Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38392e302f32342d3234203d3e20323638373034.roa
File: 34352e3137312e38392e302f32342d3234203d3e20323638373034.roa (raw, json)
Hash identifier: sjaA+fcHrDeO93AZ/uGpe8bwONLFvfDqvMUT3h3CaYY=
Subject key identifier: 8C:8F:64:D3:54:CF:B5:FA:1E:66:71:47:8F:B2:1F:35:37:D1:81:63
Certificate issuer: /CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
Certificate serial: 75963E483C339D782D23045A27C39F350F1A7BEA
Authority key identifier: 96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38392e302f32342d3234203d3e20323638373034.roa
Signing time: Mon 05 Aug 2024 03:41:41 +0000
ROA not before: Mon 05 Aug 2024 03:36:41 +0000
ROA not after: Mon 04 Aug 2025 03:41:41 +0000
asID: 268704
IP address blocks: 45.171.89.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:96:3e:48:3c:33:9d:78:2d:23:04:5a:27:c3:9f:35:0f:1a:7b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96A28B7606385C538AB85121C62CC8D2D1FFF64F
Validity
Not Before: Aug 5 03:36:41 2024 GMT
Not After : Aug 4 03:41:41 2025 GMT
Subject: CN=8C8F64D354CFB5FA1E6671478FB21F3537D18163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:5f:fa:3d:88:7d:8f:11:d5:d2:20:b4:fb:
8e:18:15:41:ab:b5:20:3d:23:d0:ee:76:c3:82:61:
31:67:73:ea:7d:e6:f7:34:d8:5d:43:ba:83:18:99:
cb:63:da:7d:be:2e:54:01:a8:28:8a:43:93:fa:60:
00:7a:81:40:f5:b4:f5:94:50:f0:fa:6e:23:1d:25:
b2:e6:c5:4d:d9:7d:9c:6e:dd:0a:bd:54:b9:d7:60:
03:c5:42:05:91:15:a5:66:ae:15:a1:fa:13:bf:f6:
21:bc:96:aa:1b:b0:02:4e:20:60:a1:91:52:4e:d5:
64:bf:d0:c1:df:2b:98:b6:31:d8:19:ad:f1:b5:c3:
fd:1c:35:3b:4e:10:56:00:65:22:75:d4:de:79:7a:
a9:e5:12:dc:9e:4b:9e:fa:28:9d:d8:9f:27:00:37:
c9:7c:b9:01:16:84:34:94:9b:3c:d2:9e:32:60:55:
4e:8a:7e:9c:1f:3a:a7:67:20:4d:0d:07:ad:18:30:
36:39:ed:4d:34:b3:fa:d3:94:63:2b:a2:85:ef:b7:
44:cb:35:a7:8a:a1:84:f6:e0:8c:4c:52:57:87:6d:
5c:f2:0f:cb:76:5a:a8:2c:b7:b4:33:45:5d:0f:65:
94:62:58:c7:d1:7b:75:a9:60:60:54:6d:86:c8:47:
68:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:8F:64:D3:54:CF:B5:FA:1E:66:71:47:8F:B2:1F:35:37:D1:81:63
X509v3 Authority Key Identifier:
keyid:96:A2:8B:76:06:38:5C:53:8A:B8:51:21:C6:2C:C8:D2:D1:FF:F6:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/96A28B7606385C538AB85121C62CC8D2D1FFF64F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96A28B7606385C538AB85121C62CC8D2D1FFF64F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EekbXLqFiZVqrgGMYgKvBHEL2Moz6Ko7Aw3eBex6MEpV/0/34352e3137312e38392e302f32342d3234203d3e20323638373034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:03:03:65:7b:f4:93:0b:cf:5b:b4:0d:3c:b8:6a:45:7a:12:
b1:b6:fd:c3:8d:28:0e:1e:29:de:6f:d7:53:9f:3d:45:3b:2c:
96:2a:35:bd:be:01:29:59:d0:36:89:28:eb:11:e8:4f:9c:bf:
1d:2c:5a:0a:2a:46:9d:53:d4:a1:12:eb:ce:a4:73:a6:26:85:
b3:24:9e:80:b2:7e:0f:d8:46:21:32:82:4a:4f:e8:fa:ea:ce:
42:fd:9b:79:36:ed:fa:b4:58:9b:2e:dd:03:fc:50:d0:26:19:
86:09:1a:b2:4f:44:9c:f0:37:77:c2:f5:72:23:3d:a9:5e:42:
a5:b1:cf:15:8d:7a:3a:68:8b:21:bb:e8:a4:2a:1e:2a:43:15:
aa:f3:e0:36:4f:4b:9b:2b:2f:24:0a:14:1a:69:ca:e5:33:49:
4a:77:08:bd:42:ac:dd:6a:30:17:0a:1c:3f:bd:ce:e1:c2:b2:
a0:30:7e:01:11:b0:99:b7:95:27:26:5f:a4:d9:8c:ea:25:4b:
fb:16:7e:6f:a3:1b:d3:87:1c:52:8c:ad:71:0d:6a:ce:42:e7:
73:35:92:83:5f:77:1b:c3:25:f6:8a:e1:22:d1:5e:bd:b6:39:
06:37:cd:68:69:3b:50:22:57:ad:f3:e3:2f:8d:a4:9e:9d:fb:
87:27:54:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 29 13:19:42 2024 by rpki-client on console-fra.rpki-client.org