Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Es5cN98sDvuKBoZP6S7orWj3rzKcyPxxbuWbjk9UbgGo/0/34352e3137322e3136302e302f32322d3332203d3e20323638373835.roa
File: 34352e3137322e3136302e302f32322d3332203d3e20323638373835.roa (raw, json)
Hash identifier: 0v3EBOUDuzGlMtYMwUxR/oRAVVjNtrcgltceM9futws=
Subject key identifier: 03:11:54:22:EA:A8:12:05:F8:82:12:F0:7E:85:3A:E1:BE:A6:5A:00
Certificate issuer: /CN=33837FE2F1C8B108096F1E513977CDA74740BDBA
Certificate serial: 73925899024489CEBA13DAFCBE69849FEED294CF
Authority key identifier: 33:83:7F:E2:F1:C8:B1:08:09:6F:1E:51:39:77:CD:A7:47:40:BD:BA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33837FE2F1C8B108096F1E513977CDA74740BDBA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Es5cN98sDvuKBoZP6S7orWj3rzKcyPxxbuWbjk9UbgGo/0/34352e3137322e3136302e302f32322d3332203d3e20323638373835.roa
Signing time: Fri 04 Oct 2024 17:17:40 +0000
ROA not before: Fri 04 Oct 2024 17:12:40 +0000
ROA not after: Fri 03 Oct 2025 17:17:40 +0000
asID: 268785
IP address blocks: 45.172.160.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:92:58:99:02:44:89:ce:ba:13:da:fc:be:69:84:9f:ee:d2:94:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33837FE2F1C8B108096F1E513977CDA74740BDBA
Validity
Not Before: Oct 4 17:12:40 2024 GMT
Not After : Oct 3 17:17:40 2025 GMT
Subject: CN=03115422EAA81205F88212F07E853AE1BEA65A00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:67:91:e9:d6:74:35:40:85:fa:61:82:c1:
56:4d:38:0e:ec:3d:01:cc:bd:65:74:28:d8:81:0c:
f1:ff:16:1e:c0:a3:17:38:0a:0a:62:41:21:6f:dc:
69:e3:a5:a6:c2:50:7d:89:af:4e:ab:d5:3c:29:06:
7d:3e:19:bf:88:a7:d9:0f:1a:2b:bd:da:32:3c:f9:
c8:4b:a7:ba:a6:b0:ba:bc:c2:fa:b6:c3:12:72:8b:
1e:14:28:fd:19:d1:1e:5b:67:29:8b:4e:b6:2c:cf:
69:21:63:6a:f3:06:f3:9f:6a:61:a3:32:26:5f:91:
62:aa:6d:e5:36:c3:71:07:c7:bc:53:83:ed:04:c7:
5d:3d:a9:0c:af:50:66:d1:a7:5e:b7:7e:42:33:d8:
46:2c:9c:04:9d:46:bd:b0:4d:b7:a8:35:ec:7b:59:
ed:0c:ce:40:b1:8c:21:eb:06:4a:a6:c3:e6:d6:ff:
ac:fa:0d:94:dc:13:56:6e:dd:e0:2f:f4:5b:0f:97:
bd:24:b7:aa:a0:ad:3c:8a:9b:19:26:cd:e7:15:ae:
1a:46:55:b6:c9:2f:f9:30:63:56:67:fe:df:f2:2a:
89:42:37:f9:10:a2:76:f4:c0:fb:e5:39:3b:73:20:
76:c7:74:6b:1c:74:0c:5e:ed:21:dd:0a:a5:81:a0:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:11:54:22:EA:A8:12:05:F8:82:12:F0:7E:85:3A:E1:BE:A6:5A:00
X509v3 Authority Key Identifier:
keyid:33:83:7F:E2:F1:C8:B1:08:09:6F:1E:51:39:77:CD:A7:47:40:BD:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Es5cN98sDvuKBoZP6S7orWj3rzKcyPxxbuWbjk9UbgGo/0/33837FE2F1C8B108096F1E513977CDA74740BDBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/33837FE2F1C8B108096F1E513977CDA74740BDBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Es5cN98sDvuKBoZP6S7orWj3rzKcyPxxbuWbjk9UbgGo/0/34352e3137322e3136302e302f32322d3332203d3e20323638373835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.160.0/22
Signature Algorithm: sha256WithRSAEncryption
02:6b:f2:b0:03:06:b9:f8:7e:9d:5e:70:1f:15:64:50:7e:ab:
9c:f6:d2:25:8e:67:bb:27:29:3e:e1:17:46:46:6e:68:5c:63:
29:1d:39:0f:c1:59:5d:f6:b2:78:1f:70:7a:0e:1f:d2:11:0f:
8a:40:64:7d:d9:94:a2:ba:01:98:a0:6f:bf:b2:d2:3a:91:de:
fc:c4:eb:b2:b2:6e:a2:80:43:e9:0b:73:d3:5f:7a:41:5e:c0:
f0:b3:a8:13:42:f6:38:f7:e6:8d:da:f2:86:c0:19:6d:f9:87:
0b:03:42:6b:86:0e:36:7e:dd:09:0b:5f:b6:0e:d2:36:84:9d:
d8:34:a1:9e:8b:63:8a:97:46:ae:d6:4c:5c:1b:b7:9c:30:1d:
49:53:c5:06:5c:81:dd:7f:5b:90:9d:91:98:df:54:5d:56:98:
67:3d:09:c5:e7:02:73:ab:5e:ba:65:61:e7:1d:3a:fc:e7:ae:
0b:58:3f:1f:60:46:43:78:2a:65:b6:a1:01:7c:ea:9b:36:2c:
95:e5:fe:9c:40:2f:1a:17:62:bd:26:3b:64:11:57:fa:7b:1d:
92:30:4d:ed:d7:0e:34:50:b8:49:17:5f:9b:45:66:d9:96:c8:
33:52:a8:ce:71:8b:04:69:85:0e:a3:73:20:51:11:82:cf:0c:
d1:88:af:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 13 09:11:21 2024 by rpki-client on console-ams.rpki-client.org