Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
File: 34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa (raw, json)
Hash identifier: TXxQk3JhUqnAacLpDfkZIU87cViV/srO5TM8L1oLKlA=
Subject key identifier: 19:E5:5E:1C:CA:87:84:34:60:B7:DB:89:4A:0B:15:42:DF:96:6D:6C
Certificate issuer: /CN=A47835DE736948FACF597EB9C6B08AB544AE9C2A
Certificate serial: 3C9DE44753092F75116295160B833676934392F5
Authority key identifier: A4:78:35:DE:73:69:48:FA:CF:59:7E:B9:C6:B0:8A:B5:44:AE:9C:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
Signing time: Thu 04 Apr 2024 02:56:25 +0000
ROA not before: Thu 04 Apr 2024 02:51:25 +0000
ROA not after: Thu 03 Apr 2025 02:56:25 +0000
asID: 267657
IP address blocks: 45.224.112.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:9d:e4:47:53:09:2f:75:11:62:95:16:0b:83:36:76:93:43:92:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A47835DE736948FACF597EB9C6B08AB544AE9C2A
Validity
Not Before: Apr 4 02:51:25 2024 GMT
Not After : Apr 3 02:56:25 2025 GMT
Subject: CN=19E55E1CCA87843460B7DB894A0B1542DF966D6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8a:a7:fa:da:f0:5b:6d:04:cb:06:eb:2e:21:
c5:a3:b4:50:ce:81:f5:9e:b0:fb:11:57:4f:42:f5:
92:d1:4f:ee:d2:4b:f2:50:5c:34:f7:e8:26:47:43:
1e:1c:75:56:0d:b1:06:fd:fa:67:65:4d:83:b3:33:
33:d1:19:e0:11:53:cf:75:36:94:9c:9d:ba:a9:2a:
77:91:ce:1d:e6:dc:e3:e1:7d:ff:16:18:46:a5:2d:
4c:4c:ed:14:a9:c8:bd:50:67:e5:27:1d:b9:0f:c7:
f9:fc:c6:e9:e7:6a:97:40:c2:de:86:07:1c:72:2d:
b5:1b:02:e2:8a:71:d9:73:60:bb:64:b0:38:45:8d:
a7:f9:5e:b2:4a:34:df:39:f4:80:2b:6b:07:8a:69:
a4:48:64:12:18:2b:65:1a:ed:3c:e5:a9:d9:03:f4:
7f:fb:4f:61:9d:ca:7d:7d:69:e4:1d:ea:d5:29:d4:
43:1e:15:8b:83:98:ef:0a:e0:56:55:cd:33:0f:19:
50:1d:2f:0d:83:f7:26:7f:33:84:e0:3f:47:24:9a:
de:69:8f:62:3f:6d:f2:f6:20:0f:63:71:d0:17:44:
96:fa:7a:4e:e7:3f:44:ea:59:2f:7d:67:bc:75:9f:
48:11:87:b4:56:bc:47:23:3c:8c:33:c8:2d:e4:4e:
d5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:E5:5E:1C:CA:87:84:34:60:B7:DB:89:4A:0B:15:42:DF:96:6D:6C
X509v3 Authority Key Identifier:
keyid:A4:78:35:DE:73:69:48:FA:CF:59:7E:B9:C6:B0:8A:B5:44:AE:9C:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A47835DE736948FACF597EB9C6B08AB544AE9C2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FXkwKwY5uyASw8Rbzq5Mxc1jcTibt1crskduRVK5N5S3/1/34352e3232342e3131322e302f32322d3234203d3e20323637363537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.112.0/22
Signature Algorithm: sha256WithRSAEncryption
83:02:70:68:fd:65:16:72:31:56:f6:eb:72:bf:f3:4d:4c:59:
37:22:25:78:ba:d4:0c:68:8b:ba:07:c5:50:20:ec:0d:11:93:
eb:41:d3:83:01:15:5c:e0:85:89:16:cc:fc:45:0b:06:c3:70:
ce:93:89:7c:d1:79:e5:1a:73:39:40:da:39:51:be:49:5e:51:
ac:57:82:89:9e:d6:95:40:40:a6:d8:df:fb:eb:09:58:87:ce:
46:5d:38:7e:46:36:2c:b4:64:13:a5:d2:51:02:6e:a4:e0:69:
05:69:ee:3a:ce:41:79:3b:e5:a2:70:52:96:02:83:77:15:f8:
47:47:46:e3:f2:e5:62:f4:31:09:11:9e:ed:0c:7f:63:4e:4a:
6a:2a:f4:0f:bb:b8:a0:96:70:dd:43:ca:2a:b9:24:ff:a4:d5:
78:9a:21:13:1f:7d:b4:6c:04:67:be:bf:8e:16:35:33:6b:de:
03:4d:98:c4:72:c0:82:f3:c5:fe:f4:92:2b:3f:86:9e:58:d8:
24:37:32:0a:fd:ee:c9:d9:31:48:65:9a:a9:3f:e9:de:71:df:
f1:f2:f6:76:f1:a3:f1:b7:d4:4a:2d:4f:6a:13:ed:43:93:ac:
4b:f6:30:f6:cf:6a:7e:b5:1d:08:3c:0e:d1:79:0c:78:ea:c4:
06:bc:89:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPJ3kR1MJL3URYpUWC4M2dpNDkvUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ3ODM1REU3MzY5NDhGQUNGNTk3RUI5QzZCMDhBQjU0
NEFFOUMyQTAeFw0yNDA0MDQwMjUxMjVaFw0yNTA0MDMwMjU2MjVaMDMxMTAvBgNV
BAMTKDE5RTU1RTFDQ0E4Nzg0MzQ2MEI3REI4OTRBMEIxNTQyREY5NjZENkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHiqf62vBbbQTLBusuIcWjtFDO
gfWesPsRV09C9ZLRT+7SS/JQXDT36CZHQx4cdVYNsQb9+mdlTYOzMzPRGeARU891
NpScnbqpKneRzh3m3OPhff8WGEalLUxM7RSpyL1QZ+UnHbkPx/n8xunnapdAwt6G
BxxyLbUbAuKKcdlzYLtksDhFjaf5XrJKNN859IAraweKaaRIZBIYK2Ua7TzlqdkD
9H/7T2Gdyn19aeQd6tUp1EMeFYuDmO8K4FZVzTMPGVAdLw2D9yZ/M4TgP0ckmt5p
j2I/bfL2IA9jcdAXRJb6ek7nP0TqWS99Z7x1n0gRh7RWvEcjPIwzyC3kTtXFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGeVeHMqHhDRgt9uJSgsVQt+WbWwwHwYDVR0j
BBgwFoAUpHg13nNpSPrPWX65xrCKtUSunCowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRlhrd0t3WTV1eUFTdzhSYnpxNU14YzFqY1RpYnQxY3Jza2R1UlZLNU41
UzMvMS9BNDc4MzVERTczNjk0OEZBQ0Y1OTdFQjlDNkIwOEFCNTQ0QUU5QzJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E0NzgzNURFNzM2OTQ4RkFD
RjU5N0VCOUM2QjA4QUI1NDRBRTlDMkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZYa3dLd1k1dXlBU3c4UmJ6cTVNeGMxamNUaWJ0MWNyc2tkdVJWSzVONVMzLzEv
MzQzNTJlMzIzMjM0MmUzMTMxMzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4HAwDQYJKoZIhvcNAQELBQADggEBAIMCcGj9
ZRZyMVb263K/801MWTciJXi61Axoi7oHxVAg7A0Rk+tB04MBFVzghYkWzPxFCwbD
cM6TiXzReeUaczlA2jlRvkleUaxXgome1pVAQKbY3/vrCViHzkZdOH5GNiy0ZBOl
0lECbqTgaQVp7jrOQXk75aJwUpYCg3cV+EdHRuPy5WL0MQkRnu0Mf2NOSmoq9A+7
uKCWcN1Dyiq5JP+k1XiaIRMffbRsBGe+v44WNTNr3gNNmMRywILzxf70kis/hp5Y
2CQ3Mgr97snZMUhlmqk/6d5x3/Hy9nbxo/G31EotT2oT7UOTrEv2MPbPan61HQg8
DtF5DHjqxAa8iZ8=
-----END CERTIFICATE-----
Generated at Fri Nov 1 10:59:34 2024 by rpki-client on console-ams.rpki-client.org