:aa:bf:c1:
8f:42:01:cc:d2:85:33:29:53:30:76:32:a9:b3:5b:49:85:d8:
dc:1f:d3:c6:ea:4c:d0:f8:3f:1f:3b:0a:91:30:d5:4d:0d:cd:
f3:fc:31:0d:05:55:d3:2e:a9:a2:3e:87:59:4f:40:cc:1c:b6:
5f:7d:67:12:73:11:cd:ad:4e:dc:8b:4f:fe:76:be:42:4f:c2:
e8:a1:91:0c:d2:1e:70:96:5e:2f:7e:d0:52:f4:f1:ff:fa:5c:
51:1a:df:e3:4a:62:35:40:43:b9:36:01:6b:a5:c6:88:d9:79:
a6:b7:51:cb:89:62:51:24:fc:02:99:32:32:6a:61:3d:30:33:
84:31:26:18:ca:13:9f:60:d6:7d:da:af:53:25:7a:ca:e3:2a:
39:1b:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 13:09:04 2024 by rpki-client on console-fra.rpki-client.org