Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa
File: 34352e3233382e38342e302f32322d3234203d3e20323638333239.roa (raw, json)
Hash identifier: wYKqlKJlbROF8cCy150FKlksR99h/lpDeuIEB2DkBIY=
Subject key identifier: 81:9F:8A:29:4E:4F:F9:4C:58:8F:4B:40:9F:04:EA:C5:F5:DE:39:52
Certificate issuer: /CN=EE85037D3580A407793B86B1161445493E825B07
Certificate serial: 45A6CE083C77031BD9B04F223370DBB514CACA89
Authority key identifier: EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa
Signing time: Tue 06 Aug 2024 20:46:23 +0000
ROA not before: Tue 06 Aug 2024 20:41:23 +0000
ROA not after: Tue 05 Aug 2025 20:46:23 +0000
asID: 268329
IP address blocks: 45.238.84.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:a6:ce:08:3c:77:03:1b:d9:b0:4f:22:33:70:db:b5:14:ca:ca:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE85037D3580A407793B86B1161445493E825B07
Validity
Not Before: Aug 6 20:41:23 2024 GMT
Not After : Aug 5 20:46:23 2025 GMT
Subject: CN=819F8A294E4FF94C588F4B409F04EAC5F5DE3952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:de:d0:3b:4b:b5:93:07:80:97:60:57:c0:2e:
bf:68:2b:ca:7d:31:c2:3b:53:6b:96:ef:9a:07:f9:
42:32:29:04:b6:be:0d:c1:eb:cf:57:01:be:dc:b4:
c1:8c:8b:09:99:7c:02:b8:57:32:97:11:6e:20:68:
14:e9:8e:b2:eb:05:1e:40:2b:82:7d:ea:43:c8:31:
39:9b:79:57:d2:7c:8a:c5:a8:1c:c8:a6:61:22:36:
a0:8f:a0:25:ae:e7:ff:b7:d4:43:8f:4b:d7:f1:e4:
3d:4f:7d:8a:c1:18:07:8c:a9:5f:2a:a6:95:3a:48:
0f:2d:a5:99:59:dc:20:59:e0:fb:58:27:d2:35:4f:
25:ab:a4:9a:3d:8a:9c:b1:e8:61:5e:0c:33:a5:d0:
88:10:0f:1a:18:39:c7:ab:77:b4:52:7a:98:77:ea:
55:5d:30:6f:a6:bf:e8:15:d9:b1:d6:1b:b9:81:3f:
9a:ff:5d:1d:5a:b7:e1:2a:d2:60:49:5a:1c:a0:47:
ef:c3:00:92:35:d7:e0:ed:3d:3f:e8:bc:01:10:4d:
8d:1a:5e:cf:48:f7:50:a8:8f:88:26:01:4c:23:13:
87:89:b8:e1:5e:6f:c8:43:4d:bc:30:ce:72:d5:df:
fd:ea:7d:bb:09:6c:b8:3b:8b:d7:44:00:05:02:3b:
aa:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9F:8A:29:4E:4F:F9:4C:58:8F:4B:40:9F:04:EA:C5:F5:DE:39:52
X509v3 Authority Key Identifier:
keyid:EE:85:03:7D:35:80:A4:07:79:3B:86:B1:16:14:45:49:3E:82:5B:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/EE85037D3580A407793B86B1161445493E825B07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EE85037D3580A407793B86B1161445493E825B07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J12As4Yj3bhaGzF8Cxbb7y19K1EVtTmqLYdtN6J6EU3G/0/34352e3233382e38342e302f32322d3234203d3e20323638333239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:82:07:1c:37:85:d4:be:8f:8e:0c:63:7f:52:6e:9e:e8:6e:
9e:99:51:15:94:be:02:81:8a:55:b9:6d:71:63:64:7f:73:16:
ac:78:2a:90:e6:a8:30:c3:7a:64:ed:d6:4e:c3:8b:26:6d:d0:
f3:9c:f6:d6:2b:bf:ef:4d:f9:e3:d7:03:d1:40:2f:a9:a9:70:
45:de:cf:96:cc:05:33:b7:ec:5b:11:5d:b2:95:71:23:52:af:
27:9c:94:71:14:d5:34:df:32:c3:c9:36:b8:3c:de:2c:f1:3d:
e5:ff:f2:7c:ad:af:b7:a3:d5:9e:47:a4:96:b6:61:a9:76:23:
91:15:51:fa:48:9b:28:ef:96:f3:bd:f1:5e:b5:81:91:dc:5a:
10:fd:b4:45:87:86:32:37:08:1b:9e:20:8b:83:bb:df:cd:93:
cf:ad:d0:f5:5c:5c:a2:2c:8d:70:46:81:4e:04:36:80:00:bf:
f4:22:bf:d4:eb:e6:f5:be:38:46:d3:bc:b6:ac:8a:0a:79:c0:
fb:d4:da:83:94:ba:ee:2a:9a:25:7d:44:84:47:62:09:e6:7e:
0c:af:9e:7b:21:c6:92:36:53:ed:23:5a:a9:8f:c7:8d:a0:28:
c8:2e:f2:b0:ad:dd:66:ae:d8:ee:49:80:33:c4:e6:de:bd:be:
c7:9e:7b:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 19:45:56 2024 by rpki-client on console-ams.rpki-client.org