Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
File: 34352e3136382e31322e302f32332d3233203d3e20323638303335.roa (raw, json)
Hash identifier: wD84RS46nLLLegVb/GfW+RZCpNYM6fTrGr7kCNx7DQo=
Subject key identifier: C0:D4:37:10:8B:2E:95:70:9F:FA:6D:90:1E:02:38:BE:B5:22:9E:EB
Certificate issuer: /CN=15D66C82385E07A46724C3074293F737D556F1B3
Certificate serial: 2A98A9C8B2ECE4E0353A7A4E9376EF1D3C08A158
Authority key identifier: 15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
Signing time: Thu 14 Dec 2023 13:31:30 +0000
ROA not before: Thu 14 Dec 2023 13:26:30 +0000
ROA not after: Thu 12 Dec 2024 13:31:30 +0000
asID: 268035
IP address blocks: 45.168.12.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:98:a9:c8:b2:ec:e4:e0:35:3a:7a:4e:93:76:ef:1d:3c:08:a1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15D66C82385E07A46724C3074293F737D556F1B3
Validity
Not Before: Dec 14 13:26:30 2023 GMT
Not After : Dec 12 13:31:30 2024 GMT
Subject: CN=C0D437108B2E95709FFA6D901E0238BEB5229EEB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4a:01:22:4d:60:39:d6:af:2e:35:03:0b:2a:
eb:6b:6a:38:94:1d:fc:72:1a:95:a0:d0:fb:1c:bc:
56:3a:12:e1:33:8a:6e:7e:85:9b:a3:8d:e2:c3:08:
47:b2:09:6e:78:12:b5:76:9f:e4:01:8a:f1:f2:8b:
88:39:e1:c5:9c:dd:35:4f:7c:0f:0f:3d:7a:8d:c5:
2f:66:94:b3:61:e3:00:15:43:22:31:cf:ec:ef:46:
f6:f2:8c:12:be:56:68:6d:ef:6a:c0:a3:c9:1d:2e:
24:16:4f:88:b7:de:d7:23:26:f6:99:d5:7b:cd:74:
4f:7c:1c:aa:ed:3d:28:ea:02:35:a5:bc:36:a6:c9:
b7:4e:ba:37:1d:b8:54:07:24:2f:b0:e1:4b:60:70:
50:05:71:c4:19:02:1f:a8:40:55:bc:6c:f8:d6:24:
95:39:25:e9:93:05:73:e6:c9:35:82:d9:c7:88:19:
39:10:f6:f3:5e:dd:c8:5e:db:42:f4:5f:fa:37:46:
a0:f6:b9:57:97:dd:d0:22:1e:35:0b:70:ff:55:b2:
c9:d8:b1:8b:21:6c:bf:c1:42:ec:61:55:35:f4:42:
46:e3:54:ae:ac:a8:aa:24:a1:16:56:e5:b7:6d:5c:
3e:47:da:fc:72:45:81:5b:ef:4c:f3:47:30:e5:28:
24:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D4:37:10:8B:2E:95:70:9F:FA:6D:90:1E:02:38:BE:B5:22:9E:EB
X509v3 Authority Key Identifier:
keyid:15:D6:6C:82:38:5E:07:A4:67:24:C3:07:42:93:F7:37:D5:56:F1:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/15D66C82385E07A46724C3074293F737D556F1B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/15D66C82385E07A46724C3074293F737D556F1B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/0/34352e3136382e31322e302f32332d3233203d3e20323638303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.12.0/23
Signature Algorithm: sha256WithRSAEncryption
14:74:74:07:84:d4:16:46:fe:36:85:49:75:d3:ad:78:22:d4:
be:b2:e8:a6:20:78:4a:0d:f9:af:57:b8:ce:c7:af:83:1a:cb:
cb:7c:0a:ef:38:fb:57:57:1d:f5:c9:34:c6:2c:f2:f3:be:d6:
6f:30:03:64:ff:08:7a:19:18:12:9e:ce:fa:22:ba:8d:7e:05:
61:de:4f:cf:f2:de:a0:24:f3:bb:8a:63:bd:45:8d:8f:10:2f:
b7:74:f6:84:82:1d:13:74:c6:79:69:ad:3d:3c:2d:45:00:63:
55:ae:7f:f1:d0:af:df:b2:6f:6f:28:57:b9:f0:f6:8c:d1:c6:
8a:44:57:72:6f:c6:aa:69:2e:8e:f1:07:23:a0:82:78:a4:4f:
f1:d5:e1:36:d4:0b:fd:83:23:f2:09:4a:c8:60:05:b5:e9:91:
4f:32:8f:60:68:40:c2:5e:de:40:9d:ca:f8:f8:e3:0c:2f:3c:
dd:27:34:a2:0a:f3:03:32:82:f1:9c:07:06:da:79:76:3b:7a:
2a:4b:d5:78:0e:d0:2a:b5:9e:49:7b:a3:76:e1:c9:7f:54:08:
1d:aa:33:8a:c3:ef:ab:be:d2:f2:43:0b:4f:3f:30:cc:b9:2a:
64:eb:cb:87:0a:06:ef:bf:32:cb:05:e6:09:0d:49:cb:cb:94:
7e:39:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 13 00:15:56 2024 by rpki-client on console-fra.rpki-client.org