Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa
File: 34352e37302e3233322e302f32322d3234203d3e20323632323732.roa (raw, json)
Hash identifier: 9xPQw6543tl8Jj+lvwkttLszJ2LPOBr1qLHx81xJr98=
Subject key identifier: 77:94:0A:D4:82:04:1E:B1:D4:9B:C2:38:58:BC:26:77:72:2D:91:05
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 47B41D4320D7F7DCADAD32B8890A22BBB2E65EB5
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa
Signing time: Wed 12 Jun 2024 13:16:56 +0000
ROA not before: Wed 12 Jun 2024 13:11:56 +0000
ROA not after: Wed 11 Jun 2025 13:16:56 +0000
asID: 262272
IP address blocks: 45.70.232.0/22 maxlen: 24
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b4:1d:43:20:d7:f7:dc:ad:ad:32:b8:89:0a:22:bb:b2:e6:5e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:11:56 2024 GMT
Not After : Jun 11 13:16:56 2025 GMT
Subject: CN=77940AD482041EB1D49BC23858BC2677722D9105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6d:bb:8e:3c:a5:8c:a4:87:5d:cb:32:1c:e8:
de:df:98:97:a1:68:55:93:4a:1d:44:fe:67:c3:03:
a7:88:b8:d0:2a:f1:f5:b6:b3:d9:50:2e:d9:16:a0:
60:fe:91:df:bc:32:7d:26:6f:f5:9e:b3:13:43:ae:
f8:36:72:b9:1d:d7:59:61:4c:66:cd:d1:cb:a9:51:
13:bd:1d:92:33:3b:d2:67:cb:9c:12:65:61:40:b8:
12:60:7e:a3:02:c4:ed:5e:a4:54:c2:1f:38:28:cc:
c1:74:8a:8a:2f:5e:54:33:8f:2f:97:21:14:29:ac:
72:3c:85:30:2d:97:ea:1e:b2:ef:bd:b9:64:1d:b5:
7c:5e:50:55:83:53:47:7f:ec:7c:74:17:cb:5f:37:
d2:39:90:b1:7f:76:27:47:5b:b5:0b:f7:ac:9b:57:
4d:79:6b:cf:e8:28:42:85:fd:cc:90:e2:3e:39:6f:
87:fe:bc:29:20:cc:5c:be:cc:35:4c:e2:d9:36:56:
20:79:5f:d4:70:4f:41:27:7f:96:b0:01:8b:05:6c:
1c:ad:c3:7c:64:40:f3:38:46:ee:18:e7:12:9f:4c:
fd:e4:c0:3b:a3:ea:5d:68:93:69:69:dc:22:5e:7f:
15:76:3b:c4:62:40:b8:51:e9:50:7a:9e:ee:4f:53:
76:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:94:0A:D4:82:04:1E:B1:D4:9B:C2:38:58:BC:26:77:72:2D:91:05
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.232.0/22
Signature Algorithm: sha256WithRSAEncryption
80:3b:50:55:b9:40:d3:cd:b2:86:0c:a4:40:f1:34:3b:8d:57:
1f:63:31:0a:a4:bd:2f:94:2e:c4:dc:69:86:11:6d:1d:ab:4f:
3c:3e:6a:3f:b0:34:5e:e4:99:07:68:0f:26:5d:f5:6e:2e:26:
3c:0f:11:d7:9b:90:7d:ff:46:2c:2f:17:8d:1b:cc:22:76:ff:
de:ca:ed:98:56:6d:bd:42:d9:40:f8:58:55:36:b9:78:2a:a9:
37:a8:6c:7a:dd:fd:f9:35:a6:0b:93:ac:44:a5:c4:c2:36:b4:
13:f9:19:6a:6d:e9:9a:02:eb:a0:7a:30:2f:0d:90:e9:b3:e0:
b8:02:f8:cd:35:6d:b6:d5:97:9b:20:dd:f2:df:db:7a:d0:af:
da:d4:60:7c:27:a6:e7:90:f6:63:13:ba:e7:0f:42:42:01:6a:
98:48:04:4c:53:90:db:86:37:e4:82:8d:85:06:10:2c:7b:88:
c0:e0:de:b3:c4:14:37:ce:85:8a:70:75:ca:a5:7f:26:9d:ab:
1d:ce:53:ed:50:fe:0c:f1:43:8f:82:2c:d0:00:cd:e1:f8:98:
46:b6:ab:33:c5:b7:7a:03:35:bb:86:61:65:24:29:45:94:e2:
9b:63:cd:22:fe:74:03:fb:54:06:47:20:55:2e:97:7b:e7:31:
4c:e1:10:ac
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR7QdQyDX99ytrTK4iQoiu7LmXrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEVCNTY0MEU1RTUyNzg3OEZDOTQ2QzdFNDA0REVFRjBG
OTJDQjUzRjAeFw0yNDA2MTIxMzExNTZaFw0yNTA2MTExMzE2NTZaMDMxMTAvBgNV
BAMTKDc3OTQwQUQ0ODIwNDFFQjFENDlCQzIzODU4QkMyNjc3NzIyRDkxMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabbuOPKWMpIddyzIc6N7fmJeh
aFWTSh1E/mfDA6eIuNAq8fW2s9lQLtkWoGD+kd+8Mn0mb/WesxNDrvg2crkd11lh
TGbN0cupURO9HZIzO9Jny5wSZWFAuBJgfqMCxO1epFTCHzgozMF0ioovXlQzjy+X
IRQprHI8hTAtl+oesu+9uWQdtXxeUFWDU0d/7Hx0F8tfN9I5kLF/didHW7UL96yb
V015a8/oKEKF/cyQ4j45b4f+vCkgzFy+zDVM4tk2ViB5X9RwT0Enf5awAYsFbByt
w3xkQPM4Ru4Y5xKfTP3kwDuj6l1ok2lp3CJefxV2O8RiQLhR6VB6nu5PU3YVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUd5QK1IIEHrHUm8I4WLwmd3ItkQUwHwYDVR0j
BBgwFoAUjrVkDl5SeHj8lGx+QE3u8PkstT8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDNmWHVZS1RoeDRvUGZvZnhHUVU2Q0pwc21MbXlzd05tQzZXdTZyMW1n
VUsvMS84RUI1NjQwRTVFNTI3ODc4RkM5NDZDN0U0MDRERUVGMEY5MkNCNTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFQjU2NDBFNUU1Mjc4NzhG
Qzk0NkM3RTQwNERFRUYwRjkyQ0I1M0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0gzZlh1WUtUaHg0b1Bmb2Z4R1FVNkNKcHNtTG15c3dObUM2V3U2cjFtZ1VLLzEv
MzQzNTJlMzczMDJlMzIzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjMy
MzIzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUboMA0GCSqGSIb3DQEBCwUAA4IBAQCAO1BVuUDT
zbKGDKRA8TQ7jVcfYzEKpL0vlC7E3GmGEW0dq088Pmo/sDRe5JkHaA8mXfVuLiY8
DxHXm5B9/0YsLxeNG8widv/eyu2YVm29QtlA+FhVNrl4Kqk3qGx63f35NaYLk6xE
pcTCNrQT+RlqbemaAuugejAvDZDps+C4AvjNNW221ZebIN3y39t60K/a1GB8J6bn
kPZjE7rnD0JCAWqYSARMU5Dbhjfkgo2FBhAse4jA4N6zxBQ3zoWKcHXKpX8mnasd
zlPtUP4M8UOPgizQAM3h+JhGtqszxbd6AzW7hmFlJClFlOKbY80i/nQD+1QGRyBV
Lpd75zFM4RCs
-----END CERTIFICATE-----
Generated at Mon Jul 8 17:40:59 2024 by rpki-client on console-ams.rpki-client.org