Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/34352e3136382e36302e302f32322d3234203d3e20323638303331.roa
File: 34352e3136382e36302e302f32322d3234203d3e20323638303331.roa (raw, json)
Hash identifier: avuhOFGxjvbxuQtkfUBB7ZvICX28V9ivUvxHfUUZOwU=
Subject key identifier: 2D:1A:3B:9A:3D:27:D6:D8:85:5F:A1:B1:25:61:1B:34:89:42:FA:2D
Certificate issuer: /CN=F27941693B376C4C67B0FD176F1538F4B07BE79E
Certificate serial: 336C5572215BBC25ED2FF4B8E03B3E8762A125EC
Authority key identifier: F2:79:41:69:3B:37:6C:4C:67:B0:FD:17:6F:15:38:F4:B0:7B:E7:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27941693B376C4C67B0FD176F1538F4B07BE79E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/34352e3136382e36302e302f32322d3234203d3e20323638303331.roa
Signing time: Mon 22 Jul 2024 12:09:39 +0000
ROA not before: Mon 22 Jul 2024 12:04:39 +0000
ROA not after: Mon 21 Jul 2025 12:09:39 +0000
asID: 268031
IP address blocks: 45.168.60.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:6c:55:72:21:5b:bc:25:ed:2f:f4:b8:e0:3b:3e:87:62:a1:25:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F27941693B376C4C67B0FD176F1538F4B07BE79E
Validity
Not Before: Jul 22 12:04:39 2024 GMT
Not After : Jul 21 12:09:39 2025 GMT
Subject: CN=2D1A3B9A3D27D6D8855FA1B125611B348942FA2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:de:4e:b8:48:69:de:0d:d5:58:38:b8:ac:
72:e0:9b:d2:85:12:71:90:e5:ff:d5:2d:59:8e:0a:
9f:f6:c7:96:04:31:aa:51:c7:5e:18:5c:61:11:34:
42:28:db:7d:29:52:a2:7b:b8:69:4b:cf:ba:fd:a9:
fc:7f:85:6b:b8:bb:ad:1e:ff:8c:01:50:c8:38:3a:
e8:fe:cd:f7:85:a9:ac:c9:b2:10:7d:e8:21:4a:c8:
e9:89:98:38:e4:c3:1e:39:07:54:e5:0f:f3:e8:fd:
26:a7:a3:76:df:47:e9:9c:5b:33:a5:3c:60:c6:a2:
4f:c6:eb:d5:fa:d2:0c:bd:7c:a1:a1:5f:65:6a:48:
3d:c0:a0:f5:3d:a2:ed:ba:fe:e0:36:ba:c3:b4:bb:
c6:86:04:6a:b4:2e:48:25:50:99:05:ac:19:3e:a6:
98:ee:bd:a4:18:cf:3e:00:92:31:b5:1c:bb:86:6d:
13:07:d8:20:ff:e2:03:7f:04:96:6a:0f:fa:5c:8d:
d8:7d:fb:72:f4:14:bd:be:07:35:cb:31:e3:bc:02:
37:6b:3c:f0:4e:68:ea:ba:02:b4:8b:75:74:0b:e4:
14:ee:f0:70:47:23:01:fd:1f:07:4c:4a:34:6f:52:
48:36:da:91:0c:af:c1:82:3a:de:b4:f0:d6:6d:ad:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:1A:3B:9A:3D:27:D6:D8:85:5F:A1:B1:25:61:1B:34:89:42:FA:2D
X509v3 Authority Key Identifier:
keyid:F2:79:41:69:3B:37:6C:4C:67:B0:FD:17:6F:15:38:F4:B0:7B:E7:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/F27941693B376C4C67B0FD176F1538F4B07BE79E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F27941693B376C4C67B0FD176F1538F4B07BE79E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/F7ekXhVfuSpCV1W1u6nD8WE31gpBDkAz1sNM8e4A1MdT/0/34352e3136382e36302e302f32322d3234203d3e20323638303331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.60.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:2b:b4:3f:3c:9e:9a:ba:24:fa:31:4e:f4:cf:cf:7a:71:b8:
09:05:16:2d:b4:45:83:3f:3f:dc:58:bf:7c:f5:0a:b2:e2:1d:
b9:96:e4:38:0c:f1:31:45:f4:0b:4a:36:74:fc:aa:12:b3:45:
5d:b5:b6:ea:bd:bc:07:5c:97:99:00:46:53:db:0c:13:61:b3:
5e:5b:7f:dd:21:89:6f:dc:9b:a4:ba:f9:61:87:6e:30:db:e5:
3e:e0:17:27:a9:d3:9a:dd:25:a4:5c:28:67:88:e1:f8:7f:7c:
cd:8f:5c:75:d2:35:8d:c6:ae:1a:c4:0a:29:19:74:94:1a:6f:
9a:1f:7c:f4:98:dc:6f:76:8f:d9:de:71:e3:b2:45:c6:a0:84:
e6:21:62:67:89:91:57:c8:1c:a3:1e:e2:79:75:af:cd:97:e9:
a9:44:bd:2a:65:c1:3a:ba:d2:70:6c:00:9d:4f:71:9f:3a:65:
a3:b6:93:fb:8b:87:52:43:9e:ed:5c:8b:95:bd:34:9a:cf:e3:
6e:91:e0:0e:e8:37:7f:2a:89:27:88:53:99:34:5f:bb:b8:f6:
c3:72:ea:f2:02:4d:9e:12:d6:97:4e:e9:60:af:02:92:90:5a:
ac:d5:d7:b4:13:a8:36:87:05:a4:85:5d:9c:c5:cc:9a:35:44:
30:b9:c6:3c
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUM2xVciFbvCXtL/S44Ds+h2KhJewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjI3OTQxNjkzQjM3NkM0QzY3QjBGRDE3NkYxNTM4RjRC
MDdCRTc5RTAeFw0yNDA3MjIxMjA0MzlaFw0yNTA3MjExMjA5MzlaMDMxMTAvBgNV
BAMTKDJEMUEzQjlBM0QyN0Q2RDg4NTVGQTFCMTI1NjExQjM0ODk0MkZBMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/t5OuEhp3g3VWDi4rHLgm9KF
EnGQ5f/VLVmOCp/2x5YEMapRx14YXGERNEIo230pUqJ7uGlLz7r9qfx/hWu4u60e
/4wBUMg4Ouj+zfeFqazJshB96CFKyOmJmDjkwx45B1TlD/Po/Sano3bfR+mcWzOl
PGDGok/G69X60gy9fKGhX2VqSD3AoPU9ou26/uA2usO0u8aGBGq0LkglUJkFrBk+
ppjuvaQYzz4AkjG1HLuGbRMH2CD/4gN/BJZqD/pcjdh9+3L0FL2+BzXLMeO8Ajdr
PPBOaOq6ArSLdXQL5BTu8HBHIwH9HwdMSjRvUkg22pEMr8GCOt608NZtrVNdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQULRo7mj0n1tiFX6GxJWEbNIlC+i0wHwYDVR0j
BBgwFoAU8nlBaTs3bExnsP0XbxU49LB7554wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRjdla1hoVmZ1U3BDVjFXMXU2bkQ4V0UzMWdwQkRrQXoxc05NOGU0QTFN
ZFQvMC9GMjc5NDE2OTNCMzc2QzRDNjdCMEZEMTc2RjE1MzhGNEIwN0JFNzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyNzk0MTY5M0IzNzZDNEM2
N0IwRkQxNzZGMTUzOEY0QjA3QkU3OUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Y3ZWtYaFZmdVNwQ1YxVzF1Nm5EOFdFMzFncEJEa0F6MXNOTThlNEExTWRULzAv
MzQzNTJlMzEzNjM4MmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzMzMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLag8MA0GCSqGSIb3DQEBCwUAA4IBAQAeK7Q/PJ6a
uiT6MU70z896cbgJBRYttEWDPz/cWL989Qqy4h25luQ4DPExRfQLSjZ0/KoSs0Vd
tbbqvbwHXJeZAEZT2wwTYbNeW3/dIYlv3Jukuvlhh24w2+U+4BcnqdOa3SWkXChn
iOH4f3zNj1x10jWNxq4axAopGXSUGm+aH3z0mNxvdo/Z3nHjskXGoITmIWJniZFX
yByjHuJ5da/Nl+mpRL0qZcE6utJwbACdT3GfOmWjtpP7i4dSQ57tXIuVvTSaz+Nu
keAO6Dd/KokniFOZNF+7uPbDcuryAk2eEtaXTulgrwKSkFqs1de0E6g2hwWkhV2c
xcyaNUQwucY8
-----END CERTIFICATE-----
Generated at Wed Aug 21 09:45:53 2024 by rpki-client on console-ams.rpki-client.org