Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/34352e3136382e36302e302f32322d3332203d3e20323638303331.roa
File: 34352e3136382e36302e302f32322d3332203d3e20323638303331.roa (raw, json)
Hash identifier: xWknt14uflZLOxhbHUJXe02wfX8wXV6k5pses+IeCN4=
Subject key identifier: ED:77:CF:F3:85:93:A0:B9:7A:4F:3E:23:43:FD:C1:E9:12:90:B2:0F
Certificate issuer: /CN=720929CF576E60789CD9860A6B57545753C0FA3F
Certificate serial: 11D8D8B7C4D26C582060265E72D51380A1A14DC5
Authority key identifier: 72:09:29:CF:57:6E:60:78:9C:D9:86:0A:6B:57:54:57:53:C0:FA:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/720929CF576E60789CD9860A6B57545753C0FA3F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/34352e3136382e36302e302f32322d3332203d3e20323638303331.roa
Signing time: Mon 06 May 2024 15:15:40 +0000
ROA not before: Mon 06 May 2024 15:10:40 +0000
ROA not after: Mon 05 May 2025 15:15:40 +0000
asID: 268031
IP address blocks: 45.168.60.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d8:d8:b7:c4:d2:6c:58:20:60:26:5e:72:d5:13:80:a1:a1:4d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720929CF576E60789CD9860A6B57545753C0FA3F
Validity
Not Before: May 6 15:10:40 2024 GMT
Not After : May 5 15:15:40 2025 GMT
Subject: CN=ED77CFF38593A0B97A4F3E2343FDC1E91290B20F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fa:6c:26:74:03:b4:0c:0c:30:67:50:b6:4f:
b2:3e:39:ca:f5:bf:e3:d1:be:7d:ac:c2:42:1b:b7:
42:f7:fa:cb:6e:c9:dd:16:d4:5e:bc:f0:43:3b:25:
65:6f:23:45:09:f0:09:16:63:de:da:06:e0:32:75:
60:1e:a6:7e:bd:fb:09:85:07:83:07:20:ba:8a:b8:
70:82:f6:6b:dc:34:8f:38:b5:3d:e6:94:97:e5:c3:
7b:3c:3f:69:71:45:2d:14:60:31:c0:a5:8f:58:ef:
60:25:06:3d:70:9a:74:a8:fc:e4:07:03:75:96:b6:
46:ce:cb:a6:7e:f4:35:69:70:5c:f9:35:c2:60:f0:
90:d5:f7:b1:44:02:1f:04:db:29:59:9a:fd:ba:ca:
0d:d8:5f:a9:99:cb:49:9c:5a:75:8d:c4:5f:9d:61:
4f:0b:4d:59:cc:36:d7:19:45:a1:a0:98:c3:d9:e9:
ff:43:ec:83:60:95:7b:69:59:84:07:7f:82:91:ad:
6d:2a:e5:4e:ca:2c:56:32:e1:b0:51:a2:f9:ec:c0:
9e:b1:2d:7b:33:2c:b8:59:88:32:d6:16:da:43:19:
93:8c:01:22:ac:16:8f:e4:85:e7:4b:4c:ce:ac:09:
7c:13:12:4e:9b:e7:c9:c2:3f:c0:9f:62:34:81:32:
89:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:77:CF:F3:85:93:A0:B9:7A:4F:3E:23:43:FD:C1:E9:12:90:B2:0F
X509v3 Authority Key Identifier:
keyid:72:09:29:CF:57:6E:60:78:9C:D9:86:0A:6B:57:54:57:53:C0:FA:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/720929CF576E60789CD9860A6B57545753C0FA3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/720929CF576E60789CD9860A6B57545753C0FA3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/34352e3136382e36302e302f32322d3332203d3e20323638303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.60.0/22
Signature Algorithm: sha256WithRSAEncryption
15:07:fa:a2:d3:ad:c8:6f:67:0e:6e:a3:93:94:47:3c:d6:00:
5c:91:75:a3:26:2e:fb:d3:b8:66:0e:06:e9:d6:c2:4c:af:f8:
88:22:f3:25:2a:33:fd:b3:01:05:9e:62:7f:23:e3:b6:97:79:
94:cc:88:f0:b1:22:6f:e8:b6:89:2f:dd:62:e8:c3:ef:c3:12:
46:6a:ac:3e:7c:06:9a:d2:6a:fe:f8:9a:06:52:53:9a:a6:4b:
5b:c0:83:8f:87:b2:28:cf:d6:b1:aa:f4:31:16:f6:44:59:6d:
e6:e8:35:fd:9b:0a:fe:b7:b0:d1:da:38:98:d4:f1:e8:3f:e8:
fb:4a:4d:23:96:79:d2:bb:4a:96:cb:e9:89:f5:b1:1d:dd:7e:
5e:f2:0b:f0:78:77:56:3a:20:2c:6e:dc:f4:a9:7e:84:93:db:
20:c6:d1:40:2c:35:a9:f1:a1:50:e6:b3:40:d9:2d:fa:f9:d3:
fd:91:71:9c:ef:ca:9f:1e:74:29:ed:38:e4:9f:4c:53:6d:53:
b0:c6:cd:77:2a:14:33:e7:b3:1f:f5:18:a8:cc:c4:89:ce:7b:
8a:7c:5d:16:cc:c4:c0:94:1d:20:ee:15:27:e3:8e:d0:7c:b0:
fd:05:37:f9:a1:66:64:4c:41:b4:34:88:de:0f:6a:00:4e:5b:
62:77:42:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 6 16:42:35 2024 by rpki-client on console-fra.rpki-client.org