Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa
File: 34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier: W9VANG8oVu19Ay/N2JK3rl7wpOfDTkbESj/NV7VFQhY=
Subject key identifier: A5:16:98:87:C1:A5:2C:F4:F4:7E:DA:61:B5:7F:F7:B1:93:62:F5:F5
Certificate issuer: /CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Certificate serial: 5ED186D570D002CE6ACBACAEE6C4603E6CA8E85A
Authority key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa
Signing time: Mon 06 Jan 2025 18:53:58 +0000
ROA not before: Mon 06 Jan 2025 18:48:58 +0000
ROA not after: Mon 05 Jan 2026 18:53:58 +0000
asID: 267059
IP address blocks: 45.228.111.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:d1:86:d5:70:d0:02:ce:6a:cb:ac:ae:e6:c4:60:3e:6c:a8:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Validity
Not Before: Jan 6 18:48:58 2025 GMT
Not After : Jan 5 18:53:58 2026 GMT
Subject: CN=A5169887C1A52CF4F47EDA61B57FF7B19362F5F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:07:cc:d0:58:30:ea:3e:0b:c9:4f:3a:94:
af:f2:c9:19:92:a0:cf:ad:01:d7:e8:f6:7c:9e:65:
13:20:c9:1d:9e:b3:7b:cf:09:9d:1b:a8:ba:9d:3b:
96:a3:09:14:61:b4:d2:e4:d0:83:ef:2f:26:8f:5d:
c0:9b:c0:8e:a4:f6:23:91:13:4a:46:98:fb:c0:7c:
92:9e:91:f8:a5:7c:78:a9:8e:fd:22:65:65:0d:1b:
bd:f9:12:70:99:2c:99:03:5f:41:cc:ea:db:44:4a:
1a:bf:ae:1d:eb:85:34:7a:cf:9a:88:61:6d:8a:5d:
c1:12:f5:90:5a:21:58:d8:88:08:37:ef:ef:81:56:
45:ad:18:75:e8:7d:15:85:aa:a0:17:42:42:fb:d3:
54:eb:31:17:24:c6:28:46:93:7c:0b:ad:b1:a7:3b:
4a:a0:ab:a5:b2:a6:26:04:07:95:1f:96:9d:ed:36:
0a:ef:a0:2c:1c:b0:94:c3:bf:6d:77:7e:ae:6b:c7:
7d:0b:61:65:66:ef:e1:74:68:bf:a7:ee:98:0d:92:
e9:03:56:9c:c0:94:bf:0b:dc:c2:29:ea:d4:fb:c9:
7e:ce:0f:c3:3d:c0:ab:c6:e4:eb:7f:be:16:9f:45:
73:88:49:aa:e5:02:e8:75:27:7e:a8:62:bd:1e:cf:
3c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:98:87:C1:A5:2C:F4:F4:7E:DA:61:B5:7F:F7:B1:93:62:F5:F5
X509v3 Authority Key Identifier:
keyid:3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131312e302f32342d3234203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.111.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:7c:be:99:a6:31:25:c7:63:d0:89:42:1f:67:95:f7:3c:63:
0c:d5:be:17:be:be:31:82:3e:bd:ef:54:ab:4c:16:59:59:63:
27:9c:4a:89:3d:65:7b:93:5e:eb:79:89:0d:2f:c3:b7:6f:27:
ae:3c:e0:1b:a6:5e:80:6a:34:96:aa:43:49:da:f8:96:6c:ff:
6e:e6:f2:ba:45:fb:96:ce:bf:2e:ca:46:55:67:39:3b:7f:6c:
c0:93:e0:e5:02:69:14:d3:b7:e2:c3:54:55:ea:27:00:84:33:
2d:a8:2e:9f:92:fd:c4:fa:8e:f6:ad:cc:0b:31:c1:f0:e6:1b:
ac:5a:ea:11:57:78:e2:65:41:22:4f:34:b4:a0:52:f1:54:c3:
1b:53:f1:95:45:84:48:15:43:11:e9:ad:2c:cb:88:b5:47:0f:
9c:31:b3:95:b9:32:92:fc:34:a6:81:a4:c5:0a:44:56:29:8e:
86:a9:1c:43:7e:28:17:01:bc:71:6a:57:b6:96:68:cf:c6:f8:
2a:fe:46:dd:5f:e1:1e:6a:30:6e:2d:11:ee:bb:21:2f:03:1c:
d5:fd:85:fd:cb:68:1b:80:1c:e2:82:6b:96:4c:82:42:ed:fe:
49:b4:d1:f0:61:09:63:a6:18:7b:b7:de:24:36:e8:20:a4:ee:
cd:ec:af:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 06:55:53 2025 by rpki-client on console.sobornost.net