Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
File: 34352e3233312e31362e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier: yEKhJQU6gjNR7/IDZPTn+uqmsh1mr7gudUueuP0KS4I=
Subject key identifier: 29:C7:95:44:E4:24:00:4D:67:43:45:06:14:83:2D:17:57:8F:17:DF
Certificate issuer: /CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Certificate serial: 0D475289CE8EB700199CA85B492F8390BE996570
Authority key identifier: 60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
Signing time: Thu 04 Apr 2024 11:50:50 +0000
ROA not before: Thu 04 Apr 2024 11:45:50 +0000
ROA not after: Thu 03 Apr 2025 11:50:50 +0000
asID: 267191
IP address blocks: 45.231.16.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:47:52:89:ce:8e:b7:00:19:9c:a8:5b:49:2f:83:90:be:99:65:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Validity
Not Before: Apr 4 11:45:50 2024 GMT
Not After : Apr 3 11:50:50 2025 GMT
Subject: CN=29C79544E424004D6743450614832D17578F17DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fd:9a:f5:16:b2:e1:dc:af:28:ef:7e:fb:ee:
0e:46:cf:93:f7:b2:73:7f:b1:f9:7a:ad:5d:7e:ef:
b6:14:57:cf:84:83:19:d3:65:bf:90:bd:72:0a:f5:
84:60:c9:8f:95:2e:89:e3:9b:72:81:f6:1b:a8:ac:
2a:10:9b:9e:b9:29:9f:b7:f8:31:25:a8:18:a9:23:
7f:75:41:95:aa:a1:e6:6a:80:97:ea:d4:45:26:83:
3a:f2:ea:02:e8:b7:8b:3d:fc:86:47:87:d6:d3:2f:
e1:13:95:4d:56:b9:2d:cf:2b:95:f0:1a:47:22:70:
a1:71:2d:33:66:b8:11:e4:c6:f9:5d:75:e3:a7:80:
26:d0:46:e6:78:1b:af:bc:5b:6f:e3:5c:ce:5d:df:
85:3d:f0:dd:6f:79:0d:bf:c8:2c:16:2b:9c:44:ca:
c8:16:bd:8f:30:bc:6d:80:55:15:49:e3:b6:3e:e3:
d7:9b:6b:09:db:40:98:29:32:c5:dd:96:11:f9:d6:
93:ce:a7:64:2d:69:5c:b3:54:d9:1d:cb:99:4a:10:
99:c9:13:56:9e:8f:f0:20:44:da:51:c3:da:b0:11:
e9:26:60:46:bc:bb:2e:42:25:5b:35:d0:af:0c:b6:
35:ab:f3:52:44:d5:48:15:94:4e:f3:87:9a:24:0d:
36:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C7:95:44:E4:24:00:4D:67:43:45:06:14:83:2D:17:57:8F:17:DF
X509v3 Authority Key Identifier:
keyid:60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31362e302f32342d3234203d3e20323637313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.16.0/24
Signature Algorithm: sha256WithRSAEncryption
64:e6:3a:d7:e6:06:6c:50:6a:87:31:0a:29:3e:0c:d7:ad:6c:
38:d3:ce:0c:ac:94:1a:00:e8:65:d2:ce:c8:61:84:92:92:53:
eb:62:a9:8e:36:68:2f:39:eb:34:39:4d:ee:d6:3e:36:14:a6:
83:09:3e:8b:52:cb:19:b3:1e:2d:57:01:f3:56:71:b8:b4:46:
ab:07:2e:35:ce:5c:ae:b3:2a:6f:98:a1:0f:cb:42:59:d6:fd:
62:b8:7f:e8:0d:a6:ba:f5:1c:24:05:d3:75:e4:23:2b:b5:1d:
d2:0c:e6:5d:e2:b5:15:68:fc:50:d9:85:17:2b:08:89:b3:de:
6c:8e:77:d5:32:4a:10:2b:07:b7:c3:f6:20:2a:3c:86:d3:62:
02:9a:2d:40:d3:c4:ab:c7:76:91:ea:08:d4:a3:03:e1:48:36:
d0:ce:09:fc:b1:22:f8:3e:e1:1a:d2:06:5a:24:37:40:81:ff:
77:3d:03:23:dd:d5:e1:05:bd:73:dd:e3:6e:bf:67:0c:e9:c4:
e9:4c:ea:42:4f:a2:45:cb:84:17:60:d1:83:7a:39:d9:53:3b:
1b:03:9e:88:01:f9:e3:a1:c9:e0:d9:51:d4:e4:61:0f:c5:3c:
05:85:88:f3:95:b9:fe:86:0d:32:a3:a0:eb:f3:66:32:03:72:
59:06:aa:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:04 2024 by rpki-client on console-ams.rpki-client.org