Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323637353533.roa
File: 34352e37302e37322e302f32322d3332203d3e20323637353533.roa (raw, json)
Hash identifier: crErERrtWKPnFOv4keuESIk8gy34nhfEHsyht4Tji4I=
Subject key identifier: 3A:F1:23:30:B1:67:53:85:4D:F4:82:BA:A1:3F:E3:E3:6D:96:27:E3
Certificate issuer: /CN=E25F3D52DD8C272CC64492A7621AE551E084A019
Certificate serial: 44407C57F3276D053D2583BECEBEE7BA938C3C55
Authority key identifier: E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323637353533.roa
Signing time: Wed 05 Jun 2024 13:19:19 +0000
ROA not before: Wed 05 Jun 2024 13:14:19 +0000
ROA not after: Wed 04 Jun 2025 13:19:19 +0000
asID: 267553
IP address blocks: 45.70.72.0/22 maxlen: 32
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:40:7c:57:f3:27:6d:05:3d:25:83:be:ce:be:e7:ba:93:8c:3c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E25F3D52DD8C272CC64492A7621AE551E084A019
Validity
Not Before: Jun 5 13:14:19 2024 GMT
Not After : Jun 4 13:19:19 2025 GMT
Subject: CN=3AF12330B16753854DF482BAA13FE3E36D9627E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e4:3e:b4:ec:b3:b2:04:02:35:b9:d8:1a:c7:
ab:59:81:8f:40:81:9f:00:9d:64:0b:fd:cc:ae:04:
31:50:54:6f:07:59:7c:85:46:c5:02:5c:ff:e0:49:
33:97:3e:ca:c8:8a:33:5f:c0:d1:0e:d5:44:4a:33:
51:a9:ab:3b:71:1a:54:7f:51:82:a7:02:e3:9e:09:
26:b9:52:64:3f:03:d4:e3:2b:e4:f0:67:81:46:77:
f1:0b:00:9e:ee:4e:94:13:44:81:4e:63:8b:d4:4c:
e9:c1:f6:16:1e:75:16:ca:8c:97:81:81:68:7c:0c:
5f:b0:a7:c9:02:2f:0c:dc:60:be:10:d8:3f:bf:d6:
79:3b:72:37:21:1b:70:f4:d4:52:d9:97:74:7e:ee:
c2:2b:9d:a5:88:a0:50:b9:7b:b9:8e:1f:d7:6b:ce:
95:21:ba:73:e6:a1:51:93:ea:18:25:4d:2e:90:c0:
f1:a8:60:d4:44:a9:59:b3:e8:d6:a3:77:14:bd:5e:
81:fe:8c:04:35:b0:b2:a3:e5:77:74:69:32:49:ec:
a7:2c:05:fc:6d:30:77:ec:9d:cc:63:a7:d5:7b:a2:
fd:4a:a0:12:c5:8c:82:20:30:71:6f:a5:82:6d:d0:
93:bc:01:e2:17:e9:1e:8c:d1:0c:f1:56:81:1a:a4:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F1:23:30:B1:67:53:85:4D:F4:82:BA:A1:3F:E3:E3:6D:96:27:E3
X509v3 Authority Key Identifier:
keyid:E2:5F:3D:52:DD:8C:27:2C:C6:44:92:A7:62:1A:E5:51:E0:84:A0:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/E25F3D52DD8C272CC64492A7621AE551E084A019.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E25F3D52DD8C272CC64492A7621AE551E084A019.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSYKkKJHK2jBaQQMdVdW9rn3rvVx9fsN1i2smfeXLbEw/0/34352e37302e37322e302f32322d3332203d3e20323637353533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:9b:1e:23:dc:25:1a:69:3e:af:61:d3:a5:bc:3d:75:f1:48:
68:3b:a5:77:33:3d:61:1c:21:29:24:84:b4:e9:19:29:9e:5b:
45:60:19:ec:1e:17:1c:94:db:b2:ce:da:a6:80:36:b4:2b:cf:
3d:10:2f:d2:b4:20:fc:8d:22:8a:d0:2c:ba:27:b3:7f:d3:0b:
03:73:00:63:7d:12:62:05:1b:3e:df:73:92:cc:e1:79:93:96:
7e:59:51:64:6f:b5:c6:d7:48:b4:ea:8e:89:8b:4c:af:26:93:
ae:fc:05:10:93:55:16:62:57:15:c3:96:c3:b8:13:b9:57:90:
52:24:7a:fe:a7:7e:b3:cb:77:74:60:32:be:84:c0:03:ba:da:
fa:81:84:98:d3:91:10:4f:b4:ea:65:60:8e:d6:22:92:df:23:
83:aa:bb:5c:e3:a3:bb:5b:b3:30:b5:79:26:30:9a:86:1e:56:
fc:0b:57:64:5b:97:1f:01:c4:2c:4b:1a:8d:49:8b:d7:ae:84:
c4:ac:22:cb:01:f7:36:64:b5:2d:5d:13:84:cd:24:89:a7:e7:
07:3a:3c:32:8d:a6:e6:e4:c1:8c:38:d3:33:cf:45:9b:8f:73:
f9:fc:89:5c:e1:29:5b:d6:15:9d:7e:9c:db:29:5d:c7:ea:87:
c6:6d:a9:81
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUREB8V/MnbQU9JYO+zr7nupOMPFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTI1RjNENTJERDhDMjcyQ0M2NDQ5MkE3NjIxQUU1NTFF
MDg0QTAxOTAeFw0yNDA2MDUxMzE0MTlaFw0yNTA2MDQxMzE5MTlaMDMxMTAvBgNV
BAMTKDNBRjEyMzMwQjE2NzUzODU0REY0ODJCQUExM0ZFM0UzNkQ5NjI3RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL5D607LOyBAI1udgax6tZgY9A
gZ8AnWQL/cyuBDFQVG8HWXyFRsUCXP/gSTOXPsrIijNfwNEO1URKM1GpqztxGlR/
UYKnAuOeCSa5UmQ/A9TjK+TwZ4FGd/ELAJ7uTpQTRIFOY4vUTOnB9hYedRbKjJeB
gWh8DF+wp8kCLwzcYL4Q2D+/1nk7cjchG3D01FLZl3R+7sIrnaWIoFC5e7mOH9dr
zpUhunPmoVGT6hglTS6QwPGoYNREqVmz6NajdxS9XoH+jAQ1sLKj5Xd0aTJJ7Kcs
BfxtMHfsncxjp9V7ov1KoBLFjIIgMHFvpYJt0JO8AeIX6R6M0QzxVoEapAQ5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOvEjMLFnU4VN9IK6oT/j422WJ+MwHwYDVR0j
BBgwFoAU4l89Ut2MJyzGRJKnYhrlUeCEoBkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFNZS2tLSkhLMmpCYVFRTWRWZFc5cm4zcnZWeDlmc04xaTJzbWZlWExi
RXcvMC9FMjVGM0Q1MkREOEMyNzJDQzY0NDkyQTc2MjFBRTU1MUUwODRBMDE5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0UyNUYzRDUyREQ4QzI3MkND
NjQ0OTJBNzYyMUFFNTUxRTA4NEEwMTkuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RTWUtrS0pISzJqQmFRUU1kVmRXOXJuM3J2Vng5ZnNOMWkyc21mZVhMYkV3LzAv
MzQzNTJlMzczMDJlMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM1
MzUzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1GSDANBgkqhkiG9w0BAQsFAAOCAQEAp5seI9wlGmk+
r2HTpbw9dfFIaDuldzM9YRwhKSSEtOkZKZ5bRWAZ7B4XHJTbss7apoA2tCvPPRAv
0rQg/I0iitAsuiezf9MLA3MAY30SYgUbPt9zkszheZOWfllRZG+1xtdItOqOiYtM
ryaTrvwFEJNVFmJXFcOWw7gTuVeQUiR6/qd+s8t3dGAyvoTAA7ra+oGEmNOREE+0
6mVgjtYikt8jg6q7XOOju1uzMLV5JjCahh5W/AtXZFuXHwHELEsajUmL166ExKwi
ywH3NmS1LV0ThM0kiafnBzo8Mo2m5uTBjDjTM89Fm49z+fyJXOEpW9YVnX6c2yld
x+qHxm2pgQ==
-----END CERTIFICATE-----
Generated at Sun Jul 28 09:11:37 2024 by rpki-client on console-fra.rpki-client.org