Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e39302e302f32332d3233203d3e20323638303536.roa
File: 34352e3136382e39302e302f32332d3233203d3e20323638303536.roa (raw, json)
Hash identifier: r7GY4WX918Pu4Jr23GihGh7uOLYfmxcjWXPEg7e4g+k=
Subject key identifier: 73:EC:C4:0C:50:D0:8F:6A:D9:C1:98:29:3C:AD:0A:6B:0C:12:FD:E4
Certificate issuer: /CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
Certificate serial: 01616F26F111D911E53C41EA8B36806A6D3652CC
Authority key identifier: AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e39302e302f32332d3233203d3e20323638303536.roa
Signing time: Thu 04 Apr 2024 03:41:12 +0000
ROA not before: Thu 04 Apr 2024 03:36:12 +0000
ROA not after: Thu 03 Apr 2025 03:41:12 +0000
asID: 268056
IP address blocks: 45.168.90.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:61:6f:26:f1:11:d9:11:e5:3c:41:ea:8b:36:80:6a:6d:36:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AABCA739AD2EC3C35CC470A886CE5C2C87353AFF
Validity
Not Before: Apr 4 03:36:12 2024 GMT
Not After : Apr 3 03:41:12 2025 GMT
Subject: CN=73ECC40C50D08F6AD9C198293CAD0A6B0C12FDE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:5d:80:c5:86:98:ed:84:24:ec:12:42:40:
cf:09:90:a7:92:9c:9f:a5:df:ab:c8:f3:f0:29:e9:
c6:ad:24:02:14:0f:b2:b9:dd:58:88:85:fe:5b:5f:
b8:c0:87:7c:bb:be:b0:33:f9:a1:63:5c:60:53:b3:
a5:3d:f1:cc:99:c9:58:84:21:f0:fc:d0:92:48:cc:
74:b8:ec:3a:dc:99:3c:ac:e4:2b:f9:3c:2e:89:64:
6e:95:1f:77:d8:c0:fa:d7:e4:3d:62:f5:75:89:66:
cf:3a:ed:87:56:4d:0a:79:b6:c9:28:10:20:34:9d:
db:a4:d1:8d:2c:4b:85:55:e3:9d:7e:b8:d8:88:e7:
67:07:df:ef:8a:98:bc:c9:a2:05:e1:3b:3e:53:04:
4c:d3:c0:c0:fe:ab:f6:1b:96:45:7a:cf:9c:de:8a:
23:32:a5:fc:2e:51:54:e4:e1:7e:a7:1f:c9:22:f5:
7a:b0:b6:25:af:8e:3c:2b:dc:9c:56:81:11:d0:77:
ca:db:b6:2c:f0:c3:31:f4:7c:d6:d2:31:03:aa:82:
45:f5:f7:db:3b:6f:ae:f4:36:cc:93:f4:4c:89:45:
5e:86:66:27:d4:97:19:b8:4e:30:08:39:9b:9c:66:
0f:3a:e7:4d:e2:5e:5a:f4:99:e8:8d:52:89:12:fa:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EC:C4:0C:50:D0:8F:6A:D9:C1:98:29:3C:AD:0A:6B:0C:12:FD:E4
X509v3 Authority Key Identifier:
keyid:AA:BC:A7:39:AD:2E:C3:C3:5C:C4:70:A8:86:CE:5C:2C:87:35:3A:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AABCA739AD2EC3C35CC470A886CE5C2C87353AFF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZqFoCKvXwEiC6Neencz6DwQzJzKnFuQc2QJi47WugFa/1/34352e3136382e39302e302f32332d3233203d3e20323638303536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.90.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:19:18:03:98:a8:3a:5b:2a:d6:29:66:d8:f7:4b:d4:59:1d:
3e:97:c5:de:c8:d7:af:75:c8:3e:49:a2:99:97:b5:21:9b:25:
13:66:ca:83:16:fe:77:6d:47:30:4d:d1:d6:13:e4:fa:9b:dc:
3d:64:c1:70:18:e0:1b:34:e9:e5:d4:05:25:af:b6:72:11:86:
04:af:f6:96:2c:dd:c3:e3:58:de:8c:25:e7:77:da:43:35:ab:
5a:65:fd:2b:0a:d0:fd:2a:23:cf:36:65:7c:bf:6b:18:36:40:
ad:09:95:61:35:1c:03:e3:5d:c5:7c:0e:f8:8d:bf:ff:f5:d0:
1d:07:4a:3e:4a:88:61:09:e0:80:20:2a:54:6b:b1:ee:05:21:
62:ec:0d:e6:9d:bb:f4:27:1b:b0:32:90:a6:a7:fb:06:af:24:
f3:0b:8a:76:11:dc:8f:e0:48:ba:ad:08:48:1f:96:cf:26:8c:
13:f2:4c:70:21:9d:01:b2:fd:9d:7b:c2:fe:5e:7f:15:a4:05:
6a:40:33:d0:79:88:6a:93:72:6a:51:bb:17:f7:4d:2d:58:0f:
20:16:b6:a5:bd:3c:81:53:ec:eb:86:31:0e:8a:6c:42:d9:38:
9e:47:5c:04:e9:b6:f2:ce:92:2e:5d:e4:3f:70:88:d0:1e:73:
50:a2:13:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 9 06:56:01 2024 by rpki-client on console-ams.rpki-client.org