Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e38382e302f32332d3233203d3e20323638303536.roa
File: 34352e3136382e38382e302f32332d3233203d3e20323638303536.roa (raw, json)
Hash identifier: lLyvG3k2pky/tpAjXwkPjnybBmZXU2Jj6kYhyh/elG8=
Subject key identifier: 09:86:0D:AE:89:6E:92:A1:27:75:77:D9:B7:8D:2E:C8:5D:DB:36:71
Certificate issuer: /CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
Certificate serial: 3E6B549A73D696D3D5B0BE255A21AC3703B5FFC5
Authority key identifier: AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e38382e302f32332d3233203d3e20323638303536.roa
Signing time: Thu 04 Apr 2024 03:41:14 +0000
ROA not before: Thu 04 Apr 2024 03:36:14 +0000
ROA not after: Thu 03 Apr 2025 03:41:14 +0000
asID: 268056
IP address blocks: 45.168.88.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:6b:54:9a:73:d6:96:d3:d5:b0:be:25:5a:21:ac:37:03:b5:ff:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
Validity
Not Before: Apr 4 03:36:14 2024 GMT
Not After : Apr 3 03:41:14 2025 GMT
Subject: CN=09860DAE896E92A1277577D9B78D2EC85DDB3671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3a:7f:b3:54:15:1d:39:77:f4:bb:ac:3e:57:
21:a3:80:7f:be:2c:6c:8b:9f:0d:f8:a6:f9:cb:9b:
4c:d5:93:49:0b:a3:89:8c:21:76:10:3e:ac:a9:17:
58:dc:3d:33:6a:bc:a0:94:6c:12:59:89:b0:aa:20:
8c:41:d5:4e:74:49:3e:a3:81:f4:e9:27:73:7e:c2:
8a:2f:42:63:4c:0f:d0:d4:a9:1d:8a:6b:55:bc:5c:
3f:7b:d5:6a:ce:31:48:da:17:7b:a3:d7:2c:e3:e6:
f4:d5:b1:72:b3:4a:2d:3e:9d:ad:6a:54:51:e8:d4:
9b:ac:56:20:c3:a8:ea:eb:cd:e5:e0:e6:49:1d:25:
65:8c:1d:8c:a0:4c:41:68:38:66:c7:88:7a:65:97:
5c:ec:4d:ed:5a:8d:aa:5e:f9:cd:fe:77:3f:1a:81:
28:86:f8:99:3b:9e:da:73:c9:f1:f5:b1:8c:fd:84:
d4:ac:78:c6:45:fc:8f:29:bd:9a:dd:01:1a:43:9a:
54:8d:1f:d4:af:9e:0c:d2:a6:d2:e2:3d:09:cd:e7:
f2:5f:48:9f:5b:69:50:72:e4:fd:14:0a:06:02:87:
3e:5b:02:ba:e9:6d:04:9b:9e:ca:61:99:ad:5d:12:
82:0b:84:ec:b7:36:f1:57:b9:a0:a5:e4:eb:b5:7f:
6c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:86:0D:AE:89:6E:92:A1:27:75:77:D9:B7:8D:2E:C8:5D:DB:36:71
X509v3 Authority Key Identifier:
keyid:AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e38382e302f32332d3233203d3e20323638303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.88.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:9b:ad:51:93:d8:9e:9e:ca:2b:44:69:cb:ec:fe:94:9c:9c:
42:e1:8f:3f:2f:63:d8:a1:fa:4f:0d:ce:32:09:23:2b:33:58:
78:4b:9d:6d:32:67:53:43:cf:fd:8c:5f:35:fb:76:8d:af:c2:
38:4f:d8:9a:94:b9:db:35:ef:8b:0f:12:25:83:18:65:2b:f1:
56:e0:f6:58:f4:3b:aa:33:19:2c:e8:58:1c:96:c0:ef:df:a7:
7f:c7:7b:54:16:32:bd:63:3e:fa:2d:ab:7e:a9:48:71:81:d8:
28:5e:86:05:0f:5a:8d:24:e8:f6:cd:e5:80:a6:39:fc:98:84:
79:cb:1f:e6:dc:81:2c:fd:7b:a0:22:77:67:db:1f:c2:00:40:
6f:a8:3e:b6:34:83:26:f2:0b:d7:fe:06:fd:15:7a:1f:a8:fa:
ab:2f:17:96:50:2c:e7:d5:cb:f8:68:35:64:87:96:20:ed:31:
e4:36:01:d5:a3:74:b7:90:5e:46:7f:37:40:a5:b9:17:f3:98:
d0:69:98:2b:c4:07:34:51:91:b1:9c:d1:c2:90:a8:f9:86:54:
5b:dd:e0:6b:56:22:89:78:a1:be:67:c7:61:78:f1:c8:76:6e:
63:71:c1:28:19:48:d5:09:52:d4:d0:ba:88:b0:59:4e:03:20:
5e:ae:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 06:22:47 2024 by rpki-client on console-fra.rpki-client.org