Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33362e302f32332d3233203d3e20323638383436.roa
File: 34352e3137322e33362e302f32332d3233203d3e20323638383436.roa (raw, json)
Hash identifier: y/U2Xfn6nqjUKhsSv0iSFjr2LhzqcynqrZgYKM8qriY=
Subject key identifier: 9A:9C:87:86:FF:F5:9A:28:8F:C4:40:02:EC:70:26:EA:41:B7:D0:E3
Certificate issuer: /CN=2D561C0D1E8878A2D5940D16C14439B017647B1A
Certificate serial: 4278DD16E7E629CB675CE03C1B09B912231D54F9
Authority key identifier: 2D:56:1C:0D:1E:88:78:A2:D5:94:0D:16:C1:44:39:B0:17:64:7B:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33362e302f32332d3233203d3e20323638383436.roa
Signing time: Wed 03 Apr 2024 18:29:05 +0000
ROA not before: Wed 03 Apr 2024 18:24:05 +0000
ROA not after: Wed 02 Apr 2025 18:29:05 +0000
asID: 268846
IP address blocks: 45.172.36.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:78:dd:16:e7:e6:29:cb:67:5c:e0:3c:1b:09:b9:12:23:1d:54:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D561C0D1E8878A2D5940D16C14439B017647B1A
Validity
Not Before: Apr 3 18:24:05 2024 GMT
Not After : Apr 2 18:29:05 2025 GMT
Subject: CN=9A9C8786FFF59A288FC44002EC7026EA41B7D0E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:54:f0:69:a6:be:e2:f4:26:62:3b:34:37:1a:
c0:f0:04:0f:0c:6a:10:09:82:84:03:89:90:e9:03:
a6:0f:91:3a:00:1e:05:7c:98:f9:42:2e:f3:a7:64:
25:d6:20:ee:fd:ef:50:88:fd:7f:ab:fc:20:8a:22:
3e:92:b4:af:03:ca:72:04:47:4a:1c:a5:29:28:93:
8c:8d:db:de:33:fe:78:2e:30:d6:2c:0d:c3:9e:18:
ff:43:4c:cd:b7:90:5a:e6:f9:d9:c6:8a:4a:11:22:
b6:59:be:f8:af:ab:13:21:36:6c:33:d1:19:71:8f:
1a:a7:d1:90:2f:40:82:02:b8:37:49:af:58:2b:99:
22:02:f2:02:fc:a6:67:75:a1:bd:66:09:50:82:7d:
fb:cb:46:56:82:ea:17:68:ea:63:a8:02:1c:58:5d:
09:98:fc:87:44:66:b3:5a:85:2c:fb:31:3d:50:f4:
8e:e8:ba:ed:95:08:b6:4b:6f:ab:ec:3c:ef:c5:8d:
01:32:9a:4d:e4:48:c2:2c:79:a7:12:79:51:32:37:
a1:65:05:3b:42:6c:32:be:60:b8:7e:55:cd:52:6b:
56:1a:ee:36:c8:73:12:ef:d0:00:16:c2:0b:93:bb:
74:2d:94:77:a9:a9:39:a8:dc:63:2e:86:18:13:86:
88:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:9C:87:86:FF:F5:9A:28:8F:C4:40:02:EC:70:26:EA:41:B7:D0:E3
X509v3 Authority Key Identifier:
keyid:2D:56:1C:0D:1E:88:78:A2:D5:94:0D:16:C1:44:39:B0:17:64:7B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33362e302f32332d3233203d3e20323638383436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.36.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:26:d7:bc:df:fa:a6:c5:2a:8d:2a:1a:e3:11:71:60:0e:7d:
5b:9d:46:26:cf:ce:19:a5:4f:d4:a8:1b:1f:c1:98:fc:dd:d6:
fd:e2:65:aa:9a:81:51:40:2d:4e:cd:dc:67:36:6c:8d:5f:06:
20:70:b3:b2:1b:c7:20:44:15:b0:f2:e2:96:91:09:c9:ea:00:
a1:9e:44:05:59:89:77:36:2c:89:29:21:64:75:3c:72:84:f8:
e1:2c:02:17:09:ac:b5:d7:d5:da:7b:19:bb:ab:52:ea:0c:6b:
fd:80:d4:ba:b9:96:d6:03:a0:65:60:bc:82:57:a7:a4:0e:34:
40:a4:3d:3c:ed:a6:91:0b:35:92:b4:25:d6:82:2a:bd:4c:14:
1d:f1:f9:cc:22:b2:d6:b3:9e:d9:9f:6d:40:3a:f2:1f:ec:9c:
bb:eb:c7:bb:70:40:3d:8b:9b:fe:35:f8:c7:34:9b:0c:bc:1e:
bd:b4:23:cd:c1:e5:ad:12:d4:e6:c8:c7:01:d1:6f:a9:06:27:
cd:32:e4:e9:54:35:c8:de:56:06:18:02:eb:c4:a9:5b:63:3a:
5e:ef:f5:69:05:c7:23:1d:60:c5:a4:32:97:75:e7:3a:3f:b5:
1d:2b:a0:71:2d:5a:95:92:07:ec:2e:58:69:2f:9a:81:70:23:
c4:4d:9d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 16:41:12 2024 by rpki-client on console-ams.rpki-client.org