Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35342e302f32332d3233203d3e20323639343536.roa
File: 34352e3138372e35342e302f32332d3233203d3e20323639343536.roa (raw, json)
Hash identifier: 9L7bxH86jS39cDvJGPT2YKxUuKWVOxx3DMxIOfcUnBU=
Subject key identifier: AC:85:D5:08:9D:97:75:9A:8D:87:75:34:DD:05:AC:41:97:B7:86:88
Certificate issuer: /CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Certificate serial: 738095CB9F9E1B520BFE6E1EB6152636D31FCFED
Authority key identifier: 4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35342e302f32332d3233203d3e20323639343536.roa
Signing time: Tue 26 Dec 2023 15:27:30 +0000
ROA not before: Tue 26 Dec 2023 15:22:30 +0000
ROA not after: Tue 24 Dec 2024 15:27:30 +0000
asID: 269456
IP address blocks: 45.187.54.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:80:95:cb:9f:9e:1b:52:0b:fe:6e:1e:b6:15:26:36:d3:1f:cf:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E
Validity
Not Before: Dec 26 15:22:30 2023 GMT
Not After : Dec 24 15:27:30 2024 GMT
Subject: CN=AC85D5089D97759A8D877534DD05AC4197B78688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:13:06:45:95:17:1f:58:60:c8:7e:c5:7b:7a:
b3:2e:25:57:6c:3d:dd:bd:58:29:12:53:8f:4e:18:
85:8b:76:9f:fa:d3:ca:79:6b:2b:dc:b5:8e:dd:88:
3c:5c:8a:03:be:6c:bf:38:eb:bf:f6:66:27:85:c3:
7a:ce:31:1d:ab:c8:eb:4e:d8:a6:ae:b5:75:d5:5f:
ff:db:d8:b2:64:2a:e9:f2:ec:b7:b2:8f:4c:6e:3f:
75:ec:f4:3c:21:f9:43:78:24:25:ed:90:1d:20:80:
ff:41:4e:68:07:6d:eb:a4:ca:f5:fb:6f:54:11:38:
41:f3:15:c7:cf:f4:46:96:97:1d:6a:48:f8:b2:15:
77:28:64:f3:e0:e2:95:92:e1:e3:8f:fb:eb:03:e7:
8f:f0:04:33:05:72:7c:6f:35:b5:81:a2:cc:bd:d1:
31:cb:c1:6a:e3:d3:08:23:d5:04:e5:fb:56:41:6e:
4f:4f:9c:77:49:c3:52:61:1d:d7:21:7f:8a:8e:2c:
b3:c1:49:ee:9d:3c:3e:c2:28:89:da:6f:54:89:d4:
50:84:09:f4:37:06:04:ac:6b:c4:8a:fe:50:57:7a:
e9:30:d8:ec:a2:d1:68:38:fc:c8:ff:1c:6d:b9:4f:
e6:66:91:9d:2f:da:5b:6b:8e:bc:cb:3f:ca:fb:ef:
43:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:85:D5:08:9D:97:75:9A:8D:87:75:34:DD:05:AC:41:97:B7:86:88
X509v3 Authority Key Identifier:
keyid:4B:96:DD:66:FD:78:5B:BF:E0:F1:4B:6C:83:A7:B5:F6:9F:37:43:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4B96DD66FD785BBFE0F14B6C83A7B5F69F37439E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpJiMLd77oke9iTSDnkU1HygXKqd7X2dt9zqyPD1hXuR/0/34352e3138372e35342e302f32332d3233203d3e20323639343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.187.54.0/23
Signature Algorithm: sha256WithRSAEncryption
95:79:39:c9:8a:b5:8b:9a:8c:12:3f:0b:de:aa:02:9c:a5:65:
22:cd:c8:88:0e:44:b4:0e:49:74:3b:d3:e2:04:b7:df:7b:06:
a9:4d:db:86:cf:2b:e8:29:43:66:92:33:09:10:c3:a2:64:93:
72:23:86:e8:c5:c2:aa:cd:6d:ab:38:ed:9a:e0:a1:af:d4:9a:
78:c2:05:98:90:85:78:a0:99:d6:74:3d:21:3d:ad:0c:d6:80:
c9:ee:f9:a9:a8:18:cb:41:f2:c7:d0:6e:59:01:ba:03:c0:18:
7d:ad:e4:5c:20:3a:06:b0:35:2d:ff:df:2f:dc:7d:d1:5e:e5:
b4:fa:55:6e:a9:bf:a6:a2:98:39:e1:9a:07:8b:25:55:5b:99:
66:a0:82:88:a5:0b:9f:40:85:a6:62:79:94:97:e6:f1:25:9b:
c6:59:91:6a:32:d6:6c:56:ee:2f:9e:d6:4b:14:e0:a2:2c:a3:
b9:b3:7e:03:6f:03:ad:32:60:b4:13:1d:44:91:e8:23:06:3a:
41:76:67:a4:46:9a:37:0a:c2:7b:f0:0c:50:00:f6:9f:cb:76:
d1:9f:1c:19:3f:04:a9:e4:cd:ef:f6:4d:3d:e0:4b:fe:7e:fe:
57:db:30:76:f0:8e:dd:3c:60:93:b8:5c:3c:64:3d:c0:6a:10:
cb:b4:69:51
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc4CVy5+eG1IL/m4ethUmNtMfz+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEI5NkRENjZGRDc4NUJCRkUwRjE0QjZDODNBN0I1RjY5
RjM3NDM5RTAeFw0yMzEyMjYxNTIyMzBaFw0yNDEyMjQxNTI3MzBaMDMxMTAvBgNV
BAMTKEFDODVENTA4OUQ5Nzc1OUE4RDg3NzUzNEREMDVBQzQxOTdCNzg2ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEwZFlRcfWGDIfsV7erMuJVds
Pd29WCkSU49OGIWLdp/608p5ayvctY7diDxcigO+bL8467/2ZieFw3rOMR2ryOtO
2KautXXVX//b2LJkKuny7Leyj0xuP3Xs9Dwh+UN4JCXtkB0ggP9BTmgHbeukyvX7
b1QROEHzFcfP9EaWlx1qSPiyFXcoZPPg4pWS4eOP++sD54/wBDMFcnxvNbWBosy9
0THLwWrj0wgj1QTl+1ZBbk9PnHdJw1JhHdchf4qOLLPBSe6dPD7CKInab1SJ1FCE
CfQ3BgSsa8SK/lBXeukw2Oyi0Wg4/Mj/HG25T+ZmkZ0v2ltrjrzLP8r770NPAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrIXVCJ2XdZqNh3U03QWsQZe3hogwHwYDVR0j
BBgwFoAUS5bdZv14W7/g8Utsg6e19p83Q54wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHBKaU1MZDc3b2tlOWlUU0Rua1UxSHlnWEtxZDdYMmR0OXpxeVBEMWhY
dVIvMC80Qjk2REQ2NkZENzg1QkJGRTBGMTRCNkM4M0E3QjVGNjlGMzc0MzlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRCOTZERDY2RkQ3ODVCQkZF
MEYxNEI2QzgzQTdCNUY2OUYzNzQzOUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hwSmlNTGQ3N29rZTlpVFNEbmtVMUh5Z1hLcWQ3WDJkdDl6cXlQRDFoWHVSLzAv
MzQzNTJlMzEzODM3MmUzNTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzQzNTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbs2MA0GCSqGSIb3DQEBCwUAA4IBAQCVeTnJirWL
mowSPwveqgKcpWUizciIDkS0Dkl0O9PiBLffewapTduGzyvoKUNmkjMJEMOiZJNy
I4boxcKqzW2rOO2a4KGv1Jp4wgWYkIV4oJnWdD0hPa0M1oDJ7vmpqBjLQfLH0G5Z
AboDwBh9reRcIDoGsDUt/98v3H3RXuW0+lVuqb+mopg54ZoHiyVVW5lmoIKIpQuf
QIWmYnmUl+bxJZvGWZFqMtZsVu4vntZLFOCiLKO5s34DbwOtMmC0Ex1EkegjBjpB
dmekRpo3CsJ78AxQAPafy3bRnxwZPwSp5M3v9k094Ev+fv5X2zB28I7dPGCTuFw8
ZD3AahDLtGlR
-----END CERTIFICATE-----
Generated at Wed Feb 21 00:23:08 2024 by rpki-client on console-fra.rpki-client.org