Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32342d3234203d3e20323639343536.roa
File: 34352e3138372e35322e302f32342d3234203d3e20323639343536.roa (raw, json)
Hash identifier: WKpHGzgHy+4i2Buw994lz7Oc/kqKFQcqJIbEktfRaJg=
Subject key identifier: 57:8A:0F:C3:2A:3C:48:84:62:BF:2A:DD:49:CB:E9:7D:8D:2F:F9:4C
Certificate issuer: /CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Certificate serial: 345FA02A1954248490029BA16B947A31B0482060
Authority key identifier: 4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32342d3234203d3e20323639343536.roa
Signing time: Tue 26 Dec 2023 15:29:11 +0000
ROA not before: Tue 26 Dec 2023 15:24:11 +0000
ROA not after: Tue 24 Dec 2024 15:29:11 +0000
asID: 269456
IP address blocks: 45.187.52.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5f:a0:2a:19:54:24:84:90:02:9b:a1:6b:94:7a:31:b0:48:20:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Validity
Not Before: Dec 26 15:24:11 2023 GMT
Not After : Dec 24 15:29:11 2024 GMT
Subject: CN=578A0FC32A3C488462BF2ADD49CBE97D8D2FF94C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:6a:ec:21:05:d9:fe:01:e6:98:68:73:d9:
7d:46:95:2c:cd:08:8a:7e:a3:cb:3b:c2:5c:3f:6e:
6a:5e:87:76:89:39:86:d8:50:f8:93:a0:85:f3:9f:
f6:ed:23:1b:0b:73:75:53:76:67:ca:77:18:12:79:
ff:34:df:dc:d7:59:30:e2:6c:e0:f8:91:96:1e:7d:
a4:e4:2e:f8:48:60:00:ca:36:87:af:27:76:59:14:
03:ea:6f:d4:9f:a8:bf:2e:4b:55:2c:d3:d6:23:76:
e0:9a:b5:e6:7f:e1:91:1b:0e:dd:27:3d:dc:26:a1:
35:d1:2d:c8:fa:da:33:ac:c6:07:43:ef:b6:3b:43:
28:6a:c6:75:e3:20:7b:29:1a:fb:e3:b5:85:79:6c:
6e:c6:a0:8f:49:98:b6:21:8e:7f:9c:bc:13:4b:4a:
44:5e:15:b4:1e:bb:9e:f2:6e:6a:13:d6:bd:1b:02:
99:4b:50:e8:70:1a:a3:b6:3a:ff:b7:d2:35:42:90:
69:3d:92:43:2e:cb:d7:94:d9:18:6c:f3:dc:19:7c:
da:57:12:71:de:78:8b:e8:3c:46:f1:9e:1d:02:c0:
10:d7:53:ac:77:2c:32:71:37:14:48:b0:d9:f5:09:
59:ee:35:93:ac:92:43:ef:84:93:96:a4:b6:db:47:
6f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:0F:C3:2A:3C:48:84:62:BF:2A:DD:49:CB:E9:7D:8D:2F:F9:4C
X509v3 Authority Key Identifier:
keyid:4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35322e302f32342d3234203d3e20323639343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:40:3a:35:1f:1e:d1:7e:b6:e1:59:d3:3a:06:d1:22:91:40:
0a:84:89:79:aa:63:2f:dd:9c:6b:50:a8:b4:ea:50:c5:26:b3:
ca:7c:4f:ac:cb:13:44:b4:f7:95:00:ab:d8:b4:58:4d:38:81:
7f:ec:06:5d:dd:a7:a0:85:bf:82:41:d2:24:51:e6:f7:54:3e:
90:e0:86:70:ee:0a:15:09:c3:55:29:5a:8c:c3:e5:c2:25:07:
68:41:d3:56:2b:24:6e:7f:9e:0c:a1:6c:d1:49:8b:63:9a:1b:
50:11:07:b0:70:f4:eb:df:b6:e4:66:9f:c9:0a:ce:33:a7:46:
db:e2:c9:62:4f:4d:b6:f6:ad:14:f0:b9:eb:8d:f8:74:31:5f:
3b:46:21:30:05:4b:93:1f:99:31:60:ab:dd:87:57:32:db:77:
52:f9:64:fa:69:e2:d9:3d:36:8a:27:66:98:66:3a:da:36:65:
8f:2e:19:a0:01:f7:eb:b7:e1:63:c2:b0:c1:02:c7:8e:a6:cd:
87:8d:28:08:ce:fa:70:76:0b:90:70:37:60:db:86:7d:fa:0f:
1a:ce:90:44:28:2e:d9:8f:24:f5:2b:9f:16:a9:1a:d7:a6:35:
dd:25:39:fe:e0:1d:82:82:a6:1b:c7:86:a7:f5:c2:d1:d6:94:
a4:87:10:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 21 00:56:48 2024 by rpki-client on console-ams.rpki-client.org