Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32332d3234203d3e20323638373130.roa
File: 34352e3137302e3232382e302f32332d3234203d3e20323638373130.roa (raw, json)
Hash identifier: 9kchFyGWG++Nn4guT95iRHHcvgk0tyWb785u957DqzQ=
Subject key identifier: EC:C2:E7:16:39:A1:44:20:01:FB:05:EA:E1:0D:A5:3A:88:5C:98:7E
Certificate issuer: /CN=5847FB25C967B7747A3862CC818403059C9613CB
Certificate serial: 5A25AD17934E20FFE2FCDFF7C16AC2FAD8BFAA60
Authority key identifier: 58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32332d3234203d3e20323638373130.roa
Signing time: Fri 26 Jul 2024 14:35:42 +0000
ROA not before: Fri 26 Jul 2024 14:30:42 +0000
ROA not after: Fri 25 Jul 2025 14:35:42 +0000
asID: 268710
IP address blocks: 45.170.228.0/23 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:25:ad:17:93:4e:20:ff:e2:fc:df:f7:c1:6a:c2:fa:d8:bf:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5847FB25C967B7747A3862CC818403059C9613CB
Validity
Not Before: Jul 26 14:30:42 2024 GMT
Not After : Jul 25 14:35:42 2025 GMT
Subject: CN=ECC2E71639A1442001FB05EAE10DA53A885C987E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:f6:13:e2:e3:d8:ad:31:9b:a3:5b:da:2a:
e4:91:51:3a:d4:fb:bb:26:36:f6:b3:cc:15:89:96:
81:dd:b3:a5:82:d5:b9:f4:29:e2:6c:f3:8a:7d:60:
18:a3:d8:55:32:21:24:41:29:df:14:6c:8b:92:04:
ca:19:ba:2b:c4:08:09:b8:b5:a0:a3:14:66:f3:84:
9b:60:07:0a:ec:30:13:1c:bc:62:21:eb:d7:8d:c3:
34:61:aa:1f:e7:a6:73:b3:24:b0:0e:5e:e8:93:0f:
0c:db:41:62:51:5c:a2:34:3b:2e:e6:2d:ed:bb:23:
66:ac:f1:6c:e3:bb:b2:60:b4:1c:3f:05:9e:28:41:
1b:79:6c:4b:76:ae:60:23:5b:c0:bc:eb:01:1d:a5:
1e:a6:84:7f:51:c7:06:1e:44:8b:5d:54:0e:ee:04:
aa:60:58:2d:aa:e0:30:95:9d:eb:33:4d:3b:69:af:
7f:14:69:30:76:f9:80:fd:81:08:eb:a8:77:3a:92:
f5:db:89:b3:29:e5:60:d2:52:bc:74:fa:17:ba:4c:
de:80:ee:93:77:21:bb:52:96:9b:61:62:d5:89:3a:
04:ea:94:44:89:86:37:29:c0:24:40:df:62:6d:18:
df:3d:6a:56:cd:a2:76:9a:eb:4e:2b:1c:e8:74:52:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C2:E7:16:39:A1:44:20:01:FB:05:EA:E1:0D:A5:3A:88:5C:98:7E
X509v3 Authority Key Identifier:
keyid:58:47:FB:25:C9:67:B7:74:7A:38:62:CC:81:84:03:05:9C:96:13:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/5847FB25C967B7747A3862CC818403059C9613CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5847FB25C967B7747A3862CC818403059C9613CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/1/34352e3137302e3232382e302f32332d3234203d3e20323638373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.228.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:7a:0d:e2:72:7f:fb:65:dc:02:2d:f4:ec:a2:fc:02:fb:4c:
c8:e3:e6:89:0e:4f:10:39:18:8d:fe:c3:7e:40:ff:6e:01:91:
8d:37:20:85:87:ee:ea:ea:4d:36:5e:61:62:73:a4:e5:37:cf:
03:3d:1d:34:de:33:d1:1e:bc:12:d1:5c:23:f1:74:a6:85:26:
c1:54:67:ac:e1:78:cf:d6:cf:6c:86:6e:3a:db:91:ef:9b:92:
77:2f:fb:b2:ee:92:fb:ae:00:a4:6c:96:44:80:ac:4c:de:86:
50:69:e6:68:3c:58:3e:20:fd:e7:4b:03:ad:3e:d1:ba:50:37:
59:35:01:c5:36:6a:46:c0:c8:37:b5:e0:ed:8f:1a:73:60:60:
53:a1:77:bf:bf:e1:16:54:ad:4b:f4:da:73:8f:cb:db:85:81:
3b:d8:39:4b:74:df:6f:52:c6:ca:85:82:08:f4:33:46:7c:6a:
71:5a:05:be:d8:69:f4:74:79:52:49:7e:d5:0a:2b:ed:a5:db:
62:1e:80:68:45:aa:96:db:5f:72:b2:eb:cb:66:6c:a7:04:36:
c8:84:cb:e0:26:bc:37:27:8d:87:74:34:c0:2a:9f:52:bd:24:
a8:33:fd:22:a3:41:b8:b0:83:75:44:b3:be:5a:60:51:6c:9a:
bd:8e:ef:c5
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWiWtF5NOIP/i/N/3wWrC+ti/qmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTg0N0ZCMjVDOTY3Qjc3NDdBMzg2MkNDODE4NDAzMDU5
Qzk2MTNDQjAeFw0yNDA3MjYxNDMwNDJaFw0yNTA3MjUxNDM1NDJaMDMxMTAvBgNV
BAMTKEVDQzJFNzE2MzlBMTQ0MjAwMUZCMDVFQUUxMERBNTNBODg1Qzk4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcvYT4uPYrTGbo1vaKuSRUTrU
+7smNvazzBWJloHds6WC1bn0KeJs84p9YBij2FUyISRBKd8UbIuSBMoZuivECAm4
taCjFGbzhJtgBwrsMBMcvGIh69eNwzRhqh/npnOzJLAOXuiTDwzbQWJRXKI0Oy7m
Le27I2as8Wzju7JgtBw/BZ4oQRt5bEt2rmAjW8C86wEdpR6mhH9RxwYeRItdVA7u
BKpgWC2q4DCVneszTTtpr38UaTB2+YD9gQjrqHc6kvXbibMp5WDSUrx0+he6TN6A
7pN3IbtSlpthYtWJOgTqlESJhjcpwCRA32JtGN89albNonaa604rHOh0UohtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU7MLnFjmhRCAB+wXq4Q2lOohcmH4wHwYDVR0j
BBgwFoAUWEf7Jclnt3R6OGLMgYQDBZyWE8swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lUNVJqWlk4aFBCelFxaktxSzJ3QWhTeVZDaHFDVkM5SjdCMVF2RDZM
N3MvMS81ODQ3RkIyNUM5NjdCNzc0N0EzODYyQ0M4MTg0MDMwNTlDOTYxM0NCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzU4NDdGQjI1Qzk2N0I3NzQ3
QTM4NjJDQzgxODQwMzA1OUM5NjEzQ0IuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5VDVSalpZOGhQQnpRcWpLcUsyd0FoU3lWQ2hxQ1ZDOUo3QjFRdkQ2TDdzLzEv
MzQzNTJlMzEzNzMwMmUzMjMyMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtquQwDQYJKoZIhvcNAQELBQADggEBAE16DeJy
f/tl3AIt9Oyi/AL7TMjj5okOTxA5GI3+w35A/24BkY03IIWH7urqTTZeYWJzpOU3
zwM9HTTeM9EevBLRXCPxdKaFJsFUZ6zheM/Wz2yGbjrbke+bkncv+7LukvuuAKRs
lkSArEzehlBp5mg8WD4g/edLA60+0bpQN1k1AcU2akbAyDe14O2PGnNgYFOhd7+/
4RZUrUv02nOPy9uFgTvYOUt0329SxsqFggj0M0Z8anFaBb7YafR0eVJJftUKK+2l
22IegGhFqpbbX3Ky68tmbKcENsiEy+AmvDcnjYd0NMAqn1K9JKgz/SKjQbiwg3VE
s75aYFFsmr2O78U=
-----END CERTIFICATE-----
Generated at Tue Aug 13 09:22:17 2024 by rpki-client on console-fra.rpki-client.org