Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34332e302f32342d3234203d3e20323638353936.roa
File: 34352e3136342e34332e302f32342d3234203d3e20323638353936.roa (raw, json)
Hash identifier: s8ARaAmN/T4vwNLwwjj7d8jO8opOMIV36F/k87xzWzg=
Subject key identifier: 25:A5:EE:1E:C3:48:5C:60:16:74:17:82:8D:EB:9C:37:FD:3F:83:0D
Certificate issuer: /CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Certificate serial: 5993312B47990477E9B904A4DEC51890D3735B62
Authority key identifier: 4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34332e302f32342d3234203d3e20323638353936.roa
Signing time: Wed 14 Aug 2024 15:25:14 +0000
ROA not before: Wed 14 Aug 2024 15:20:14 +0000
ROA not after: Wed 13 Aug 2025 15:25:14 +0000
asID: 268596
IP address blocks: 45.164.43.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:93:31:2b:47:99:04:77:e9:b9:04:a4:de:c5:18:90:d3:73:5b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D75809E071D4433F365FE41E48F4C2BED13B507
Validity
Not Before: Aug 14 15:20:14 2024 GMT
Not After : Aug 13 15:25:14 2025 GMT
Subject: CN=25A5EE1EC3485C60167417828DEB9C37FD3F830D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:d4:65:94:67:32:15:0f:70:fb:6b:80:ee:
85:35:1a:f5:e0:40:f6:55:2e:95:9c:e8:72:0e:8a:
fc:fd:b7:b4:03:64:c0:a2:bf:bd:71:a5:27:2e:f5:
ef:09:7a:a1:17:66:6b:5f:54:ac:19:e5:5a:cc:b5:
01:a0:97:db:f4:ff:a8:94:60:cc:10:7e:67:00:d7:
ea:4e:50:c1:d0:fe:9a:c6:f7:95:fc:7f:c2:2d:00:
24:1e:a9:4c:33:d4:9d:34:e3:a7:d3:ad:32:0d:3c:
4f:9f:5c:8f:e4:b0:de:b4:69:72:07:9f:c8:55:97:
60:fc:0e:aa:91:e7:cf:51:d7:4b:88:18:6d:14:68:
2b:ca:d0:43:50:59:59:59:d7:e9:8f:6b:10:23:ab:
84:6a:ed:54:72:52:33:06:3d:70:9b:2b:5b:d1:ce:
6a:d8:98:35:6d:f3:85:f5:9a:2e:2f:f2:3f:35:cd:
42:84:ec:01:ad:47:b6:a2:c1:1f:c1:ce:89:9f:fc:
88:e3:05:b2:de:06:da:3e:08:49:a4:bb:92:3f:5a:
8c:1c:6b:6b:5f:30:1f:99:8c:3a:c2:d0:6e:e3:c2:
95:70:dd:68:f9:64:9c:6f:e0:cd:49:bd:4e:b3:5d:
d0:34:28:7e:84:5e:de:00:35:78:be:c3:18:f9:e7:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A5:EE:1E:C3:48:5C:60:16:74:17:82:8D:EB:9C:37:FD:3F:83:0D
X509v3 Authority Key Identifier:
keyid:4D:75:80:9E:07:1D:44:33:F3:65:FE:41:E4:8F:4C:2B:ED:13:B5:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/4D75809E071D4433F365FE41E48F4C2BED13B507.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D75809E071D4433F365FE41E48F4C2BED13B507.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DksCStozatYTEsM4a3BCFDfgZrYCz721reKvSoBJgeyk/0/34352e3136342e34332e302f32342d3234203d3e20323638353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c1:78:1d:b4:37:4b:a5:00:33:3f:6a:52:71:82:bf:78:59:
16:20:ba:a0:82:24:62:d0:4c:c8:47:cb:56:77:07:89:54:ce:
98:ce:86:68:4e:62:cd:61:40:36:e1:03:70:7b:1a:d5:70:c5:
b8:1a:97:6b:d8:93:c3:9a:e0:bb:4d:d1:74:80:c3:42:2f:60:
73:00:7d:b2:f5:73:de:db:da:3e:df:e7:1e:cb:1c:4a:e5:60:
d7:22:f4:d5:64:9b:b4:4c:ac:b6:a3:a8:df:f7:9e:c5:52:ee:
9e:0d:f3:cb:8f:23:26:6b:dd:9d:2f:8e:f6:ff:3d:f4:83:fd:
fc:4d:04:d4:6c:cf:53:6e:17:3a:ff:ff:2f:0a:a6:61:fc:c9:
62:56:c7:3b:63:2c:a6:73:5c:6e:61:ac:9b:d0:81:4d:e4:0e:
01:14:59:8b:63:8a:35:14:db:1f:78:20:2e:bf:6c:93:b9:0c:
16:be:08:d1:84:78:19:71:9b:36:20:8a:81:ca:31:e2:fd:d7:
c3:9f:0d:83:18:cd:82:c2:81:df:4e:0b:d8:1d:15:b7:cb:b1:
d5:95:83:82:3f:69:a2:2d:c3:41:3d:9e:3c:54:3a:0e:84:63:
34:0e:a5:d4:c1:26:eb:ba:cd:a1:f4:cc:59:d6:a2:a1:c7:4d:
00:d0:8a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 15 21:54:33 2024 by rpki-client on console-fra.rpki-client.org