Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa
File: 34352e3138342e36382e302f32322d3232203d3e20323639333539.roa (raw, json)
Hash identifier: ovFRJKErlZyUyfY6ME3hLgS9DjJoBveasUC+CanA+vQ=
Subject key identifier: E9:F8:94:45:FB:CB:94:C2:A1:BB:7E:64:5B:FD:4D:B0:10:62:99:EC
Certificate issuer: /CN=64E08193273EEA26A89B833428798A9E6FFD296C
Certificate serial: 79A7CCBF2F7259691A9A0CAA07EB9BB864C0C6BA
Authority key identifier: 64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa
Signing time: Mon 26 Aug 2024 19:33:07 +0000
ROA not before: Mon 26 Aug 2024 19:28:07 +0000
ROA not after: Mon 25 Aug 2025 19:33:07 +0000
asID: 269359
IP address blocks: 45.184.68.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a7:cc:bf:2f:72:59:69:1a:9a:0c:aa:07:eb:9b:b8:64:c0:c6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64E08193273EEA26A89B833428798A9E6FFD296C
Validity
Not Before: Aug 26 19:28:07 2024 GMT
Not After : Aug 25 19:33:07 2025 GMT
Subject: CN=E9F89445FBCB94C2A1BB7E645BFD4DB0106299EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:ec:9a:4b:ce:db:5d:99:7d:3c:71:57:5c:
1a:48:aa:84:c2:a8:a8:0b:2c:03:22:0c:b3:fd:0f:
5d:a6:5a:f8:1c:25:8c:63:e6:a5:7f:2c:0d:0d:75:
27:cb:5e:3a:0f:d5:ae:78:6a:5f:aa:57:f8:38:9d:
30:a7:47:f4:b7:b2:4c:3c:65:44:92:22:fe:94:f8:
f0:26:4c:a6:dc:00:ca:03:28:2c:8c:d9:51:59:96:
e4:09:31:e1:ca:17:4f:f8:d1:7e:e7:a8:9e:01:0d:
b8:8e:a5:ba:73:63:3c:13:d6:f2:36:05:8c:fb:7d:
47:7c:49:ce:ba:fe:7b:a6:6b:60:f6:7a:7e:84:ca:
5f:76:6f:23:08:07:bd:f6:9c:b6:bf:61:16:88:92:
de:fa:5d:26:a0:a8:37:17:bf:8a:bb:43:2e:eb:69:
ad:66:8f:18:5d:60:19:b8:57:ac:97:f3:c1:29:18:
b2:77:06:13:d6:3b:69:1c:93:e6:5e:11:ac:db:f6:
23:39:b0:ef:99:29:21:52:1a:81:26:fa:7a:4e:58:
bb:1a:51:9b:15:7b:33:33:17:fb:ad:07:72:63:e1:
1a:2a:a7:9f:a7:51:0f:cd:30:78:4a:1f:29:35:55:
a9:a4:8a:6d:1e:97:06:b6:75:ff:d1:36:78:15:09:
c9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F8:94:45:FB:CB:94:C2:A1:BB:7E:64:5B:FD:4D:B0:10:62:99:EC
X509v3 Authority Key Identifier:
keyid:64:E0:81:93:27:3E:EA:26:A8:9B:83:34:28:79:8A:9E:6F:FD:29:6C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/64E08193273EEA26A89B833428798A9E6FFD296C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64E08193273EEA26A89B833428798A9E6FFD296C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3232203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.68.0/22
Signature Algorithm: sha256WithRSAEncryption
51:2e:9d:fb:e9:78:04:b4:c3:0f:77:c9:24:0d:18:09:48:a4:
99:96:a2:31:02:3e:f3:71:38:2e:00:ab:21:c6:96:a1:53:0a:
65:3e:ec:d2:62:4d:9e:31:87:c9:9a:e7:21:0f:c0:97:25:3c:
e3:a6:77:87:1c:4c:79:66:40:63:38:0d:c5:0c:c6:53:64:71:
02:44:db:18:3f:09:df:28:03:b6:d2:9c:e3:03:6d:35:7a:76:
7f:96:90:46:92:63:47:19:30:04:16:aa:1c:7c:20:11:1c:4f:
4c:b3:77:8c:ef:2d:ac:7a:73:60:28:a6:59:46:c9:95:1f:da:
96:57:fc:0c:a1:d2:b9:ae:9a:ad:5e:e8:ca:4a:24:03:bd:c8:
84:ab:9f:12:16:7f:4e:02:57:7e:52:6a:cd:b9:fb:63:f8:b9:
b4:69:9b:af:1b:be:bf:c2:d8:82:d9:58:aa:2f:c9:a5:f5:72:
c1:95:a8:df:16:34:81:fe:43:50:83:6d:a6:92:44:fc:7e:f9:
2e:33:9a:5a:dd:0d:81:b7:cb:06:a7:08:6b:2b:e4:de:5c:f9:
69:a3:92:c6:d2:e2:a2:11:50:5f:d1:fb:dc:a1:b9:bf:66:36:
8f:2d:32:61:83:9c:36:59:ad:fb:d2:90:c5:28:62:51:d7:60:
df:ae:df:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 2 12:55:51 2024 by rpki-client on console-fra.rpki-client.org