Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32322d3232203d3e20323632353639.roa
File: 34352e3136372e36302e302f32322d3232203d3e20323632353639.roa (raw, json)
Hash identifier: 27RxL7wNQDJ8jOZs6jCGqbnuuDUAJVZuK5ixWBAvgXg=
Subject key identifier: 0E:4D:70:3D:9D:E2:08:AB:19:E3:26:2F:55:D4:C9:4A:C6:57:2B:D9
Certificate issuer: /CN=22191C91C699626F1DF3C3B76D44F235C4976110
Certificate serial: 7FCF75014864EEE851EFE54A4820D45083BD1AA6
Authority key identifier: 22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32322d3232203d3e20323632353639.roa
Signing time: Thu 27 Jun 2024 14:30:43 +0000
ROA not before: Thu 27 Jun 2024 14:25:43 +0000
ROA not after: Thu 26 Jun 2025 14:30:43 +0000
asID: 262569
IP address blocks: 45.167.60.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:cf:75:01:48:64:ee:e8:51:ef:e5:4a:48:20:d4:50:83:bd:1a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22191C91C699626F1DF3C3B76D44F235C4976110
Validity
Not Before: Jun 27 14:25:43 2024 GMT
Not After : Jun 26 14:30:43 2025 GMT
Subject: CN=0E4D703D9DE208AB19E3262F55D4C94AC6572BD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:8c:de:cd:5c:65:37:1b:53:29:1a:e8:3d:
4a:3f:14:05:4b:c7:4a:64:5b:f5:71:72:73:c6:96:
53:0d:9f:0d:68:c0:39:bc:4e:94:2d:2b:ee:aa:e2:
34:73:b2:93:5f:a7:54:9c:21:11:78:7f:8f:33:24:
87:4a:42:03:4d:70:7c:27:62:37:1e:2a:68:a6:64:
6b:b1:56:d3:a8:64:2f:b0:9b:26:5f:82:0c:7f:36:
48:5c:95:ae:17:2e:06:d4:cd:9f:d7:aa:c9:af:f9:
ce:8d:c9:76:59:bd:ff:00:d3:e2:fc:63:1e:4b:e9:
98:06:52:53:35:3a:fe:6f:c1:59:8a:0e:3f:85:1e:
c7:e8:b1:a6:51:2f:25:e6:2b:b0:04:be:62:aa:18:
23:52:9b:d8:c7:90:20:a2:2c:fa:50:d6:bb:74:76:
c7:b9:1c:9f:71:cf:82:bd:e5:91:3b:8a:03:68:7b:
59:3e:a4:37:66:da:e6:b5:36:95:89:76:33:b9:93:
6a:6b:94:11:85:1d:1b:95:54:08:3a:84:aa:a1:09:
6a:35:1b:3f:6a:d0:51:77:d2:b1:12:c1:89:bd:62:
ac:d9:41:8e:ef:15:65:7f:95:19:2e:fe:21:5c:40:
ae:16:59:70:de:98:a5:6c:29:96:0f:d7:4a:04:ea:
0e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:4D:70:3D:9D:E2:08:AB:19:E3:26:2F:55:D4:C9:4A:C6:57:2B:D9
X509v3 Authority Key Identifier:
keyid:22:19:1C:91:C6:99:62:6F:1D:F3:C3:B7:6D:44:F2:35:C4:97:61:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/22191C91C699626F1DF3C3B76D44F235C4976110.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22191C91C699626F1DF3C3B76D44F235C4976110.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/1/34352e3136372e36302e302f32322d3232203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.60.0/22
Signature Algorithm: sha256WithRSAEncryption
01:fe:e6:ed:e4:8a:02:27:83:bf:1c:80:d4:35:84:a7:7d:2e:
b9:f4:f6:64:0c:3b:4c:63:89:3f:da:f0:59:d5:d9:2a:6d:c6:
8a:b0:e4:cf:ac:79:45:6a:4f:54:c3:0a:b9:09:1f:f3:7e:25:
39:e9:e6:6d:13:74:07:47:75:90:36:39:14:e4:e7:d5:ae:d9:
ec:00:df:45:dd:18:0e:45:5d:a5:1e:de:ac:97:93:f9:9e:d0:
2d:ab:8d:92:39:1c:b3:07:fe:c7:0d:63:9d:d7:63:54:3b:a5:
97:fa:e5:c3:b7:88:0b:2c:01:bb:3e:2d:79:65:41:09:17:d0:
06:bc:b2:96:73:5a:15:e5:65:36:8b:c6:be:5b:01:80:7f:90:
5f:99:54:62:ca:61:c6:15:80:f6:1e:35:97:c0:6b:31:47:ce:
56:0a:88:73:f5:00:ac:01:71:19:22:40:fd:29:bf:8b:c0:de:
fd:5a:a7:d2:5d:72:ae:c0:6c:c2:f2:90:cd:ab:dd:4e:ba:5b:
fa:31:f0:34:5b:21:78:e1:d3:4c:08:7f:b7:64:f9:7a:ed:dd:
f4:17:1f:ca:0a:5e:eb:be:34:35:17:2a:46:d7:f9:6b:cf:55:
9f:8b:d9:ea:8c:7a:21:15:be:91:95:59:31:e6:56:4a:07:e1:
09:f8:be:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 23 12:25:24 2024 by rpki-client on console-ams.rpki-client.org