Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33382e302f32342d3234203d3e20323638383436.roa
File: 34352e3137322e33382e302f32342d3234203d3e20323638383436.roa (raw, json)
Hash identifier: C+i15ynaOO8aWi4fNcziekumrSlND49VgSEgSfEaSEY=
Subject key identifier: 08:AF:CB:37:03:0C:CC:43:43:14:29:F5:56:2A:9D:76:77:D3:9E:DE
Certificate issuer: /CN=2D561C0D1E8878A2D5940D16C14439B017647B1A
Certificate serial: 4CFC76358C111FE93E8E682146257EB5A36D5871
Authority key identifier: 2D:56:1C:0D:1E:88:78:A2:D5:94:0D:16:C1:44:39:B0:17:64:7B:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33382e302f32342d3234203d3e20323638383436.roa
Signing time: Wed 03 Apr 2024 18:29:05 +0000
ROA not before: Wed 03 Apr 2024 18:24:05 +0000
ROA not after: Wed 02 Apr 2025 18:29:05 +0000
asID: 268846
IP address blocks: 45.172.38.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:fc:76:35:8c:11:1f:e9:3e:8e:68:21:46:25:7e:b5:a3:6d:58:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D561C0D1E8878A2D5940D16C14439B017647B1A
Validity
Not Before: Apr 3 18:24:05 2024 GMT
Not After : Apr 2 18:29:05 2025 GMT
Subject: CN=08AFCB37030CCC43431429F5562A9D7677D39EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ba:83:3a:77:71:23:32:28:24:b7:67:59:1f:
db:67:bc:39:77:02:be:28:6b:68:20:0c:33:94:04:
a5:ad:ad:8e:b3:6c:1e:9c:02:88:85:e0:ed:a2:ec:
e4:32:e0:db:63:68:62:16:4d:0e:2e:89:85:1f:0d:
98:e8:2e:5c:91:6b:f5:ed:c9:75:b2:26:16:ca:b1:
b5:49:e2:b7:be:96:11:4e:85:54:53:85:5c:af:08:
ce:69:1d:23:55:06:6c:db:ae:b6:e9:52:4c:9b:d5:
7f:c9:13:99:e3:ed:5a:e8:ff:a6:74:45:ee:30:79:
24:4a:c4:6a:2e:b6:e8:98:88:7d:c0:a4:4d:e8:28:
cb:13:fd:53:77:39:fb:d7:23:07:e1:5f:f8:07:df:
54:f3:09:40:6a:7d:aa:af:16:5d:55:69:53:7a:11:
69:ec:b8:87:7e:1c:d4:e0:b7:9f:29:40:73:b2:d8:
dc:80:51:34:19:a1:d2:4c:b3:05:c8:fe:7e:e2:e7:
58:92:a9:4e:6b:61:c2:96:c3:a0:94:96:94:e6:90:
e6:76:2b:83:e5:c3:15:26:db:26:f9:67:e8:00:af:
a8:4b:ae:3a:43:9e:60:ea:01:d7:45:b7:d8:ae:97:
0f:62:8f:dd:46:90:c7:c2:87:d6:7f:63:b5:7f:69:
04:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AF:CB:37:03:0C:CC:43:43:14:29:F5:56:2A:9D:76:77:D3:9E:DE
X509v3 Authority Key Identifier:
keyid:2D:56:1C:0D:1E:88:78:A2:D5:94:0D:16:C1:44:39:B0:17:64:7B:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D561C0D1E8878A2D5940D16C14439B017647B1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyU4dc8sgzFULbYfzAkH3Ukb1VqynsbrUzvg5zgeaJYe/1/34352e3137322e33382e302f32342d3234203d3e20323638383436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.38.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:fc:3f:7e:96:9c:5b:3b:bb:97:e6:03:2e:71:32:85:77:ca:
97:62:2a:13:6e:11:2c:e4:b0:62:80:80:e1:a0:3c:9a:f8:66:
86:90:41:18:c6:20:76:82:7e:4e:65:61:8e:ad:1f:13:0b:35:
b7:4c:f4:2b:b0:84:d3:5f:23:b6:f1:cf:d8:74:2e:1c:7a:5a:
c4:5f:db:31:30:1b:5c:4f:0c:a2:ac:3c:e6:8f:6a:35:28:3b:
7c:8f:bc:b4:5a:b0:7f:d5:98:84:3d:30:23:2f:db:ac:4c:8a:
dc:f3:f7:e9:66:b8:1d:17:4a:62:1c:ba:20:8e:a0:50:d0:f8:
4b:a6:d4:4f:32:63:61:98:27:a8:98:47:e0:fc:7e:4e:18:5c:
c4:32:7a:a1:2d:1a:86:91:fc:93:43:f6:ae:24:f8:c7:24:70:
e2:ed:4a:6b:c0:af:69:7b:a6:35:33:c4:8a:37:2b:32:68:5a:
2d:5a:ee:ea:5a:b7:c5:38:97:cb:3a:67:17:ae:12:01:ad:40:
42:1e:36:3f:5b:ac:e6:18:be:f5:2d:fc:fa:1f:ca:93:38:82:
a9:0c:19:4f:88:63:3d:ee:7a:d3:66:16:16:cd:69:f3:e6:fc:
d9:16:23:61:bf:6b:69:37:74:52:09:e8:e8:b6:b5:d0:09:03:
bc:22:25:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 26 14:36:35 2024 by rpki-client on console-fra.rpki-client.org