Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267404.roa
File: AS267404.roa (raw, json)
Hash identifier: 8R5IKCKklYpK0sTpSMVNEuuymcq0G1kLen5HQOqOpUE=
Subject key identifier: 92:38:22:A5:C7:E1:0B:3A:7E:E4:D6:0E:5F:3D:89:48:34:EE:FA:46
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 419C4A700FB2A4F4988C6BE157E9159A7E8702E9
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267404.roa
Signing time: Fri 03 May 2024 22:02:14 +0000
ROA not before: Fri 03 May 2024 21:57:14 +0000
ROA not after: Fri 02 May 2025 22:02:14 +0000
asID: 267404
IP address blocks: 45.234.240.0/22 maxlen: 24
2804:4cf8::/32 maxlen: 48
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:9c:4a:70:0f:b2:a4:f4:98:8c:6b:e1:57:e9:15:9a:7e:87:02:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:57:14 2024 GMT
Not After : May 2 22:02:14 2025 GMT
Subject: CN=923822A5C7E10B3A7EE4D60E5F3D894834EEFA46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2e:4a:42:43:63:7d:4d:f5:46:96:fa:7c:66:
00:7d:03:d9:9a:3e:2b:49:0f:0e:73:bb:ff:d2:02:
03:fa:bf:0b:a1:a6:a3:cb:d5:2b:3d:9b:27:f7:22:
68:84:0c:5e:78:d1:99:3c:18:ef:4d:19:ba:c4:de:
32:90:bc:d2:5a:0a:bb:20:cf:4d:b3:31:25:d0:8c:
6d:32:d6:22:72:21:d1:25:cc:eb:62:ca:61:17:10:
b3:ab:a5:02:d8:04:ff:b9:4a:a6:93:34:84:b0:7e:
e1:13:7a:33:9d:d0:b8:90:0e:3b:83:7e:fc:4b:25:
e8:ca:b5:a8:e0:08:6b:60:3e:42:b1:61:e4:0d:52:
3e:8f:a0:83:c2:46:c7:f1:8a:99:9b:c1:64:b2:19:
6f:d2:1a:38:17:65:28:45:a6:c7:3c:3d:af:d7:28:
27:85:15:a0:73:94:d8:0d:e1:94:99:38:08:c0:a1:
7f:27:07:4d:1e:d5:44:8d:79:55:4f:c0:ce:5b:79:
a0:ec:af:1c:a8:8c:20:5b:df:40:ff:ed:4c:cf:ba:
73:11:70:c4:30:33:95:8d:ca:67:bc:87:71:aa:dd:
fe:1a:62:55:84:30:84:17:04:57:68:1e:d3:13:cc:
c9:f5:91:9f:c1:ee:02:fd:84:14:52:9c:f3:14:68:
31:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:38:22:A5:C7:E1:0B:3A:7E:E4:D6:0E:5F:3D:89:48:34:EE:FA:46
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/AS267404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.240.0/22
IPv6:
2804:4cf8::/32
Signature Algorithm: sha256WithRSAEncryption
16:4f:51:14:e4:18:04:10:81:e6:86:a5:74:ee:f3:fa:f3:aa:
ac:e2:3b:99:ae:78:bf:d6:50:0a:ee:8c:9d:f0:6d:95:fe:14:
8d:35:a7:10:52:47:ba:35:17:05:e6:6e:75:20:b7:56:70:de:
88:e2:96:38:2e:da:18:c0:18:e2:7d:3b:a6:c5:98:24:f7:73:
5b:0b:09:aa:2f:62:78:aa:0d:08:52:e7:a7:1c:67:c1:29:33:
33:80:de:9d:2e:dc:85:ac:3a:50:8c:27:b9:46:fd:5c:87:24:
70:3c:61:14:76:25:c3:1d:66:56:35:99:e3:65:40:06:07:8c:
6b:ae:61:3c:56:4f:e1:4e:d1:93:00:81:9b:6b:e0:2e:f3:6e:
17:e5:40:01:cf:fb:a4:ba:6c:ff:df:00:27:81:12:85:1c:2a:
a3:2f:c1:87:02:15:13:61:fe:60:1f:9f:cc:3d:13:32:cb:6a:
ec:27:2f:56:34:ff:a4:c9:6c:82:77:ae:63:3f:78:1e:e3:46:
c4:6b:c2:28:62:9b:8f:bf:9e:44:3e:e6:9d:48:d4:e3:93:0f:
bf:da:36:f4:28:3c:c5:25:1e:02:a2:f3:9e:b8:d6:d8:48:72:
fb:cf:5a:7e:07:80:69:35:5b:63:b0:c8:31:32:bf:58:03:18:
9a:11:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 18:38:21 2024 by rpki-client on console.sobornost.net