Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/34352e3137332e38302e302f32322d3234203d3e20323638383032.roa
File: 34352e3137332e38302e302f32322d3234203d3e20323638383032.roa (raw, json)
Hash identifier: ZlXAV8CH8ohgftW8pro8gGI8sX412uHt1JjjkM6rCXk=
Subject key identifier: 33:AA:EC:7C:C6:E5:B4:11:91:E4:85:A6:78:71:E6:B9:5C:F9:EF:05
Certificate issuer: /CN=D256990B945A612A1ED366DE6B698A125F559753
Certificate serial: 1614DEF7341E13D50743E172012BFD73F7879CCA
Authority key identifier: D2:56:99:0B:94:5A:61:2A:1E:D3:66:DE:6B:69:8A:12:5F:55:97:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D256990B945A612A1ED366DE6B698A125F559753.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/34352e3137332e38302e302f32322d3234203d3e20323638383032.roa
Signing time: Thu 04 Apr 2024 03:32:13 +0000
ROA not before: Thu 04 Apr 2024 03:27:13 +0000
ROA not after: Thu 03 Apr 2025 03:32:13 +0000
asID: 268802
IP address blocks: 45.173.80.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:14:de:f7:34:1e:13:d5:07:43:e1:72:01:2b:fd:73:f7:87:9c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D256990B945A612A1ED366DE6B698A125F559753
Validity
Not Before: Apr 4 03:27:13 2024 GMT
Not After : Apr 3 03:32:13 2025 GMT
Subject: CN=33AAEC7CC6E5B41191E485A67871E6B95CF9EF05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:16:53:e0:2c:64:bf:9a:30:31:57:3d:07:
e4:34:7c:c5:79:ca:ea:e6:ee:cc:0c:52:68:61:99:
f3:94:c8:ac:f9:7e:c2:07:ba:27:5f:6e:8c:98:82:
3f:3b:ca:ca:43:26:85:0b:43:f2:a4:7f:85:0c:63:
31:cf:b8:28:f8:9d:1b:49:c7:21:4a:72:44:05:6f:
49:a5:a0:7f:5b:c8:25:76:78:91:be:86:02:dc:ad:
fc:84:63:31:11:b3:4d:bb:f5:a0:23:0f:e9:0a:b0:
de:68:25:13:9f:3f:13:65:42:7a:7a:c9:d9:23:f6:
cf:1f:3c:8e:c2:dd:0a:37:8c:41:4f:cf:15:bb:77:
8b:99:b4:9b:ee:4f:7b:02:52:12:be:28:28:ee:f0:
0d:e3:d0:0f:36:3a:fe:66:ae:a6:b7:2f:d3:df:1a:
a3:41:fb:c5:d0:48:81:e4:50:78:86:8c:0a:19:20:
10:00:e6:23:48:c3:ed:1c:8b:a5:f1:6f:2e:f4:db:
40:22:da:ce:0a:de:c8:93:c3:95:d9:34:88:38:33:
79:e6:01:2d:74:4b:80:a8:b7:f2:cf:a3:6f:3b:a6:
78:cf:62:6c:47:09:9a:31:7d:b5:e2:ef:8c:22:28:
4f:bb:83:07:17:d1:ae:97:6c:c9:14:5d:ea:91:7c:
ee:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AA:EC:7C:C6:E5:B4:11:91:E4:85:A6:78:71:E6:B9:5C:F9:EF:05
X509v3 Authority Key Identifier:
keyid:D2:56:99:0B:94:5A:61:2A:1E:D3:66:DE:6B:69:8A:12:5F:55:97:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/D256990B945A612A1ED366DE6B698A125F559753.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D256990B945A612A1ED366DE6B698A125F559753.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5BbcYXfoxJhunshcs7XguYzRJZ1RzPrmtBtxZvp7gGEK/1/34352e3137332e38302e302f32322d3234203d3e20323638383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.80.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:45:78:74:29:62:be:f6:1a:63:07:d7:e2:c8:8e:60:ff:ef:
9b:7a:13:40:8e:7c:23:82:19:3c:a6:58:1f:29:c2:68:63:f5:
3f:93:c7:e8:7a:85:a3:85:16:95:c5:02:af:f6:2a:42:76:9b:
df:a6:3c:50:91:ed:a6:0e:58:15:83:87:8c:96:80:f9:08:e3:
26:59:0c:e2:56:4b:2c:8d:d9:00:ab:48:b6:e1:64:23:a0:d7:
27:f4:31:0e:42:14:7f:b0:02:5c:0a:95:99:4a:29:55:9d:d9:
8b:da:d7:81:b5:d0:96:ae:36:94:a0:b1:c9:3d:60:ca:e8:56:
da:27:b4:72:b4:37:92:69:47:dc:98:79:f3:7b:77:24:e0:44:
93:de:b5:ac:ae:d7:8d:de:24:1c:8c:2b:47:83:75:be:80:2b:
18:1c:d4:d9:db:93:8e:bc:21:2c:36:f4:2e:a5:a1:37:15:38:
37:1e:11:01:da:d4:62:c8:0b:57:4f:00:f9:cc:1f:77:ab:82:
d2:ae:12:99:22:94:c0:a4:77:f2:59:c8:c2:f1:57:e4:8d:e6:
ea:05:c4:6a:72:1b:f3:1c:4f:c5:9a:ce:59:06:48:75:0a:a1:
ce:32:c5:be:0b:e4:f7:2d:db:c0:b5:80:be:d0:94:a5:a6:19:
2c:28:b4:15
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFhTe9zQeE9UHQ+FyASv9c/eHnMowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDI1Njk5MEI5NDVBNjEyQTFFRDM2NkRFNkI2OThBMTI1
RjU1OTc1MzAeFw0yNDA0MDQwMzI3MTNaFw0yNTA0MDMwMzMyMTNaMDMxMTAvBgNV
BAMTKDMzQUFFQzdDQzZFNUI0MTE5MUU0ODVBNjc4NzFFNkI5NUNGOUVGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrJBZT4Cxkv5owMVc9B+Q0fMV5
yurm7swMUmhhmfOUyKz5fsIHuidfboyYgj87yspDJoULQ/Kkf4UMYzHPuCj4nRtJ
xyFKckQFb0mloH9byCV2eJG+hgLcrfyEYzERs0279aAjD+kKsN5oJROfPxNlQnp6
ydkj9s8fPI7C3Qo3jEFPzxW7d4uZtJvuT3sCUhK+KCju8A3j0A82Ov5mrqa3L9Pf
GqNB+8XQSIHkUHiGjAoZIBAA5iNIw+0ci6Xxby7020Ai2s4K3siTw5XZNIg4M3nm
AS10S4Cot/LPo287pnjPYmxHCZoxfbXi74wiKE+7gwcX0a6XbMkUXeqRfO4jAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUM6rsfMbltBGR5IWmeHHmuVz57wUwHwYDVR0j
BBgwFoAU0laZC5RaYSoe02bea2mKEl9Vl1MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNUJiY1lYZm94Smh1bnNoY3M3WGd1WXpSSloxUnpQcm10QnR4WnZwN2dH
RUsvMS9EMjU2OTkwQjk0NUE2MTJBMUVEMzY2REU2QjY5OEExMjVGNTU5NzUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QyNTY5OTBCOTQ1QTYxMkEx
RUQzNjZERTZCNjk4QTEyNUY1NTk3NTMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVCYmNZWGZveEpodW5zaGNzN1hndVl6UkpaMVJ6UHJtdEJ0eFp2cDdnR0VLLzEv
MzQzNTJlMzEzNzMzMmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa1QMA0GCSqGSIb3DQEBCwUAA4IBAQCrRXh0KWK+
9hpjB9fiyI5g/++behNAjnwjghk8plgfKcJoY/U/k8foeoWjhRaVxQKv9ipCdpvf
pjxQke2mDlgVg4eMloD5COMmWQziVkssjdkAq0i24WQjoNcn9DEOQhR/sAJcCpWZ
SilVndmL2teBtdCWrjaUoLHJPWDK6FbaJ7RytDeSaUfcmHnze3ck4EST3rWsrteN
3iQcjCtHg3W+gCsYHNTZ25OOvCEsNvQupaE3FTg3HhEB2tRiyAtXTwD5zB93q4LS
rhKZIpTApHfyWcjC8VfkjebqBcRqchvzHE/Fms5ZBkh1CqHOMsW+C+T3LdvAtYC+
0JSlphksKLQV
-----END CERTIFICATE-----
Generated at Tue Jun 18 15:33:21 2024 by rpki-client on console-fra.rpki-client.org