Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235322e302f32322d3232203d3e20323637393334.roa
File: 34352e3136352e3235322e302f32322d3232203d3e20323637393334.roa (raw, json)
Hash identifier: /nvqYCl/5j+/f97N5QepLgjibmM4/vp1XSG6nJS+ypI=
Subject key identifier: 66:7E:34:DB:94:7C:D1:21:B5:EA:08:4F:BC:07:E7:F5:2B:36:21:E4
Certificate issuer: /CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Certificate serial: 1769A2579BBF6FBA9E0F21FEF36419E018103C63
Authority key identifier: 3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235322e302f32322d3232203d3e20323637393334.roa
Signing time: Thu 04 Apr 2024 19:03:23 +0000
ROA not before: Thu 04 Apr 2024 18:58:23 +0000
ROA not after: Thu 03 Apr 2025 19:03:23 +0000
asID: 267934
IP address blocks: 45.165.252.0/22 maxlen: 22
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:69:a2:57:9b:bf:6f:ba:9e:0f:21:fe:f3:64:19:e0:18:10:3c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B
Validity
Not Before: Apr 4 18:58:23 2024 GMT
Not After : Apr 3 19:03:23 2025 GMT
Subject: CN=667E34DB947CD121B5EA084FBC07E7F52B3621E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:08:82:9a:06:eb:ee:60:97:74:d5:82:17:08:
8b:60:fb:4a:ab:1f:71:1d:8c:b9:00:5c:db:1b:8b:
28:a5:47:45:61:24:ef:e7:0c:1f:a3:9a:c0:b4:b0:
4a:aa:69:bc:d8:97:5a:0e:69:7a:a5:6f:31:9d:48:
10:2e:05:7e:e5:dd:08:dc:20:a8:1e:c7:b7:03:3f:
28:eb:00:25:44:ff:76:47:ce:53:bf:19:2f:e2:96:
09:05:92:d5:4d:5a:ba:f2:f7:65:32:57:2d:dd:b1:
36:6b:51:db:72:6e:a8:8b:c2:87:66:8f:22:c1:72:
95:1b:5b:9b:ad:45:6f:fe:18:51:3f:3d:c1:1c:6a:
97:8e:a7:cd:a8:e6:89:17:2b:11:ac:4a:e6:78:b5:
49:89:ac:7a:30:25:7b:c4:b4:0c:e4:31:af:9a:97:
5b:6b:73:2a:bb:c7:93:61:e3:70:72:42:0a:68:62:
93:2a:1f:0c:7a:88:bb:89:5e:b1:1e:76:dd:5b:5c:
e6:68:36:57:ab:82:f6:83:57:74:3d:bf:a9:62:c2:
b6:14:76:00:dc:a3:6e:fd:95:89:ef:60:30:66:6e:
a0:c7:c9:3a:56:e7:9c:ce:b9:cf:c2:84:bf:87:3e:
8e:66:b5:dd:9d:83:b2:d6:0f:78:82:14:b2:91:89:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:7E:34:DB:94:7C:D1:21:B5:EA:08:4F:BC:07:E7:F5:2B:36:21:E4
X509v3 Authority Key Identifier:
keyid:3F:AF:66:8A:2A:7B:49:E1:C5:1B:F4:8C:7C:EA:FB:6F:AC:37:57:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FAF668A2A7B49E1C51BF48C7CEAFB6FAC37576B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CikieeVDn3QBt3qq5bkP3jFNc6jQyNQ2M9woAJHi8Jv4/1/34352e3136352e3235322e302f32322d3232203d3e20323637393334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:c3:54:38:51:4b:20:0c:2d:f7:4e:ec:0c:fb:e9:0e:75:0d:
11:d0:de:e5:77:15:e5:66:f5:42:59:c4:91:1e:d0:8f:d2:f3:
43:2e:b7:7c:a8:a9:2a:3b:30:06:cb:c5:4c:27:33:87:17:b3:
21:50:05:37:ae:f2:09:78:5b:35:c0:7b:a9:a8:61:a9:0f:48:
35:09:11:e6:fd:d6:7a:de:4d:bc:52:9b:42:c5:a9:c2:63:c9:
34:c8:26:7e:9d:26:00:0b:d5:4b:91:1f:ee:cb:4d:80:5f:a6:
f9:8a:5d:11:da:cf:cd:95:2a:b7:f1:a4:d0:4d:6a:49:9a:6e:
e0:98:6d:f8:ec:ce:3b:44:27:bf:76:0d:1f:ad:3a:7b:aa:db:
2d:b7:4a:06:41:f4:a1:32:a5:e8:87:40:47:38:c9:b6:79:85:
15:8f:72:84:d9:56:6d:35:94:1f:31:f0:eb:f9:6f:3f:43:05:
cc:c4:a6:be:d6:ef:88:92:f6:22:ca:50:73:9a:d6:19:30:d3:
fc:c7:9b:0a:a5:3b:ef:a8:29:44:55:90:c7:e8:46:02:02:93:
9e:91:a0:de:dd:9e:e4:44:21:b1:74:33:9d:90:f3:52:39:5e:
89:26:30:64:1b:df:e3:70:83:cc:85:4a:95:45:2f:a9:8e:75:
ab:5e:6d:5e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF2miV5u/b7qeDyH+82QZ4BgQPGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBRjY2OEEyQTdCNDlFMUM1MUJGNDhDN0NFQUZCNkZB
QzM3NTc2QjAeFw0yNDA0MDQxODU4MjNaFw0yNTA0MDMxOTAzMjNaMDMxMTAvBgNV
BAMTKDY2N0UzNERCOTQ3Q0QxMjFCNUVBMDg0RkJDMDdFN0Y1MkIzNjIxRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkCIKaBuvuYJd01YIXCItg+0qr
H3EdjLkAXNsbiyilR0VhJO/nDB+jmsC0sEqqabzYl1oOaXqlbzGdSBAuBX7l3Qjc
IKgex7cDPyjrACVE/3ZHzlO/GS/ilgkFktVNWrry92UyVy3dsTZrUdtybqiLwodm
jyLBcpUbW5utRW/+GFE/PcEcapeOp82o5okXKxGsSuZ4tUmJrHowJXvEtAzkMa+a
l1trcyq7x5Nh43ByQgpoYpMqHwx6iLuJXrEedt1bXOZoNlergvaDV3Q9v6liwrYU
dgDco279lYnvYDBmbqDHyTpW55zOuc/ChL+HPo5mtd2dg7LWD3iCFLKRicsfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZn4025R80SG16ghPvAfn9Ss2IeQwHwYDVR0j
BBgwFoAUP69miip7SeHFG/SMfOr7b6w3V2swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ2lraWVlVkRuM1FCdDNxcTVia1AzakZOYzZqUXlOUTJNOXdvQUpIaThK
djQvMS8zRkFGNjY4QTJBN0I0OUUxQzUxQkY0OEM3Q0VBRkI2RkFDMzc1NzZCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQUY2NjhBMkE3QjQ5RTFD
NTFCRjQ4QzdDRUFGQjZGQUMzNzU3NkIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Npa2llZVZEbjNRQnQzcXE1YmtQM2pGTmM2alF5TlEyTTl3b0FKSGk4SnY0LzEv
MzQzNTJlMzEzNjM1MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczOTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItpfwwDQYJKoZIhvcNAQELBQADggEBAKnDVDhR
SyAMLfdO7Az76Q51DRHQ3uV3FeVm9UJZxJEe0I/S80Mut3yoqSo7MAbLxUwnM4cX
syFQBTeu8gl4WzXAe6moYakPSDUJEeb91nreTbxSm0LFqcJjyTTIJn6dJgAL1UuR
H+7LTYBfpvmKXRHaz82VKrfxpNBNakmabuCYbfjszjtEJ792DR+tOnuq2y23SgZB
9KEypeiHQEc4ybZ5hRWPcoTZVm01lB8x8Ov5bz9DBczEpr7W74iS9iLKUHOa1hkw
0/zHmwqlO++oKURVkMfoRgICk56RoN7dnuREIbF0M52Q81I5XokmMGQb3+Nwg8yF
SpVFL6mOdatebV4=
-----END CERTIFICATE-----
Generated at Sun Aug 11 12:33:45 2024 by rpki-client on console-ams.rpki-client.org