Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/34352e3233322e35362e302f32322d3234203d3e20323637323439.roa
File: 34352e3233322e35362e302f32322d3234203d3e20323637323439.roa (raw, json)
Hash identifier: t67AO9dEJ58AoM8HCYg27LTEZfStyeFYFVUzWh3Hf8c=
Subject key identifier: 40:E2:62:46:7A:C5:61:C1:4C:56:78:FA:B3:67:44:DB:57:F0:35:EF
Certificate issuer: /CN=019644AAEAED29967FF0AC96DCADEF592F939063
Certificate serial: 79BB4EE1291D04A8A90464C653CA0BCA60A2C600
Authority key identifier: 01:96:44:AA:EA:ED:29:96:7F:F0:AC:96:DC:AD:EF:59:2F:93:90:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019644AAEAED29967FF0AC96DCADEF592F939063.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/34352e3233322e35362e302f32322d3234203d3e20323637323439.roa
Signing time: Wed 10 Apr 2024 13:14:00 +0000
ROA not before: Wed 10 Apr 2024 13:09:00 +0000
ROA not after: Wed 09 Apr 2025 13:14:00 +0000
asID: 267249
IP address blocks: 45.232.56.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:bb:4e:e1:29:1d:04:a8:a9:04:64:c6:53:ca:0b:ca:60:a2:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=019644AAEAED29967FF0AC96DCADEF592F939063
Validity
Not Before: Apr 10 13:09:00 2024 GMT
Not After : Apr 9 13:14:00 2025 GMT
Subject: CN=40E262467AC561C14C5678FAB36744DB57F035EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:ab:5a:c2:ef:09:11:7b:28:54:7f:8e:6b:
3d:6c:f2:8b:72:01:1b:f9:d0:a0:08:a9:c1:7f:59:
af:32:f3:28:98:32:82:6f:75:05:ff:a6:2b:df:16:
71:b5:af:ca:85:8f:a1:cd:86:8b:b8:ff:0b:cb:a7:
11:69:eb:fe:e7:10:7d:17:57:65:e9:6d:f2:b1:7e:
66:53:15:21:a0:5e:a6:49:5e:99:f7:45:2c:88:b5:
ad:74:8f:28:4d:41:fe:e2:2a:19:ba:30:42:3c:3d:
37:17:2d:27:cc:77:08:41:a1:f3:4a:e2:e3:95:eb:
ab:88:84:66:c9:de:ba:34:88:e7:e1:2a:7c:d4:57:
23:27:7f:a7:1d:f6:76:c2:a4:70:7a:60:03:93:7b:
b0:32:4f:16:14:93:f3:a3:d1:d0:10:31:b1:da:32:
24:db:16:4d:a5:d1:df:ff:95:98:4a:f8:10:72:6f:
5e:f4:2a:72:98:a2:70:f5:85:80:d2:20:41:fa:ce:
2e:b1:57:2d:f0:e0:90:76:4b:c1:ad:7e:0d:6c:a4:
97:af:d9:e7:29:7b:73:ce:85:eb:8f:67:1e:38:8c:
74:59:ef:b4:ed:0d:e0:47:a8:45:a0:42:f7:e1:2e:
74:07:93:49:56:61:cb:c8:f2:10:79:35:3c:32:e3:
93:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E2:62:46:7A:C5:61:C1:4C:56:78:FA:B3:67:44:DB:57:F0:35:EF
X509v3 Authority Key Identifier:
keyid:01:96:44:AA:EA:ED:29:96:7F:F0:AC:96:DC:AD:EF:59:2F:93:90:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/019644AAEAED29967FF0AC96DCADEF592F939063.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/019644AAEAED29967FF0AC96DCADEF592F939063.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dkmoiq7hH4QtarKNkYMNTuULjbKa7h71jvrfWyuG656U/1/34352e3233322e35362e302f32322d3234203d3e20323637323439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.56.0/22
Signature Algorithm: sha256WithRSAEncryption
66:ab:fc:6a:56:ce:79:a2:a3:53:c6:77:7e:c5:7d:5b:00:7d:
a2:0d:7e:98:44:17:f3:c6:1a:66:7c:51:95:e1:99:5f:92:d3:
74:ce:79:f0:85:7b:7f:61:a5:16:36:1b:8b:55:27:6d:85:eb:
90:d0:f6:82:5d:3c:63:3b:7c:36:f2:4a:46:fa:a5:8f:d1:1a:
26:5c:61:ec:cf:c5:18:f1:3e:56:b3:45:96:44:37:51:8f:6d:
4a:7c:07:2d:de:d5:1d:c1:cf:a9:8f:04:dc:5f:62:aa:c0:a2:
d1:0c:f9:b8:dc:09:6e:47:5d:af:10:ce:86:ec:d7:d7:85:a2:
ef:8d:89:a8:8b:00:f6:c7:50:65:a9:37:92:be:79:81:5a:b0:
09:a7:b8:80:44:c4:bd:67:cd:ae:73:44:9d:6a:b1:b1:e4:93:
93:55:c1:d9:0a:b5:73:89:98:c4:4a:26:b3:7a:e3:e7:6f:47:
57:45:7f:65:5e:99:15:ca:70:97:5f:e5:bf:a4:01:16:ee:ff:
54:6a:ea:fa:67:a7:ff:9a:91:5e:4b:a0:e9:5d:31:6a:51:37:
0d:65:3d:02:7d:0b:c8:1b:73:d2:0e:f4:e3:fa:95:b5:6c:84:
6e:2e:04:bc:2a:f8:bd:7a:1a:1d:c5:08:76:98:7c:76:b0:76:
bb:51:09:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 10 16:30:35 2024 by rpki-client on console-ams.rpki-client.org