Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3233203d3e20323638383135.roa
File: 34352e3137332e3135322e302f32322d3233203d3e20323638383135.roa (raw, json)
Hash identifier: HNGCI5EFMpHSH1QELClVuQjCvamQ8nC8fwgDfQoeRno=
Subject key identifier: 1A:7B:CB:9B:E1:EA:CF:65:C6:A6:7F:A4:B3:D6:BD:71:73:BE:06:FA
Certificate issuer: /CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
Certificate serial: 0B2343E0583D5F791D6A5B1362ACD257D5A4B48F
Authority key identifier: 0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3233203d3e20323638383135.roa
Signing time: Thu 16 May 2024 14:13:41 +0000
ROA not before: Thu 16 May 2024 14:08:41 +0000
ROA not after: Thu 15 May 2025 14:13:41 +0000
asID: 268815
IP address blocks: 45.173.152.0/22 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:23:43:e0:58:3d:5f:79:1d:6a:5b:13:62:ac:d2:57:d5:a4:b4:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831
Validity
Not Before: May 16 14:08:41 2024 GMT
Not After : May 15 14:13:41 2025 GMT
Subject: CN=1A7BCB9BE1EACF65C6A67FA4B3D6BD7173BE06FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:85:bf:1e:af:c2:fc:6e:58:21:2b:97:c1:86:
a2:74:1a:53:cc:d1:1c:7c:9f:aa:5f:b0:d5:8b:75:
c3:d7:c4:b5:ba:cd:26:72:02:4b:13:60:da:6f:98:
3e:2c:94:e3:57:e7:4e:11:75:ba:38:4c:8d:a6:84:
3c:5c:c7:15:54:27:5e:db:b7:a2:a2:c6:95:9e:7d:
14:60:72:d4:98:9d:c1:3b:fa:3e:ab:2e:54:6e:43:
c2:4f:70:76:65:79:9d:1b:f4:1d:6a:b7:7e:4b:21:
84:6d:c0:f4:e6:0a:6d:f6:f5:34:dc:a6:75:4c:ec:
69:78:b8:91:e3:11:1a:b2:e5:58:b9:c9:01:7b:e7:
1b:ac:2f:dc:ef:d9:c5:a5:11:63:74:b4:9b:93:0f:
1e:23:54:33:64:c8:b0:84:36:51:33:52:cd:c6:1d:
cd:ab:0c:89:56:40:e2:d7:65:e4:54:7c:9a:9f:40:
b2:49:45:77:de:bf:22:e7:96:8c:77:14:67:72:1c:
3e:f5:7b:13:94:9d:2c:d0:03:16:fb:4d:ac:08:c1:
c1:1b:d6:a7:6a:c9:c1:94:af:96:a3:df:f2:de:09:
c5:ec:24:d2:7d:b2:05:2e:8f:e6:58:ec:9f:d5:f8:
dd:82:0d:28:61:bf:76:e2:9a:5d:ba:60:8d:dc:a3:
ee:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7B:CB:9B:E1:EA:CF:65:C6:A6:7F:A4:B3:D6:BD:71:73:BE:06:FA
X509v3 Authority Key Identifier:
keyid:0E:7E:1E:38:AD:4F:03:E9:AE:C2:B0:4B:DD:FF:ED:7A:B5:AC:B8:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0E7E1E38AD4F03E9AEC2B04BDDFFED7AB5ACB831.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5Gu4odBNboXrgh3WZRKKRoWvtWLvBCKbDk3YjPF4sRr/0/34352e3137332e3135322e302f32322d3233203d3e20323638383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.152.0/22
Signature Algorithm: sha256WithRSAEncryption
c6:97:f3:c2:72:90:8d:3d:46:37:59:76:14:b1:5d:5f:ba:5e:
e0:3d:5c:dd:10:02:62:ce:48:b8:a0:20:46:a9:5e:8b:93:1a:
88:c6:17:21:a1:49:83:88:32:99:01:9d:79:8e:fd:1e:08:26:
fd:e2:dd:12:a2:1e:86:c9:3b:fb:ec:18:26:60:3a:d8:2e:15:
01:ab:bc:c9:60:5e:8b:fb:c2:13:9d:46:cb:bb:fe:3d:66:ca:
97:f1:01:38:08:fc:06:9f:ea:64:ef:8e:bc:50:6a:5e:79:ae:
26:97:a7:fe:8e:7f:99:00:de:7b:af:a9:38:cd:91:90:4c:07:
00:ff:c6:c2:dd:3e:cd:ed:21:f7:ad:c3:23:c8:47:e6:39:f0:
60:d9:92:be:03:48:1c:2b:da:ed:80:15:39:f8:50:cb:d8:c7:
f5:cd:7e:28:ff:35:d4:b0:04:e5:c5:f6:a6:85:46:53:81:c0:
69:02:d4:88:d2:12:e0:28:ab:a9:db:a5:c8:8f:a3:de:8b:37:
92:b2:09:97:e5:28:90:8a:9e:77:c4:d2:49:ca:a6:22:5d:ff:
8b:25:d1:2a:b8:8b:62:48:a9:21:91:fe:30:f8:09:bd:cd:f3:
c8:81:c0:a8:9e:82:ec:11:03:d6:2b:d4:96:83:a8:99:ea:8f:
96:5d:97:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCyND4Fg9X3kdalsTYqzSV9WktI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEU3RTFFMzhBRDRGMDNFOUFFQzJCMDRCRERGRkVEN0FC
NUFDQjgzMTAeFw0yNDA1MTYxNDA4NDFaFw0yNTA1MTUxNDEzNDFaMDMxMTAvBgNV
BAMTKDFBN0JDQjlCRTFFQUNGNjVDNkE2N0ZBNEIzRDZCRDcxNzNCRTA2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahb8er8L8blghK5fBhqJ0GlPM
0Rx8n6pfsNWLdcPXxLW6zSZyAksTYNpvmD4slONX504Rdbo4TI2mhDxcxxVUJ17b
t6KixpWefRRgctSYncE7+j6rLlRuQ8JPcHZleZ0b9B1qt35LIYRtwPTmCm329TTc
pnVM7Gl4uJHjERqy5Vi5yQF75xusL9zv2cWlEWN0tJuTDx4jVDNkyLCENlEzUs3G
Hc2rDIlWQOLXZeRUfJqfQLJJRXfevyLnlox3FGdyHD71exOUnSzQAxb7TawIwcEb
1qdqycGUr5aj3/LeCcXsJNJ9sgUuj+ZY7J/V+N2CDShhv3biml26YI3co+61AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGnvLm+Hqz2XGpn+ks9a9cXO+BvowHwYDVR0j
BBgwFoAUDn4eOK1PA+muwrBL3f/terWsuDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTVHdTRvZEJOYm9YcmdoM1daUktLUm9XdnRXTHZCQ0tiRGszWWpQRjRz
UnIvMC8wRTdFMUUzOEFENEYwM0U5QUVDMkIwNEJEREZGRUQ3QUI1QUNCODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBFN0UxRTM4QUQ0RjAzRTlB
RUMyQjA0QkRERkZFRDdBQjVBQ0I4MzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E1R3U0b2RCTmJvWHJnaDNXWlJLS1JvV3Z0V0x2QkNLYkRrM1lqUEY0c1JyLzAv
MzQzNTJlMzEzNzMzMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM2
MzgzODMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrZgwDQYJKoZIhvcNAQELBQADggEBAMaX88Jy
kI09RjdZdhSxXV+6XuA9XN0QAmLOSLigIEapXouTGojGFyGhSYOIMpkBnXmO/R4I
Jv3i3RKiHobJO/vsGCZgOtguFQGrvMlgXov7whOdRsu7/j1mypfxATgI/Aaf6mTv
jrxQal55riaXp/6Of5kA3nuvqTjNkZBMBwD/xsLdPs3tIfetwyPIR+Y58GDZkr4D
SBwr2u2AFTn4UMvYx/XNfij/NdSwBOXF9qaFRlOBwGkC1IjSEuAoq6nbpciPo96L
N5KyCZflKJCKnnfE0knKpiJd/4sl0Sq4i2JIqSGR/jD4Cb3N88iBwKieguwRA9Yr
1JaDqJnqj5Zdl18=
-----END CERTIFICATE-----
Generated at Sun Oct 20 11:58:24 2024 by rpki-client on console-fra.rpki-client.org