Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
File: 34352e3233362e37342e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier: I3QmZ3V8TqvgMRBm8woGzaAK7tEAWcY/EpktP0KjLEI=
Subject key identifier: 27:EC:04:E7:98:70:21:9F:B2:73:2E:2C:96:75:56:FF:3A:0B:F6:87
Certificate issuer: /CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
Certificate serial: 662ADC826D6618AC8CF106911BD795BA34FECB70
Authority key identifier: 2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
Signing time: Thu 04 Apr 2024 17:02:48 +0000
ROA not before: Thu 04 Apr 2024 16:57:48 +0000
ROA not after: Thu 03 Apr 2025 17:02:48 +0000
asID: 271478
IP address blocks: 45.236.74.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:2a:dc:82:6d:66:18:ac:8c:f1:06:91:1b:d7:95:ba:34:fe:cb:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F773A485ECF8F91222BAD172BC73063B0C9107A
Validity
Not Before: Apr 4 16:57:48 2024 GMT
Not After : Apr 3 17:02:48 2025 GMT
Subject: CN=27EC04E79870219FB2732E2C967556FF3A0BF687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:59:3d:9c:c6:67:68:7b:30:60:0a:26:ce:88:
dc:8b:73:2f:c9:3c:f6:ad:7a:44:ad:c9:58:9e:53:
00:c3:df:5e:13:7a:5e:90:57:d8:3a:40:3d:21:7b:
f0:bf:3c:11:c8:eb:cd:fe:2a:d4:25:ec:d6:6f:30:
53:06:53:c1:12:b4:18:76:17:61:34:1d:6c:01:bd:
9b:65:e3:fe:2f:dc:b6:2c:aa:0c:2d:43:55:cc:a1:
39:cb:26:5d:3a:b8:b4:76:a9:ac:8f:c1:77:81:1f:
1b:c7:dc:e1:23:c3:3b:ec:88:e8:e2:2a:88:b7:26:
54:5a:c6:62:ae:82:a2:cb:9c:a3:43:3b:9a:23:1e:
8b:80:41:ea:7c:9a:29:43:46:5f:6c:04:b7:65:94:
de:d6:7a:48:22:30:23:ce:a1:fd:95:82:d3:40:2d:
be:0b:dc:74:bb:75:db:d5:b0:3b:1b:00:1d:d4:96:
a2:9c:1d:2a:78:0a:e2:ef:fd:a3:97:40:94:90:3c:
a4:37:21:07:6b:8f:15:f5:de:7c:67:3b:c7:e7:a9:
ee:2e:16:0e:59:37:78:7b:53:7a:6d:26:76:02:80:
c8:55:8c:1a:66:36:f2:65:86:a1:f2:5b:69:df:5f:
99:e4:08:52:4e:e7:f7:6d:f6:11:c9:fa:27:cf:6a:
76:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EC:04:E7:98:70:21:9F:B2:73:2E:2C:96:75:56:FF:3A:0B:F6:87
X509v3 Authority Key Identifier:
keyid:2F:77:3A:48:5E:CF:8F:91:22:2B:AD:17:2B:C7:30:63:B0:C9:10:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F773A485ECF8F91222BAD172BC73063B0C9107A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/1/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.74.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:e2:f7:49:1c:70:b0:79:92:c1:e4:39:6b:b0:85:d3:81:3f:
00:d0:b1:1f:64:34:b6:ce:07:33:08:5e:f9:2b:76:5f:24:35:
b9:aa:cc:89:53:04:97:b1:90:a8:5e:5a:61:e3:03:bb:ca:c3:
81:86:7d:ed:17:0f:39:5c:94:95:b4:d8:b2:05:73:e5:26:99:
9e:90:8f:af:dc:c5:41:15:b1:9e:35:94:6a:3e:c2:86:00:c9:
aa:24:3c:16:40:b5:f6:45:0e:d5:93:f2:53:4f:33:25:51:0a:
d9:cc:c1:da:ba:22:e1:02:a7:e7:54:54:8c:0e:a6:d4:e1:aa:
d9:e9:57:66:76:21:21:e7:ed:89:cc:84:60:99:2c:47:56:6d:
42:05:6d:d7:58:02:59:13:16:50:d2:3d:1e:0e:1d:a0:ae:d4:
c0:82:3d:5a:83:cd:dd:52:7d:ce:10:d3:94:89:c0:02:ad:d6:
63:d2:cb:a7:32:d4:68:6c:a9:2e:c7:5f:db:a6:02:44:56:a0:
36:35:76:e1:a2:65:af:e3:2d:d7:3d:93:d9:a4:34:e7:00:cd:
87:e2:62:e1:38:77:66:2b:e3:e3:57:21:de:f0:ab:a4:e7:b2:
da:bd:1b:bb:32:b1:24:1f:04:ce:41:35:b0:56:73:e4:45:5c:
a4:8a:2c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 31 09:16:36 2024 by rpki-client on console-fra.rpki-client.org