Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa
File: 34352e3233312e31392e302f32342d3234203d3e20323637313931.roa (raw, json)
Hash identifier: EtN2AytXds4e9UbBAtkgdXRpW1wc6qo40km17eYdKFg=
Subject key identifier: AB:44:71:BE:10:69:DD:AF:DD:CA:50:AD:41:A3:5B:84:3B:53:42:D8
Certificate issuer: /CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Certificate serial: 3DF49C555E5AAAEC6751C77F61FF49E5FFD83B0F
Authority key identifier: 60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa
Signing time: Thu 04 Apr 2024 11:50:50 +0000
ROA not before: Thu 04 Apr 2024 11:45:50 +0000
ROA not after: Thu 03 Apr 2025 11:50:50 +0000
asID: 267191
IP address blocks: 45.231.19.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f4:9c:55:5e:5a:aa:ec:67:51:c7:7f:61:ff:49:e5:ff:d8:3b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60A5A0FCAC82AF800163FDA056041F5925116D3D
Validity
Not Before: Apr 4 11:45:50 2024 GMT
Not After : Apr 3 11:50:50 2025 GMT
Subject: CN=AB4471BE1069DDAFDDCA50AD41A35B843B5342D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e4:56:88:3c:e2:fd:55:49:e0:ae:26:82:f0:
c6:bb:15:d8:49:4d:33:cd:99:37:d4:82:ba:2b:c6:
ac:d1:26:0a:85:7b:74:a6:72:5c:d5:4e:84:78:40:
37:44:5b:b2:3b:34:64:45:f7:a2:64:2e:b5:83:bf:
a9:dc:b3:a2:b9:40:74:7c:0b:93:43:2d:86:d5:37:
c6:3c:fe:0b:00:e2:77:bb:4d:50:13:4b:03:93:a0:
41:1a:28:9c:0d:e4:01:01:eb:61:ce:2e:a7:2b:cd:
ed:2c:1a:bf:13:bd:23:68:55:6e:c9:6d:c0:b3:65:
b1:2b:b1:4a:3c:61:c7:c3:05:6d:ef:4b:6f:95:06:
99:c5:a7:92:e4:b9:f6:d4:ff:76:f0:46:57:f9:f0:
75:b1:ea:32:c2:9b:c4:7b:cc:66:68:e1:e3:85:a2:
1f:6b:46:6c:fa:2b:78:ce:f6:02:a2:8c:a1:30:ba:
91:2a:df:4a:d3:2c:80:15:1b:06:1c:be:42:a9:e5:
b9:2c:8e:55:d3:62:a8:7c:f4:b1:55:48:4f:67:cb:
8a:2a:17:5e:72:82:48:05:5c:08:19:44:50:43:0e:
48:87:73:c9:80:d3:2b:5b:b2:dd:fe:61:af:2e:02:
59:3c:86:1d:28:6c:0e:fe:5b:86:eb:69:f6:4d:0f:
bb:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:71:BE:10:69:DD:AF:DD:CA:50:AD:41:A3:5B:84:3B:53:42:D8
X509v3 Authority Key Identifier:
keyid:60:A5:A0:FC:AC:82:AF:80:01:63:FD:A0:56:04:1F:59:25:11:6D:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60A5A0FCAC82AF800163FDA056041F5925116D3D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkSmt1eyJYyLUjACX8LVkTU1fKdCwd61wVXuVvXSN29t/1/34352e3233312e31392e302f32342d3234203d3e20323637313931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.19.0/24
Signature Algorithm: sha256WithRSAEncryption
73:8c:62:ed:ab:72:0d:9d:a3:21:0d:c8:91:36:d3:68:17:d9:
2e:5e:8a:62:9c:6d:a5:90:25:82:e8:a1:d0:23:f2:81:45:40:
93:c6:aa:19:e1:b3:12:8c:c5:96:71:09:b8:a5:88:bc:bd:5d:
a1:2e:0e:02:05:b4:c9:80:79:e8:71:b1:b0:29:37:56:e4:cb:
77:fe:5b:33:c0:c8:b4:fb:04:c7:b6:ce:56:81:8c:75:16:69:
34:5b:0b:55:46:57:90:d7:bf:60:c4:71:d8:12:d7:be:39:f4:
50:d4:03:da:ba:22:b5:09:da:84:76:d3:8e:68:aa:98:75:6f:
95:39:0a:34:2b:ce:d8:8b:51:a2:14:bb:42:2e:5b:71:20:56:
77:55:91:de:5c:35:aa:3f:6b:e8:86:ae:2e:d1:25:d4:82:49:
bc:79:3a:1a:19:f7:bc:a6:2e:35:f4:c7:7e:b6:e1:74:1b:d9:
42:56:d2:b4:de:5c:5d:34:2c:87:87:f0:ee:e9:8a:83:bd:59:
83:44:54:93:b7:d2:25:1a:3b:08:8b:19:45:3d:6e:c3:2e:68:
c0:6f:9f:38:89:2a:d4:72:1b:c4:50:e8:5a:28:af:b7:90:6b:
1f:02:5b:70:b1:ec:84:c4:57:f1:d3:d0:52:a5:26:3c:5a:f7:
db:49:ac:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 3 15:30:04 2024 by rpki-client on console-ams.rpki-client.org