Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3231302e302f32342d3234203d3e20323638323134.roa
File: 34352e3233352e3231302e302f32342d3234203d3e20323638323134.roa (raw, json)
Hash identifier: cTXlaheEN7sLP5q6xZmGnlRyCdjwn7KJJIaUJNzwv+k=
Subject key identifier: 4B:71:FA:21:3E:25:11:68:FA:99:74:1E:6B:2F:69:F8:85:51:F1:40
Certificate issuer: /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial: 17F8A95C6A042A9D12DB9B8113D3873C0FA96E2E
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3231302e302f32342d3234203d3e20323638323134.roa
Signing time: Wed 22 May 2024 20:30:48 +0000
ROA not before: Wed 22 May 2024 20:25:48 +0000
ROA not after: Wed 21 May 2025 20:30:48 +0000
asID: 268214
IP address blocks: 45.235.210.0/24 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:f8:a9:5c:6a:04:2a:9d:12:db:9b:81:13:d3:87:3c:0f:a9:6e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Validity
Not Before: May 22 20:25:48 2024 GMT
Not After : May 21 20:30:48 2025 GMT
Subject: CN=4B71FA213E251168FA99741E6B2F69F88551F140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:76:f4:14:a3:5a:ec:dc:55:1e:5b:18:8d:02:
77:83:0b:34:14:40:a4:bb:5e:c9:54:87:db:e1:0d:
ce:99:b7:ef:cd:5d:5b:75:0a:3b:c7:2f:ea:18:97:
04:48:00:85:bd:09:2f:13:a4:5c:2b:3d:40:0a:6e:
74:ba:cd:b4:ca:46:d9:08:62:b5:ce:ca:6a:e9:28:
07:7a:4a:0e:96:83:bf:f3:64:87:1a:d0:b2:a4:59:
7f:68:93:81:db:71:82:d0:0d:c3:e1:af:2c:2b:c8:
dc:ab:43:e7:28:60:73:b7:c7:61:92:ee:0a:8d:d8:
77:db:cd:5d:44:61:cd:7c:81:c7:9e:72:ee:5d:ff:
30:07:94:03:55:b8:c3:00:87:61:81:36:8f:cd:5b:
22:df:d7:5a:93:7f:70:1f:eb:fb:a2:38:07:d3:e3:
2a:48:b6:52:ad:0e:c0:73:9d:cc:54:f3:26:84:3f:
b2:bf:4f:57:93:ce:aa:5d:92:14:56:9c:4a:8f:73:
c7:79:ef:67:1d:a9:e9:7a:e8:d9:b1:32:08:08:89:
4c:f8:24:e5:33:35:b0:e6:fe:77:35:b5:9e:1f:e9:
fe:e3:58:36:54:90:fd:af:32:e3:af:fe:dc:2d:a4:
73:82:05:6d:ff:a9:de:6c:37:46:cd:66:31:9c:84:
b2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:71:FA:21:3E:25:11:68:FA:99:74:1E:6B:2F:69:F8:85:51:F1:40
X509v3 Authority Key Identifier:
keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3231302e302f32342d3234203d3e20323638323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.210.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1a:08:88:ea:c6:0b:35:05:07:49:ba:c1:69:cb:45:14:03:
ec:0e:c4:c9:eb:76:eb:cf:ba:76:f2:6d:52:86:ef:ae:e9:84:
c4:5c:d8:04:7a:e9:84:46:5c:3e:fe:3a:2f:5a:62:03:06:e5:
58:89:00:9f:e8:d1:93:e4:84:82:ca:8f:ae:58:33:77:44:80:
17:6a:85:e0:fb:60:b9:98:f9:73:23:61:72:7b:21:0f:13:f0:
44:a8:fd:38:5e:2f:7b:47:bc:09:e6:6d:9f:f7:91:8d:37:77:
09:2f:0c:a3:58:3f:b2:ec:2a:fd:e1:24:2d:56:29:77:aa:6b:
62:e2:5b:aa:6d:94:27:cf:e8:f4:f4:b4:04:d9:8f:f9:62:5a:
62:23:5c:11:31:e9:23:0c:50:da:80:02:e3:80:74:b6:44:30:
06:89:cd:5b:84:f8:ac:8a:3b:4e:19:54:23:41:d3:1a:67:64:
42:5a:e1:2a:1d:31:fa:5f:37:b6:5f:fb:32:70:f1:2f:61:e6:
dc:f1:2a:de:1f:90:97:25:d4:eb:ba:19:be:e7:1a:24:87:8a:
4a:9a:a0:fb:5f:e5:88:19:cb:66:80:71:72:35:dd:4f:5e:96:
e6:27:26:a1:35:db:3f:06:67:83:bf:ee:9c:d4:ae:b9:2b:f8:
77:81:a1:6d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF/ipXGoEKp0S25uBE9OHPA+pbi4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIzN0VBNkQzNzQ4N0VCREEzQ0ZBNEUwRjFGNTk1N0M5
ODdGRUEyRjAeFw0yNDA1MjIyMDI1NDhaFw0yNTA1MjEyMDMwNDhaMDMxMTAvBgNV
BAMTKDRCNzFGQTIxM0UyNTExNjhGQTk5NzQxRTZCMkY2OUY4ODU1MUYxNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCudvQUo1rs3FUeWxiNAneDCzQU
QKS7XslUh9vhDc6Zt+/NXVt1CjvHL+oYlwRIAIW9CS8TpFwrPUAKbnS6zbTKRtkI
YrXOymrpKAd6Sg6Wg7/zZIca0LKkWX9ok4HbcYLQDcPhrywryNyrQ+coYHO3x2GS
7gqN2HfbzV1EYc18gceecu5d/zAHlANVuMMAh2GBNo/NWyLf11qTf3Af6/uiOAfT
4ypItlKtDsBzncxU8yaEP7K/T1eTzqpdkhRWnEqPc8d572cdqel66NmxMggIiUz4
JOUzNbDm/nc1tZ4f6f7jWDZUkP2vMuOv/twtpHOCBW3/qd5sN0bNZjGchLLPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUS3H6IT4lEWj6mXQeay9p+IVR8UAwHwYDVR0j
BBgwFoAUIjfqbTdIfr2jz6Tg8fWVfJh/6i8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZEMlh3cDl5cTVQZEZFQVdrMlVXQ3dXRFRrUlc3VnBUR1kzclJTd3pI
bVUvMC8yMjM3RUE2RDM3NDg3RUJEQTNDRkE0RTBGMUY1OTU3Qzk4N0ZFQTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyMzdFQTZEMzc0ODdFQkRB
M0NGQTRFMEYxRjU5NTdDOTg3RkVBMkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2RDJYd3A5eXE1UGRGRUFXazJVV0N3V0RUa1JXN1ZwVEdZM3JSU3d6SG1VLzAv
MzQzNTJlMzIzMzM1MmUzMjMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt69IwDQYJKoZIhvcNAQELBQADggEBABwaCIjq
xgs1BQdJusFpy0UUA+wOxMnrduvPunbybVKG767phMRc2AR66YRGXD7+Oi9aYgMG
5ViJAJ/o0ZPkhILKj65YM3dEgBdqheD7YLmY+XMjYXJ7IQ8T8ESo/TheL3tHvAnm
bZ/3kY03dwkvDKNYP7LsKv3hJC1WKXeqa2LiW6ptlCfP6PT0tATZj/liWmIjXBEx
6SMMUNqAAuOAdLZEMAaJzVuE+KyKO04ZVCNB0xpnZEJa4SodMfpfN7Zf+zJw8S9h
5tzxKt4fkJcl1Ou6Gb7nGiSHikqaoPtf5YgZy2aAcXI13U9eluYnJqE12z8GZ4O/
7pzUrrkr+HeBoW0=
-----END CERTIFICATE-----
Generated at Sun Jul 14 23:20:23 2024 by rpki-client on console-fra.rpki-client.org