Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3232203d3e20323638313335.roa
File: 34352e3137302e342e302f32322d3232203d3e20323638313335.roa (raw, json)
Hash identifier: SYS7wE9tHJpqC92MyHsJ1nHnY8mREVnfNkAKPjUUal0=
Subject key identifier: 96:4C:AA:BB:0A:F6:52:50:F3:3C:7F:D4:D1:37:39:FC:18:52:BE:84
Certificate issuer: /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial: 6CE5EA5E9F70FAE52D1940A23CE99F6B1A75232A
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3232203d3e20323638313335.roa
Signing time: Fri 12 May 2023 13:17:00 +0000
ROA not before: Fri 12 May 2023 13:12:00 +0000
ROA not after: Fri 10 May 2024 13:17:00 +0000
asID: 268135
IP address blocks: 45.170.4.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:e5:ea:5e:9f:70:fa:e5:2d:19:40:a2:3c:e9:9f:6b:1a:75:23:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Validity
Not Before: May 12 13:12:00 2023 GMT
Not After : May 10 13:17:00 2024 GMT
Subject: CN=964CAABB0AF65250F33C7FD4D13739FC1852BE84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:ee:14:0b:ec:0a:e2:54:0a:20:2c:d6:77:
a8:74:50:a6:1b:2a:53:30:4e:fb:ab:d6:f4:62:c4:
2f:be:ff:07:4f:3c:d3:a5:48:53:12:ff:56:4e:13:
a6:d4:cc:a1:ed:29:5a:dd:c7:c3:c3:aa:15:a0:7c:
19:29:aa:a1:47:27:55:24:5d:31:66:bc:a6:ad:c8:
e3:ca:cc:f0:08:8a:40:f2:a5:07:04:7f:8c:f2:42:
b0:d1:ab:1a:79:b2:ee:50:89:b7:90:3c:b4:8d:37:
f9:93:db:31:86:e5:96:9d:c7:f9:49:17:4f:5e:f1:
43:b9:c9:1f:9c:2f:ce:e5:a3:f3:38:e8:bd:d2:64:
50:62:8c:34:3f:82:5a:71:fa:6b:1f:16:ba:01:6f:
2e:3d:20:0e:c2:bd:c5:0d:b3:5e:d6:7f:db:3c:01:
bf:f3:60:ed:26:c8:7d:a0:d6:60:4e:c2:53:8b:ef:
f7:67:4c:a3:1f:5d:cd:00:a9:b2:95:2f:47:b1:ee:
fa:6e:e2:25:61:8f:71:fb:4a:20:6d:3c:7a:c6:90:
40:98:dd:2c:c7:7a:fe:a2:e1:61:2d:5c:59:c3:65:
27:8e:9b:9f:32:43:13:28:34:1b:07:47:94:84:15:
fe:47:e8:48:82:5e:44:1c:fe:2c:df:22:4a:d0:98:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4C:AA:BB:0A:F6:52:50:F3:3C:7F:D4:D1:37:39:FC:18:52:BE:84
X509v3 Authority Key Identifier:
keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32322d3232203d3e20323638313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:00:82:27:2d:43:f8:31:26:34:19:91:c2:77:88:29:1c:8b:
f3:4d:09:77:b9:b2:de:90:30:4b:f3:2c:0b:a3:8a:98:80:b7:
6a:83:63:21:fd:46:11:8f:d8:4e:80:b8:82:ec:d8:37:96:a2:
90:be:79:6a:b7:db:8b:48:49:22:3a:f6:f3:88:22:28:2e:7e:
32:ea:9f:ce:b3:d9:5a:e5:d1:c5:2b:2a:8c:25:88:8c:ad:17:
80:13:93:2f:13:fa:30:e6:9a:3e:ee:4c:0f:e5:c8:cc:1f:65:
c9:f7:01:c5:93:bc:53:40:e7:88:8d:aa:19:72:ec:3e:25:e8:
f4:66:0c:93:a3:60:0e:39:27:5a:cd:1a:d0:12:6f:c8:b6:b8:
db:0f:ce:29:e8:4c:f1:9c:81:27:82:83:24:c6:31:1f:b2:f3:
b2:70:95:d6:ad:8e:29:fb:0d:a3:3d:9d:a4:24:68:8d:8f:df:
0f:8e:92:f1:1b:be:80:68:da:0a:7f:fe:d4:5d:65:de:8d:c0:
71:88:10:e3:a0:f7:24:27:91:dd:bc:96:b9:07:4d:f4:33:38:
41:5e:1d:ef:d7:19:ce:38:82:6a:72:68:ec:b3:82:8f:1c:fa:
d8:62:a9:74:1b:c5:b9:86:92:db:85:51:2d:c0:d9:43:3b:b8:
46:63:7d:8b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbOXqXp9w+uUtGUCiPOmfaxp1IyowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUM1OTdBQjI4NDBEMEJCNEM3NjZDRjMyNzBEMkUyQTcz
RkM0OTNDRDAeFw0yMzA1MTIxMzEyMDBaFw0yNDA1MTAxMzE3MDBaMDMxMTAvBgNV
BAMTKDk2NENBQUJCMEFGNjUyNTBGMzNDN0ZENEQxMzczOUZDMTg1MkJFODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jO4UC+wK4lQKICzWd6h0UKYb
KlMwTvur1vRixC++/wdPPNOlSFMS/1ZOE6bUzKHtKVrdx8PDqhWgfBkpqqFHJ1Uk
XTFmvKatyOPKzPAIikDypQcEf4zyQrDRqxp5su5QibeQPLSNN/mT2zGG5Zadx/lJ
F09e8UO5yR+cL87lo/M46L3SZFBijDQ/glpx+msfFroBby49IA7CvcUNs17Wf9s8
Ab/zYO0myH2g1mBOwlOL7/dnTKMfXc0AqbKVL0ex7vpu4iVhj3H7SiBtPHrGkECY
3SzHev6i4WEtXFnDZSeOm58yQxMoNBsHR5SEFf5H6EiCXkQc/izfIkrQmK65AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUlkyquwr2UlDzPH/U0Tc5/BhSvoQwHwYDVR0j
BBgwFoAUHFl6soQNC7THZs8ycNLipz/Ek80wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNG91czRVTVhzcG5IU3o1NE5NOUM1Tm1nRUxueUhIbXVUMXFTcENFWWdC
TDQvMC8xQzU5N0FCMjg0MEQwQkI0Qzc2NkNGMzI3MEQyRTJBNzNGQzQ5M0NELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzFDNTk3QUIyODQwRDBCQjRD
NzY2Q0YzMjcwRDJFMkE3M0ZDNDkzQ0QuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRvdXM0VU1Yc3BuSFN6NTROTTlDNU5tZ0VMbnlISG11VDFxU3BDRVlnQkw0LzAv
MzQzNTJlMzEzNzMwMmUzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzODMx
MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2qBDANBgkqhkiG9w0BAQsFAAOCAQEALQCCJy1D+DEm
NBmRwneIKRyL800Jd7my3pAwS/MsC6OKmIC3aoNjIf1GEY/YToC4guzYN5aikL55
arfbi0hJIjr284giKC5+MuqfzrPZWuXRxSsqjCWIjK0XgBOTLxP6MOaaPu5MD+XI
zB9lyfcBxZO8U0DniI2qGXLsPiXo9GYMk6NgDjknWs0a0BJvyLa42w/OKehM8ZyB
J4KDJMYxH7LzsnCV1q2OKfsNoz2dpCRojY/fD46S8Ru+gGjaCn/+1F1l3o3AcYgQ
46D3JCeR3byWuQdN9DM4QV4d79cZzjiCanJo7LOCjxz62GKpdBvFuYaS24VRLcDZ
Qzu4RmN9iw==
-----END CERTIFICATE-----
Generated at Mon Feb 12 21:09:40 2024 by rpki-client on console-ams.rpki-client.org