Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
File: 34352e3138342e36382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier: chSX8F+Nanu9EjaGDaUX5w4pHI82QOSZx5dkz9eCbBw=
Subject key identifier: DC:C3:09:83:49:80:5D:1C:9A:8C:17:83:24:29:8C:27:91:3C:B3:4A
Certificate issuer: /CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
Certificate serial: 23586C6B55208F1D2074635552B020655661E675
Authority key identifier: 79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
Signing time: Tue 19 Nov 2024 18:57:56 +0000
ROA not before: Tue 19 Nov 2024 18:52:56 +0000
ROA not after: Tue 18 Nov 2025 18:57:56 +0000
asID: 269359
IP address blocks: 45.184.68.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:58:6c:6b:55:20:8f:1d:20:74:63:55:52:b0:20:65:56:61:e6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6
Validity
Not Before: Nov 19 18:52:56 2024 GMT
Not After : Nov 18 18:57:56 2025 GMT
Subject: CN=DCC3098349805D1C9A8C178324298C27913CB34A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ed:fb:1a:fe:c1:10:e1:5b:4a:49:3f:e2:d7:
68:38:03:0b:8d:24:28:86:d0:5d:9c:e6:e7:1f:e7:
4c:72:1f:47:76:e5:77:02:60:b5:7b:90:c1:a2:c2:
cd:0e:f8:3d:64:12:d8:97:60:ad:44:b1:ae:fb:92:
13:2b:15:75:4f:6b:6b:39:51:34:59:aa:4e:40:9b:
24:98:85:66:6d:ec:57:8a:89:45:90:fb:49:07:2e:
6e:9b:51:a2:dc:a0:58:d9:f6:13:eb:a3:76:13:4f:
9f:ac:1a:81:a6:66:58:93:d2:51:ee:17:e1:50:5d:
56:9d:01:16:68:a3:8c:be:09:f7:14:f1:b9:5a:57:
0c:a3:c7:e7:78:fb:7e:b1:46:6e:41:fa:4d:d0:8a:
18:5d:03:55:44:50:d2:63:25:17:2a:e8:d0:3e:dc:
44:3a:fe:14:de:76:9a:52:a3:0d:06:4f:ea:47:c4:
a6:ac:19:f9:d6:d8:54:5f:7b:34:a1:49:9e:2a:bb:
29:39:7f:3a:40:cf:4d:48:76:44:d8:ea:c3:70:c8:
d0:87:de:1a:b9:13:1c:4b:15:2e:ff:59:56:eb:8c:
08:bc:d8:2e:85:11:bb:6b:11:ca:58:9c:55:4c:48:
82:7f:6e:71:a0:e4:d8:b1:5b:b4:53:f7:09:c5:90:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:09:83:49:80:5D:1C:9A:8C:17:83:24:29:8C:27:91:3C:B3:4A
X509v3 Authority Key Identifier:
keyid:79:3A:A6:D0:CC:0F:6C:FA:0A:23:CA:39:6B:E7:13:EF:1A:D6:7E:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/793AA6D0CC0F6CFA0A23CA396BE713EF1AD67EB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.68.0/22
Signature Algorithm: sha256WithRSAEncryption
75:d5:a9:1c:86:3b:a0:ea:eb:d5:8a:e2:56:38:9b:65:67:33:
26:62:43:a4:4c:1f:1a:09:73:b8:a3:4b:6e:24:e8:35:72:8b:
cc:01:7f:fd:b5:1b:62:5b:59:38:9e:cc:60:20:71:ea:ff:f4:
31:25:ad:04:ac:c7:61:10:89:b0:d8:93:62:18:6e:03:0c:40:
c1:51:49:da:38:b2:2b:3a:da:bc:ef:96:d3:8b:60:ec:b6:8a:
71:4d:93:85:a7:f5:03:7d:f7:4d:0f:12:5a:4b:59:07:09:f9:
19:f6:0d:5b:07:81:94:5f:89:c6:ca:7e:d7:32:b8:39:3a:72:
57:9e:c2:d9:c3:2d:6b:6b:16:29:8b:80:10:16:c1:17:d8:70:
66:51:46:7d:9a:df:d2:85:19:d4:9d:d6:e9:dc:89:ec:ae:08:
fc:c9:ff:1e:4a:15:4b:c9:79:fe:4a:a1:bf:42:45:e4:e9:29:
b4:f0:a5:b5:ea:7f:87:9a:f5:46:86:1e:46:0f:13:1b:a0:c0:
50:75:db:0f:ba:30:8c:66:7f:53:62:b4:9b:73:b6:ca:06:80:
65:aa:ac:49:a8:a5:51:cb:1b:a8:7d:29:4a:db:cd:ca:e0:43:
d3:ea:11:f0:cf:31:c0:b9:8e:d2:b6:d0:20:b3:9a:70:12:30:
5b:33:56:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:11:07 2024 by rpki-client on console-ams.rpki-client.org