Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa
File: 34352e3233312e31372e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier: fvADmLTQiZprE4ys2HrO7xjJy+5C3ifrPZQNEB09WTs=
Subject key identifier: 15:22:09:D6:62:E8:2F:DC:D1:89:7B:24:AD:B0:50:5A:10:EA:DF:D5
Certificate issuer: /CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Certificate serial: 3D29B04691852C87BD364FA3E16453EC6780F4AB
Authority key identifier: 60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa
Signing time: Thu 04 Apr 2024 11:50:50 +0000
ROA not before: Thu 04 Apr 2024 11:45:50 +0000
ROA not after: Thu 03 Apr 2025 11:50:50 +0000
asID: 267191
IP address blocks: 45.231.17.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:29:b0:46:91:85:2c:87:bd:36:4f:a3:e1:64:53:ec:67:80:f4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Validity
Not Before: Apr 4 11:45:50 2024 GMT
Not After : Apr 3 11:50:50 2025 GMT
Subject: CN=152209D662E82FDCD1897B24ADB0505A10EADFD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:a7:54:3f:9b:5a:eb:ec:3f:0e:96:9b:08:
15:29:5a:89:04:1c:dc:46:3a:e8:8a:bc:49:dc:3c:
cc:fa:64:0f:72:e4:71:1b:ef:9f:22:6e:20:78:d5:
ca:f5:b3:b0:08:d9:00:f3:c9:51:66:f3:e8:8a:0d:
79:bd:1d:f0:2c:fb:3f:29:ee:53:ff:1c:b7:62:b6:
b2:2e:89:36:6e:5a:87:58:6f:96:22:4b:9f:8d:78:
83:b6:80:07:e8:fb:88:bb:8d:e4:7c:d5:1c:8a:82:
82:71:c3:ad:80:9d:77:10:e9:a4:1e:a4:d6:d8:f7:
1a:95:2a:b4:e7:8a:73:97:c4:c8:98:15:0e:f7:ed:
2f:31:9d:9c:e3:e7:89:69:ce:19:50:f9:35:a6:01:
59:81:9b:1e:10:ba:06:af:f3:0a:fb:4b:42:e0:d7:
b2:3b:b3:7f:99:85:f0:91:c1:25:3f:45:34:de:85:
b2:78:4b:0c:1f:2e:57:74:9f:f5:da:85:c1:af:e4:
84:3e:a0:23:70:78:b5:cc:7d:eb:92:7a:c9:28:eb:
b6:b3:fc:0b:6f:6e:34:e7:8a:c4:91:cb:5d:4c:4b:
18:c9:78:5a:a0:2f:b3:03:e5:64:54:9d:ba:ea:13:
26:aa:05:28:35:a3:06:63:89:15:5c:d8:7e:c1:4a:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:22:09:D6:62:E8:2F:DC:D1:89:7B:24:AD:B0:50:5A:10:EA:DF:D5
X509v3 Authority Key Identifier:
keyid:60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31372e302f32342d3234203d3e20323637313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.17.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:75:d6:7a:f6:d9:08:6e:7b:75:80:00:d1:10:ef:22:45:86:
48:e9:1e:a6:31:84:20:16:e7:33:e5:eb:a1:fe:cc:83:a2:80:
0f:47:ee:2d:06:1b:27:bf:46:0f:ee:c9:a5:72:d1:e1:9b:b6:
dc:55:b6:5a:fc:ed:02:1a:75:ec:4f:21:bf:96:8e:33:ab:5f:
2c:be:9f:71:8b:81:ac:db:96:79:8f:4e:37:5e:24:ae:2d:ef:
0e:b3:a2:44:e3:1c:2a:c2:d9:7e:b0:28:2c:f5:c1:04:fc:e2:
a4:c4:63:78:45:d2:b6:cd:48:0b:46:48:d7:90:db:52:45:76:
18:57:8b:ce:78:f2:9e:c9:f1:7d:4c:14:ad:1a:49:fa:8b:75:
3c:37:a4:8d:76:6f:9a:22:88:7b:b9:5b:a2:cb:04:27:d2:18:
19:ca:e9:dc:e7:9f:0e:6f:06:76:a7:8d:62:42:b2:74:0a:6c:
32:94:4b:27:98:5f:46:60:73:85:f8:ed:d8:e8:cb:eb:ad:51:
e5:d0:3d:a6:e0:1f:16:23:77:64:1d:eb:42:a8:2f:4a:39:c9:
c2:00:e2:db:9c:e2:e7:e9:b9:01:52:ac:c9:61:da:93:e0:2e:
67:29:c8:73:09:56:e5:0e:db:29:3f:ac:10:dc:d6:9e:58:6b:
b7:34:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 13:08:41 2024 by rpki-client on console-fra.rpki-client.org