Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3233203d3e20323638383738.roa
File: 34352e3137342e31362e302f32322d3233203d3e20323638383738.roa (raw, json)
Hash identifier: t42TO3owKGPBBunwIEOO+TX9GWRn2j6GrdvNbd7HJS4=
Subject key identifier: DB:F6:8E:E9:1D:40:7C:1F:CA:3C:D2:E0:D7:1D:D0:95:8D:82:78:D7
Certificate issuer: /CN=F9ED493EACCDC37CB88045DC16B744CD5EAA42F5
Certificate serial: 2F1A6DFD4302EF04FE84A49FDC447077029E36D7
Authority key identifier: F9:ED:49:3E:AC:CD:C3:7C:B8:80:45:DC:16:B7:44:CD:5E:AA:42:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9ED493EACCDC37CB88045DC16B744CD5EAA42F5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3233203d3e20323638383738.roa
Signing time: Thu 20 Jul 2023 12:07:09 +0000
ROA not before: Thu 20 Jul 2023 12:02:09 +0000
ROA not after: Thu 18 Jul 2024 12:07:09 +0000
asID: 268878
IP address blocks: 45.174.16.0/22 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1a:6d:fd:43:02:ef:04:fe:84:a4:9f:dc:44:70:77:02:9e:36:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9ED493EACCDC37CB88045DC16B744CD5EAA42F5
Validity
Not Before: Jul 20 12:02:09 2023 GMT
Not After : Jul 18 12:07:09 2024 GMT
Subject: CN=DBF68EE91D407C1FCA3CD2E0D71DD0958D8278D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ef:d9:7f:83:a2:b9:c9:41:cd:c1:cc:68:9b:
8d:76:51:4f:52:75:6d:e3:55:46:7c:ff:c4:2a:c0:
d5:fd:90:59:2b:fb:0f:4f:ed:72:fb:9c:3e:e4:9f:
12:5f:a4:7e:d6:7b:87:d5:b8:93:d1:99:ee:b7:f7:
4d:1d:ad:5e:72:6f:a5:d7:a8:ee:c5:ed:14:de:a1:
4a:59:59:40:d1:16:f3:ad:6e:07:f6:80:2e:44:3d:
e5:82:01:7b:77:a7:a5:0f:e1:ec:6f:cc:83:15:d4:
2f:5c:b7:13:88:b2:80:09:ef:59:2d:d3:4e:dd:57:
07:bb:45:aa:89:d3:e4:08:c4:9c:42:4c:f8:2c:1c:
04:37:04:d2:35:c8:84:d8:6e:23:ba:ef:41:7c:86:
f3:ee:7a:3b:d8:d2:25:d6:9c:62:e5:af:ab:1d:f7:
82:59:9e:c5:d3:42:fc:66:90:ea:f6:04:bc:84:37:
35:d5:a8:42:15:7a:07:26:f2:ab:55:0f:d8:ef:a9:
09:12:d4:40:af:62:7a:e8:91:ae:ef:2c:dc:39:b5:
59:96:5d:5a:33:21:fb:21:c8:c3:fc:ae:2f:63:d2:
68:33:b7:79:73:23:73:78:f1:90:b7:ae:22:12:30:
bc:06:02:f5:97:6f:5e:cc:29:ab:b7:2c:e2:b9:68:
92:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F6:8E:E9:1D:40:7C:1F:CA:3C:D2:E0:D7:1D:D0:95:8D:82:78:D7
X509v3 Authority Key Identifier:
keyid:F9:ED:49:3E:AC:CD:C3:7C:B8:80:45:DC:16:B7:44:CD:5E:AA:42:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/F9ED493EACCDC37CB88045DC16B744CD5EAA42F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9ED493EACCDC37CB88045DC16B744CD5EAA42F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31362e302f32322d3233203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.16.0/22
Signature Algorithm: sha256WithRSAEncryption
39:91:50:20:56:5a:f8:1f:eb:26:1c:13:17:9a:58:45:07:dc:
11:c2:54:e4:e8:62:d7:78:16:87:e9:37:6b:c0:9b:b0:f0:f3:
34:e1:96:63:2d:40:2c:9b:8e:ed:e3:ca:95:51:cf:04:dd:77:
e3:09:7d:18:e5:bb:7f:0f:47:9d:cf:9c:68:a5:5b:af:cf:6e:
03:c7:29:9e:a1:39:5f:2e:e1:06:2b:ea:2f:0f:2c:8a:7d:65:
54:f4:86:d1:a3:49:95:d6:b5:af:64:b5:f4:bc:4e:3e:7e:54:
1b:ae:a0:e8:ae:29:ac:f6:4b:09:47:ac:78:7d:24:33:18:3f:
70:e6:85:bc:cf:b6:63:11:26:4f:c3:84:fa:3c:3a:24:12:02:
4f:ff:d6:06:7d:e8:a6:df:60:e5:70:b2:16:27:bf:63:5b:b2:
52:d4:50:d4:40:d2:9b:84:f4:2d:33:2e:8d:6f:34:ec:87:08:
21:4c:da:6f:9c:c2:0f:07:36:93:c1:13:f3:b4:fe:25:b2:5e:
19:ce:16:f5:76:f3:91:6b:3e:86:25:05:ab:f3:0c:12:2d:24:
c0:af:f5:f6:3f:ba:a2:72:e9:2e:bc:02:55:64:fc:8d:10:7c:
db:7d:ef:71:fa:c7:c8:c4:86:ae:75:8d:34:9d:de:a5:42:0c:
58:6e:5f:7a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULxpt/UMC7wT+hKSf3ERwdwKeNtcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjlFRDQ5M0VBQ0NEQzM3Q0I4ODA0NURDMTZCNzQ0Q0Q1
RUFBNDJGNTAeFw0yMzA3MjAxMjAyMDlaFw0yNDA3MTgxMjA3MDlaMDMxMTAvBgNV
BAMTKERCRjY4RUU5MUQ0MDdDMUZDQTNDRDJFMEQ3MUREMDk1OEQ4Mjc4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI79l/g6K5yUHNwcxom412UU9S
dW3jVUZ8/8QqwNX9kFkr+w9P7XL7nD7knxJfpH7We4fVuJPRme63900drV5yb6XX
qO7F7RTeoUpZWUDRFvOtbgf2gC5EPeWCAXt3p6UP4exvzIMV1C9ctxOIsoAJ71kt
007dVwe7RaqJ0+QIxJxCTPgsHAQ3BNI1yITYbiO670F8hvPuejvY0iXWnGLlr6sd
94JZnsXTQvxmkOr2BLyENzXVqEIVegcm8qtVD9jvqQkS1ECvYnroka7vLNw5tVmW
XVozIfshyMP8ri9j0mgzt3lzI3N48ZC3riISMLwGAvWXb17MKau3LOK5aJIvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2/aO6R1AfB/KPNLg1x3QlY2CeNcwHwYDVR0j
BBgwFoAU+e1JPqzNw3y4gEXcFrdEzV6qQvUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzlLNGlkbUxtNGVlczUyUHdZTUFKUUtXWGJjVlFUODU2OTNpa1J5enNr
Ym8vMC9GOUVENDkzRUFDQ0RDMzdDQjg4MDQ1REMxNkI3NDRDRDVFQUE0MkY1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0Y5RUQ0OTNFQUNDREMzN0NC
ODgwNDVEQzE2Qjc0NENENUVBQTQyRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzc5SzRpZG1MbTRlZXM1MlB3WU1BSlFLV1hiY1ZRVDg1NjkzaWtSeXpza2JvLzAv
MzQzNTJlMzEzNzM0MmUzMTM2MmUzMDJmMzIzMjJkMzIzMzIwM2QzZTIwMzIzNjM4
MzgzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa4QMA0GCSqGSIb3DQEBCwUAA4IBAQA5kVAgVlr4
H+smHBMXmlhFB9wRwlTk6GLXeBaH6TdrwJuw8PM04ZZjLUAsm47t48qVUc8E3Xfj
CX0Y5bt/D0edz5xopVuvz24DxymeoTlfLuEGK+ovDyyKfWVU9IbRo0mV1rWvZLX0
vE4+flQbrqDorims9ksJR6x4fSQzGD9w5oW8z7ZjESZPw4T6PDokEgJP/9YGfeim
32DlcLIWJ79jW7JS1FDUQNKbhPQtMy6NbzTshwghTNpvnMIPBzaTwRPztP4lsl4Z
zhb1dvORaz6GJQWr8wwSLSTAr/X2P7qicukuvAJVZPyNEHzbfe9x+sfIxIaudY00
nd6lQgxYbl96
-----END CERTIFICATE-----
Generated at Sun Aug 6 18:52:35 2023 by rpki-client on console-fra.rpki-client.org