Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32322d3232203d3e20323639303936.roa
File: 34352e3138352e3132302e302f32322d3232203d3e20323639303936.roa (raw, json)
Hash identifier: X/N+gHiFwrk9W5x3ry2GjsrmU369NTfOz56vt1gOXcs=
Subject key identifier: A8:70:E5:59:3E:F6:02:2F:21:C1:DC:A0:19:B9:7A:59:9A:52:B8:CC
Certificate issuer: /CN=D6A968B39492328F164F1853391297FB9752272A
Certificate serial: 3B8AEA399964785A30C1DF82D3086F140DE54DC2
Authority key identifier: D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32322d3232203d3e20323639303936.roa
Signing time: Mon 29 Jul 2024 15:52:43 +0000
ROA not before: Mon 29 Jul 2024 15:47:43 +0000
ROA not after: Mon 28 Jul 2025 15:52:43 +0000
asID: 269096
IP address blocks: 45.185.120.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:8a:ea:39:99:64:78:5a:30:c1:df:82:d3:08:6f:14:0d:e5:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D6A968B39492328F164F1853391297FB9752272A
Validity
Not Before: Jul 29 15:47:43 2024 GMT
Not After : Jul 28 15:52:43 2025 GMT
Subject: CN=A870E5593EF6022F21C1DCA019B97A599A52B8CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:34:70:bd:a7:a5:a7:bb:8f:96:72:2c:ae:84:
97:a8:92:d3:e5:16:96:07:c9:01:5c:b1:93:07:ed:
91:2f:0e:35:9d:e2:8e:6a:bb:2d:16:08:20:47:93:
77:f1:84:16:3f:42:0d:af:f2:0f:14:64:fe:c2:5b:
f0:88:b7:ab:27:1b:c0:57:c5:87:bb:a3:6d:cb:cd:
4b:1d:89:a0:73:09:f0:ce:af:86:07:e0:5b:4f:6c:
28:19:67:16:d3:61:f4:98:c5:1c:cf:d8:88:77:d6:
11:1b:44:d2:f2:43:b5:e0:82:3d:75:64:33:32:5b:
37:d8:ce:84:c4:ee:9e:50:56:4e:3c:a7:bb:60:39:
c6:4c:24:a0:ea:81:88:bb:54:4f:2a:00:1e:65:ec:
5b:a6:35:b9:b5:c4:9a:23:a7:16:09:61:3c:4c:ba:
5f:b5:73:66:2a:3d:33:69:0f:ff:20:a9:65:1e:10:
cd:c0:28:44:ab:20:7e:dd:10:67:fe:88:b5:1e:87:
93:57:66:fe:26:83:71:21:b6:1a:84:7b:78:14:a0:
3d:6b:41:49:c1:30:2d:42:c7:22:eb:01:fe:03:b6:
21:6d:e4:0f:6b:5b:41:15:33:05:bf:94:87:fd:61:
21:93:0d:05:15:6a:8c:dd:8d:03:21:3d:c5:ba:03:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:70:E5:59:3E:F6:02:2F:21:C1:DC:A0:19:B9:7A:59:9A:52:B8:CC
X509v3 Authority Key Identifier:
keyid:D6:A9:68:B3:94:92:32:8F:16:4F:18:53:39:12:97:FB:97:52:27:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/D6A968B39492328F164F1853391297FB9752272A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D6A968B39492328F164F1853391297FB9752272A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32322d3232203d3e20323639303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.120.0/22
Signature Algorithm: sha256WithRSAEncryption
94:e2:67:3c:dd:32:99:4b:f8:5a:bc:c4:1a:d4:72:0d:92:81:
ef:d0:b3:e4:8f:b5:c8:57:83:7f:a6:a6:1e:6c:bb:1f:44:f8:
07:87:03:ad:28:e2:b0:20:f5:51:09:9e:46:c2:3e:41:f9:46:
6c:36:b0:7c:9a:40:a1:ac:89:37:1a:ef:b1:e6:8e:91:be:c7:
0a:fe:5d:02:8a:50:d0:49:9f:1d:52:bf:1d:1c:8e:4b:f0:bc:
df:5a:37:dc:77:7a:3d:8b:96:ba:20:cc:4e:8f:80:25:b0:68:
79:52:bc:fe:15:bb:fc:a6:d3:40:22:fa:74:72:19:b8:d9:75:
fa:e3:bf:15:1b:20:6c:7c:9e:3a:c8:95:3d:21:a1:e3:1a:e7:
fd:f5:19:ac:36:3c:f7:f3:bf:19:ed:25:a3:49:7f:c0:4e:3b:
28:57:cc:9c:2a:02:06:48:ba:72:70:92:35:12:2f:6d:5a:f6:
2d:eb:1e:de:40:40:5e:74:2c:24:09:f7:74:2f:41:85:58:b7:
01:a8:94:33:a1:43:b8:31:d9:25:82:46:89:ce:ea:54:95:32:
64:3b:bc:d9:d5:57:72:10:d9:48:82:9a:fe:d9:25:6c:72:cc:
37:55:68:7f:99:59:66:34:9e:d4:e1:8f:30:8a:37:93:60:8e:
c5:1c:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 17 15:32:57 2024 by rpki-client on console-ams.rpki-client.org