Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e332e302f32342d3234203d3e20323637333838.roa
File: 34352e372e332e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier: +6DAfucYrgBq0rlyXocET2/umMjBoCP/ThoCxWWMJfE=
Subject key identifier: 70:30:A4:D6:A5:45:64:E1:9E:59:02:B2:45:65:F6:CD:17:6A:9D:4A
Certificate issuer: /CN=33C015248532BCE3959F73092749FDE164934402
Certificate serial: 76D137B3ADF3D4246C97C2736FD1FEEDEECE506B
Authority key identifier: 33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e332e302f32342d3234203d3e20323637333838.roa
Signing time: Mon 13 Nov 2023 19:11:45 +0000
ROA not before: Mon 13 Nov 2023 19:06:45 +0000
ROA not after: Mon 11 Nov 2024 19:11:45 +0000
asID: 267388
IP address blocks: 45.7.3.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d1:37:b3:ad:f3:d4:24:6c:97:c2:73:6f:d1:fe:ed:ee:ce:50:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33C015248532BCE3959F73092749FDE164934402
Validity
Not Before: Nov 13 19:06:45 2023 GMT
Not After : Nov 11 19:11:45 2024 GMT
Subject: CN=7030A4D6A54564E19E5902B24565F6CD176A9D4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:21:c1:88:f5:72:dc:e7:b5:c5:1b:21:d3:
37:78:d8:71:af:75:7b:9d:62:1e:42:62:3d:ad:35:
e5:ab:66:50:03:75:1a:f8:a9:9c:b9:bd:e9:2e:54:
fe:b5:ec:e9:d0:b8:f5:c5:7c:1d:d2:d3:7a:c7:e4:
04:84:54:66:46:e2:1c:24:9e:1e:cd:c8:ad:ce:7e:
08:be:c6:02:20:03:cf:a4:0b:c0:5f:f7:45:87:fd:
3e:d2:ea:7c:29:51:27:71:31:9f:13:0d:6e:7d:8c:
e1:22:c5:6c:2e:21:a8:d3:7f:75:e7:99:c5:23:c6:
e3:e3:0d:14:a1:a1:2e:e8:41:23:c8:c8:fa:c2:64:
0a:ef:b4:48:9d:68:59:b5:86:aa:16:61:fd:ef:9c:
a0:d3:3d:1d:41:40:0a:2a:62:ee:9c:5d:a9:9e:8b:
4f:e0:4f:38:fa:1b:63:ae:56:59:9a:b6:8a:1e:ca:
1c:ef:8e:52:6a:1d:43:10:0e:17:2d:8e:c5:9e:c7:
7d:98:07:d8:1f:dd:81:e7:37:da:15:84:72:4a:e3:
6b:26:5a:ba:4c:31:4f:22:cc:a3:1d:5b:92:3a:0c:
c6:22:f7:8a:72:75:67:58:3a:ac:7d:51:98:93:a0:
4b:42:a5:d8:33:78:23:ce:32:50:bc:80:25:8e:36:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:30:A4:D6:A5:45:64:E1:9E:59:02:B2:45:65:F6:CD:17:6A:9D:4A
X509v3 Authority Key Identifier:
keyid:33:C0:15:24:85:32:BC:E3:95:9F:73:09:27:49:FD:E1:64:93:44:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/33C015248532BCE3959F73092749FDE164934402.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/33C015248532BCE3959F73092749FDE164934402.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e332e302f32342d3234203d3e20323637333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.3.0/24
Signature Algorithm: sha256WithRSAEncryption
63:15:f8:d1:53:49:75:18:51:b0:1f:27:30:ec:9b:81:00:ab:
15:ca:ce:b0:36:5b:18:8b:13:9f:75:7a:da:5b:3f:95:0b:8d:
4f:9a:3c:e0:11:ea:2b:86:68:88:f4:08:41:ad:fd:38:1d:9d:
0c:95:82:00:d2:77:1c:e7:e1:7e:bd:d5:02:f4:e2:71:96:4c:
e4:d8:36:c3:be:29:62:97:f4:2f:57:68:89:9a:6d:27:b5:bc:
dd:74:99:89:99:9d:31:9d:d6:22:16:1f:b2:be:6d:9a:3e:02:
11:30:33:8f:c5:ad:c6:ca:41:12:d3:c7:93:b7:6b:96:5a:7c:
9e:63:b9:5e:01:de:f3:9f:c5:92:48:6a:ed:90:5a:bb:77:68:
31:ee:75:c7:44:74:6a:0a:cd:19:ea:ec:b2:15:34:03:e2:af:
f1:dd:e7:fd:bd:38:7e:79:91:42:8f:54:da:65:43:9a:34:a8:
d0:16:cb:d3:50:a4:90:99:49:26:ee:84:e8:a5:48:db:38:1a:
83:12:8c:c4:04:ed:52:ba:40:35:2d:97:4f:43:dc:32:fe:fa:
73:35:b7:ca:a9:fd:dc:b4:13:a1:a8:72:32:6c:ed:02:fb:4a:
1e:06:a5:5b:3c:dd:ef:7e:28:02:35:30:b3:ce:09:e7:3b:4f:
91:8d:59:c4
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUdtE3s63z1CRsl8Jzb9H+7e7OUGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzNDMDE1MjQ4NTMyQkNFMzk1OUY3MzA5Mjc0OUZERTE2
NDkzNDQwMjAeFw0yMzExMTMxOTA2NDVaFw0yNDExMTExOTExNDVaMDMxMTAvBgNV
BAMTKDcwMzBBNEQ2QTU0NTY0RTE5RTU5MDJCMjQ1NjVGNkNEMTc2QTlENEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeZiHBiPVy3Oe1xRsh0zd42HGv
dXudYh5CYj2tNeWrZlADdRr4qZy5vekuVP617OnQuPXFfB3S03rH5ASEVGZG4hwk
nh7NyK3Ofgi+xgIgA8+kC8Bf90WH/T7S6nwpUSdxMZ8TDW59jOEixWwuIajTf3Xn
mcUjxuPjDRShoS7oQSPIyPrCZArvtEidaFm1hqoWYf3vnKDTPR1BQAoqYu6cXame
i0/gTzj6G2OuVlmatooeyhzvjlJqHUMQDhctjsWex32YB9gf3YHnN9oVhHJK42sm
WrpMMU8izKMdW5I6DMYi94pydWdYOqx9UZiToEtCpdgzeCPOMlC8gCWONhSJAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUcDCk1qVFZOGeWQKyRWX2zRdqnUowHwYDVR0j
BBgwFoAUM8AVJIUyvOOVn3MJJ0n94WSTRAIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC8zM0MwMTUyNDg1MzJCQ0UzOTU5RjczMDkyNzQ5RkRFMTY0OTM0NDAyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzQzAxNTI0ODUzMkJDRTM5
NTlGNzMwOTI3NDlGREUxNjQ5MzQ0MDIuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0Y1BCNktreGNSOVhab2lMOHBobzNhWXBKMWR1cktFc0dIRGpwSGJ0RzdjLzAv
MzQzNTJlMzcyZTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3MzMzODM4
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQALQcDMA0GCSqGSIb3DQEBCwUAA4IBAQBjFfjRU0l1GFGwHycw
7JuBAKsVys6wNlsYixOfdXraWz+VC41PmjzgEeorhmiI9AhBrf04HZ0MlYIA0ncc
5+F+vdUC9OJxlkzk2DbDvilil/QvV2iJmm0ntbzddJmJmZ0xndYiFh+yvm2aPgIR
MDOPxa3GykES08eTt2uWWnyeY7leAd7zn8WSSGrtkFq7d2gx7nXHRHRqCs0Z6uyy
FTQD4q/x3ef9vTh+eZFCj1TaZUOaNKjQFsvTUKSQmUkm7oTopUjbOBqDEozEBO1S
ukA1LZdPQ9wy/vpzNbfKqf3ctBOhqHIybO0C+0oeBqVbPN3vfigCNTCzzgnnO0+R
jVnE
-----END CERTIFICATE-----
Generated at Sat Feb 24 12:15:37 2024 by rpki-client on console-ams.rpki-client.org