Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa
File: 34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa (raw, json)
Hash identifier: 9HCmQmdRVv4PMOt6DVqQLrf/BsANz6L2S2qaHCB2HZk=
Subject key identifier: CA:CB:35:A2:9B:82:55:D1:60:EF:3D:27:24:B4:65:C6:D6:AE:F9:4E
Certificate issuer: /CN=E54A9C7B6751540C380B4080CC3F4CB26ED99480
Certificate serial: 26A9F742CB9161E0E3B10DF91451775D2D33DB91
Authority key identifier: E5:4A:9C:7B:67:51:54:0C:38:0B:40:80:CC:3F:4C:B2:6E:D9:94:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa
Signing time: Mon 21 Oct 2024 17:42:32 +0000
ROA not before: Mon 21 Oct 2024 17:37:32 +0000
ROA not after: Mon 20 Oct 2025 17:42:32 +0000
asID: 267060
IP address blocks: 45.228.114.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a9:f7:42:cb:91:61:e0:e3:b1:0d:f9:14:51:77:5d:2d:33:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E54A9C7B6751540C380B4080CC3F4CB26ED99480
Validity
Not Before: Oct 21 17:37:32 2024 GMT
Not After : Oct 20 17:42:32 2025 GMT
Subject: CN=CACB35A29B8255D160EF3D2724B465C6D6AEF94E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:38:3d:06:1e:cb:c8:02:f2:63:12:3d:55:45:
67:f1:96:8b:e6:b5:91:ff:40:f4:fa:0a:a1:0a:bf:
bb:51:de:01:84:ca:70:57:b2:08:03:57:99:7c:42:
84:bd:15:86:76:74:f0:d7:e0:57:10:fd:b5:c7:96:
dc:f5:d2:32:8b:e4:af:2e:8d:4e:ee:08:58:8d:03:
70:77:b5:9b:6f:cb:22:84:e7:3b:d2:74:47:93:27:
87:de:ba:3a:0d:19:66:93:43:c1:78:35:ba:a8:35:
ce:0e:dd:bf:e7:47:ae:33:59:b5:30:bd:5a:80:85:
28:b6:d7:7f:35:1a:14:6e:69:05:2c:e4:f6:0b:44:
66:c0:32:3b:64:a1:1f:c6:7f:a1:cd:35:ed:40:1d:
af:ff:1c:a3:2a:f9:c1:13:d7:31:8a:bc:28:56:33:
af:ce:d4:0f:8c:89:b8:b1:f4:e9:2a:80:25:8c:cc:
aa:97:13:5d:c2:57:fe:b2:56:c8:86:7d:f5:85:db:
87:69:21:cd:be:0f:e2:8b:c7:18:c5:74:8f:56:ce:
3b:20:05:ff:3f:cb:9b:cb:63:32:d0:fa:e1:ee:b3:
4c:8a:05:aa:15:2f:43:9e:c5:70:95:1f:f9:8f:b9:
03:d1:e4:7d:db:7f:2e:09:42:0b:75:c1:de:29:06:
10:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CB:35:A2:9B:82:55:D1:60:EF:3D:27:24:B4:65:C6:D6:AE:F9:4E
X509v3 Authority Key Identifier:
keyid:E5:4A:9C:7B:67:51:54:0C:38:0B:40:80:CC:3F:4C:B2:6E:D9:94:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/E54A9C7B6751540C380B4080CC3F4CB26ED99480.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E54A9C7B6751540C380B4080CC3F4CB26ED99480.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rKHgZrfV8jJEr11XwNXrMmLtw7GhGLUN1D4uUFhcHjM/0/34352e3232382e3131342e302f32332d3233203d3e20323637303630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.114.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:db:cb:fc:58:27:80:a7:c2:fe:e4:e1:58:9a:47:32:59:e8:
5b:19:29:c9:89:11:8e:06:25:48:5e:dd:66:13:2a:08:6a:d7:
55:87:b4:0d:e2:b8:5b:c2:47:d2:15:24:02:f7:4b:b7:c2:b7:
4d:a6:f1:2e:08:9f:32:f9:00:d1:37:15:e2:3c:ff:9a:ce:6c:
4e:74:14:b1:d7:24:96:0a:c4:eb:2b:fc:67:64:37:8c:fe:05:
37:c4:47:f6:3a:f2:ed:e3:be:89:c6:ff:88:f9:d6:a1:c9:9c:
37:49:9d:c9:af:24:22:8d:b7:fd:2f:58:8b:a6:b2:86:67:ec:
0e:c5:ff:47:ea:35:73:c4:81:fe:ca:80:92:cf:5d:82:1a:b4:
0c:c0:51:4a:0f:97:eb:35:27:43:d1:8e:3a:95:82:86:ef:3b:
55:6e:43:25:b9:1b:ff:fc:d9:76:3a:83:c6:a4:1e:12:0f:84:
ff:0a:ec:b8:3f:ce:fd:b9:17:28:8b:d5:31:72:c6:e5:0d:5c:
39:2e:1d:86:ce:db:e2:73:e3:0d:46:0e:1d:e0:c1:f8:7a:a1:
a8:3f:e8:7c:17:70:c1:7c:c3:ac:3d:b4:15:d1:62:ce:1b:2e:
4c:a1:b1:cc:7a:16:72:b7:07:9e:08:63:af:81:d1:44:04:69:
b4:29:b2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 12 22:16:07 2024 by rpki-client on console.sobornost.net