Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137332e302f32342d3234203d3e20323632353835.roa
File: 3230312e35352e3137332e302f32342d3234203d3e20323632353835.roa (raw, json)
Hash identifier: ZZIEiJ3IkB/Q3snzteAgB1/5Lqr9UwMjgWV3zx7NkQs=
Subject key identifier: 1E:F0:9B:80:35:78:20:71:FB:08:AE:D8:50:9A:A0:29:29:A2:C5:C0
Certificate issuer: /CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Certificate serial: 5295DECFDCC4BB6DBC0D247D00221B94955DB7
Authority key identifier: 35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137332e302f32342d3234203d3e20323632353835.roa
Signing time: Wed 30 Oct 2024 21:26:48 +0000
ROA not before: Wed 30 Oct 2024 21:21:48 +0000
ROA not after: Wed 29 Oct 2025 21:26:48 +0000
asID: 262585
IP address blocks: 201.55.173.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:95:de:cf:dc:c4:bb:6d:bc:0d:24:7d:00:22:1b:94:95:5d:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293
Validity
Not Before: Oct 30 21:21:48 2024 GMT
Not After : Oct 29 21:26:48 2025 GMT
Subject: CN=1EF09B8035782071FB08AED8509AA02929A2C5C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5f:22:bb:27:25:99:ee:87:93:fc:87:16:19:
99:74:ff:ca:13:58:1f:7a:a8:83:5c:0e:b5:a2:a0:
67:95:40:f8:7a:f0:d2:fe:5a:8a:c7:8d:1f:da:dc:
77:71:8d:6c:b5:89:53:d9:31:1e:4c:1f:ca:80:58:
0c:f1:9f:68:c3:aa:15:fa:ad:cc:60:e7:4c:93:1c:
96:e7:9f:07:9c:e0:02:8e:0f:ee:07:f9:45:5a:38:
9b:a6:03:59:08:6b:c6:d0:4b:58:1e:85:86:62:2c:
61:09:1f:32:2f:0c:71:df:46:e5:fc:0d:e9:06:80:
c8:9c:3a:87:08:6c:3d:dc:1a:1d:f7:78:2f:26:f9:
fe:9f:f1:78:e9:a6:49:93:0c:e1:0e:8e:58:ec:b9:
03:e7:2a:59:08:82:7a:23:f2:d6:39:f8:d9:94:5d:
14:19:ce:54:5f:96:6d:e9:55:7c:d4:fd:3d:2a:2d:
52:dc:09:b5:4c:59:85:04:19:a2:87:74:0f:e7:d1:
9e:6a:3f:0a:a6:3d:62:a5:da:b4:45:5e:30:cf:1e:
60:f7:59:e1:a8:0e:1a:71:48:0a:b0:16:6d:df:b1:
69:8d:1f:17:6d:05:f8:c6:09:bc:83:36:a3:78:b1:
01:80:9d:b0:f4:16:2b:4a:8e:4d:0f:81:57:f5:4b:
d6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:9B:80:35:78:20:71:FB:08:AE:D8:50:9A:A0:29:29:A2:C5:C0
X509v3 Authority Key Identifier:
keyid:35:CD:4F:94:23:C8:5D:CC:F7:A4:1E:D5:B5:9D:FF:CA:B8:FD:32:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/35CD4F9423C85DCCF7A41ED5B59DFFCAB8FD3293.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GmnRc6CPpJLCxGNDe1xArneHzZoD2X2P84MGTvpEkZft/0/3230312e35352e3137332e302f32342d3234203d3e20323632353835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.55.173.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:6c:5c:46:f1:e0:a3:56:95:21:ad:a1:81:57:7b:1f:b9:ad:
7f:05:3d:e6:c3:30:0a:5f:04:7f:cb:11:ba:1b:b3:58:ea:f2:
50:3d:cc:8c:bb:b7:e8:30:ac:9a:90:ad:ae:79:3a:3a:e0:9b:
e7:cf:94:35:35:28:30:ee:42:1a:f5:b3:a0:7d:5c:8e:5e:46:
d9:65:86:d2:df:39:db:6e:a9:bf:59:d1:c7:6e:91:d0:53:76:
24:d8:65:35:85:d2:11:eb:6a:17:ba:aa:bc:7f:65:cc:e2:cf:
d4:6c:50:01:a0:bc:7c:d9:66:cb:8d:75:08:9c:b2:1e:9d:e2:
37:5b:51:2b:f8:3c:19:c8:9b:88:a9:bc:82:e6:18:be:e9:78:
c2:2c:01:4a:2a:49:0e:92:aa:63:6a:dc:2a:d7:19:aa:b5:71:
0a:86:c0:84:af:f5:0f:78:59:2b:06:28:0b:7b:af:21:be:e9:
f8:f1:da:ce:fb:51:59:01:3c:6f:06:25:02:39:ae:ba:84:60:
e9:d4:98:c2:09:ac:d4:71:e6:c9:40:a7:5a:42:0f:c2:b8:1b:
d0:d4:dd:92:a3:96:ac:16:e4:16:93:81:1a:03:51:95:ea:48:
b4:e3:92:ba:4b:72:1e:c3:6b:e4:06:45:f1:08:b5:5e:0d:8e:
8f:7e:80:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 20:02:26 2024 by rpki-client on console-ams.rpki-client.org