Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
File: 34352e3233362e392e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier: k5Gk9Ttj/zNIrVG8dk+SJ1yUHc03vfDBcnBjRKDY7z4=
Subject key identifier: 1C:7D:83:8F:E0:2C:A6:F7:DA:29:AC:CB:A5:03:84:56:14:BC:A5:0D
Certificate issuer: /CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
Certificate serial: 7246100F678E09F2BE25B0A3F5927648C935BA68
Authority key identifier: BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
Signing time: Fri 30 Aug 2024 19:52:38 +0000
ROA not before: Fri 30 Aug 2024 19:47:38 +0000
ROA not after: Fri 29 Aug 2025 19:52:38 +0000
asID: 268213
IP address blocks: 45.236.9.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:46:10:0f:67:8e:09:f2:be:25:b0:a3:f5:92:76:48:c9:35:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
Validity
Not Before: Aug 30 19:47:38 2024 GMT
Not After : Aug 29 19:52:38 2025 GMT
Subject: CN=1C7D838FE02CA6F7DA29ACCBA503845614BCA50D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6c:d0:6a:69:8b:e2:1b:de:4f:ba:c2:55:42:
0b:37:fd:f8:9f:b3:ca:cb:1a:21:2c:e9:26:fc:a3:
13:34:2a:e1:44:6b:f9:0a:32:5b:4c:52:9f:a1:78:
15:5e:52:1d:25:c5:4e:31:b9:fd:d0:02:96:fc:67:
3b:41:34:63:22:30:8c:b1:a2:09:9c:fa:b4:61:2d:
36:8a:b1:da:0e:83:35:75:cb:84:d8:45:79:86:17:
19:d1:60:a3:5b:88:58:94:1c:98:b5:0a:33:37:d9:
73:82:84:4f:37:64:0b:97:41:0d:82:33:fa:46:7a:
5e:86:87:10:f0:dc:eb:9f:39:92:9c:86:d5:fb:dd:
14:03:33:50:23:e9:f3:89:c0:ad:c5:4d:0c:a5:32:
67:0f:bb:cf:7a:1f:55:42:6f:5e:1e:26:01:60:c1:
0d:a5:21:59:f8:ba:6c:58:07:6c:19:d2:03:73:81:
45:15:c2:be:69:3a:ce:5b:90:cb:34:63:4c:a2:c6:
b2:18:b6:dd:90:a4:bf:d9:68:17:19:3b:d8:83:d0:
d2:89:da:b2:24:b3:b2:ad:71:55:91:ca:79:48:d9:
fd:a6:ae:bf:1a:e4:22:35:68:4a:2d:ed:16:d6:a7:
41:76:46:1e:39:58:23:dd:5c:36:61:b4:d6:f4:69:
89:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:83:8F:E0:2C:A6:F7:DA:29:AC:CB:A5:03:84:56:14:BC:A5:0D
X509v3 Authority Key Identifier:
keyid:BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e392e302f32342d3234203d3e20323638323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.9.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:56:61:72:21:60:55:45:a6:69:b5:b6:08:fc:11:bf:57:43:
b3:fa:a4:b8:52:e8:b0:41:68:e0:e0:a8:0a:ed:56:f6:07:1d:
b4:e8:b4:7d:8b:1c:fa:dd:eb:a7:78:74:88:67:66:7b:1e:91:
a8:9f:e3:10:f2:6a:99:39:0d:e8:19:87:86:ef:23:8c:67:60:
d4:35:49:25:e4:76:8c:70:ae:a0:9a:c1:4e:45:f6:6a:8d:99:
ef:78:ea:75:1b:f9:7d:35:9a:9a:b9:a5:2d:a3:f1:37:26:f2:
55:70:64:c9:ab:42:94:22:86:ce:80:b0:43:e5:37:4d:ca:09:
bf:f8:b5:a9:01:0b:c9:8a:33:77:09:e5:9f:c3:30:30:9f:4d:
ad:f0:95:e9:8e:ab:bf:ad:89:67:26:2b:4f:77:c5:7c:a0:d8:
45:d9:3a:4c:ab:26:ce:be:4d:89:e0:b8:53:1c:f3:6d:df:41:
56:76:a6:38:15:3a:14:86:78:63:c3:ae:2b:02:25:7f:e5:29:
62:84:94:b9:4c:7c:c4:71:07:9d:a4:d2:84:e7:13:a5:49:aa:
4b:bc:c0:3c:23:39:b8:d0:6d:e4:08:55:df:88:81:b8:b3:18:
44:ad:f3:14:26:49:a0:af:e7:67:3a:e4:a0:90:f8:cd:54:de:
90:1b:9c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 12:51:51 2024 by rpki-client on console-fra.rpki-client.org