Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa
File: 34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa (raw, json)
Hash identifier: uwRwL+uDXWKrmvpFVlLZaniS99GcSeat7SsQN8+UkbI=
Subject key identifier: D7:46:8E:B5:F1:55:A0:55:30:07:C4:BE:AE:07:94:90:C5:48:4E:0E
Certificate issuer: /CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
Certificate serial: 5302448EDC824606F47E8EB6BFF9C3C17094F715
Authority key identifier: 66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa
Signing time: Thu 28 Dec 2023 17:54:17 +0000
ROA not before: Thu 28 Dec 2023 17:49:17 +0000
ROA not after: Thu 26 Dec 2024 17:54:17 +0000
asID: 268710
IP address blocks: 45.170.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:02:44:8e:dc:82:46:06:f4:7e:8e:b6:bf:f9:c3:c1:70:94:f7:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669B05AF68A578CAF79FDBA7B72AE047A96436E6
Validity
Not Before: Dec 28 17:49:17 2023 GMT
Not After : Dec 26 17:54:17 2024 GMT
Subject: CN=D7468EB5F155A0553007C4BEAE079490C5484E0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ac:ce:97:1c:f3:ac:c9:33:a6:ba:c3:2c:c7:
7d:92:17:fd:61:aa:ec:3e:22:d4:f0:69:e0:42:9d:
5c:98:e3:d2:58:f6:d6:11:05:63:46:6c:c0:8f:b2:
de:7b:10:25:e6:c6:e4:90:90:09:d7:26:69:6b:1e:
8a:02:aa:5b:b3:79:32:38:27:8a:c0:01:d5:3f:a0:
d1:14:96:7e:4f:a5:50:21:22:81:9e:47:51:cd:7b:
3a:7b:03:75:15:46:51:cb:52:7b:27:74:29:03:f8:
3a:37:47:d3:19:21:94:48:57:94:14:77:16:fc:92:
ba:c1:18:9c:95:e1:d5:2b:7a:07:73:47:1a:aa:2a:
cf:33:dc:6b:7e:bb:df:9a:17:39:b8:5b:ce:60:94:
65:5d:59:52:b5:96:f8:78:90:07:20:0d:9c:7d:03:
a1:6b:fc:c0:59:c5:22:50:55:70:4f:39:ff:8a:2e:
84:f8:c9:be:8a:b1:5b:f5:97:c0:a5:c6:9e:34:93:
3b:3f:2c:a3:87:5c:8a:e8:8a:14:63:64:c2:60:1b:
01:51:a4:b7:23:26:11:88:0f:97:a2:20:17:9c:1f:
a3:95:5f:15:ff:7b:85:cb:84:af:1a:5e:80:d5:e2:
a6:31:ea:82:2d:e0:0e:15:b2:05:e3:2a:86:44:4f:
a5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:46:8E:B5:F1:55:A0:55:30:07:C4:BE:AE:07:94:90:C5:48:4E:0E
X509v3 Authority Key Identifier:
keyid:66:9B:05:AF:68:A5:78:CA:F7:9F:DB:A7:B7:2A:E0:47:A9:64:36:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/669B05AF68A578CAF79FDBA7B72AE047A96436E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yT5RjZY8hPBzQqjKqK2wAhSyVChqCVC9J7B1QvD6L7s/0/34352e3137302e3232382e302f32322d3232203d3e20323638373130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.228.0/22
Signature Algorithm: sha256WithRSAEncryption
44:9b:b3:af:74:66:cc:eb:ba:88:70:b7:2a:40:61:b1:00:22:
51:47:63:10:c0:7f:2c:85:ea:66:2e:5a:93:c8:20:50:ee:8f:
c1:55:a9:c9:2f:77:e2:5d:a8:e7:2f:87:27:5c:b9:c8:8c:91:
3a:7c:ea:43:5d:c3:48:96:ae:37:54:ee:b6:30:5e:c4:14:4f:
96:a7:52:1c:af:04:13:49:4a:79:92:50:91:02:2b:a8:9c:75:
cc:05:a7:b5:c2:6a:51:64:a0:68:40:d7:5c:e5:af:08:32:68:
ce:24:01:00:89:f6:30:fb:65:39:96:51:a4:20:0d:d1:ff:fe:
da:e1:70:44:ed:03:7b:6f:b6:a5:75:0d:c0:8c:a0:d7:39:f2:
5f:9a:5c:c1:49:83:ed:c4:b6:70:48:41:05:62:58:e0:ab:ee:
21:28:da:fc:af:98:f1:f4:f9:91:50:e5:90:3d:9f:a1:88:44:
23:51:5b:ff:e7:71:9a:28:25:20:bb:43:ab:47:10:2c:3f:ba:
6a:58:b5:e5:b0:03:07:36:2e:1a:34:3f:5d:7b:12:b3:69:50:
ee:7a:13:52:31:a5:c2:c6:d8:12:35:18:37:db:15:a0:82:2c:
96:df:31:e8:72:4a:a8:5e:f8:69:1f:b1:48:5b:c1:6a:b1:74:
73:6f:2e:72
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUUwJEjtyCRgb0fo62v/nDwXCU9xUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjY5QjA1QUY2OEE1NzhDQUY3OUZEQkE3QjcyQUUwNDdB
OTY0MzZFNjAeFw0yMzEyMjgxNzQ5MTdaFw0yNDEyMjYxNzU0MTdaMDMxMTAvBgNV
BAMTKEQ3NDY4RUI1RjE1NUEwNTUzMDA3QzRCRUFFMDc5NDkwQzU0ODRFMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorM6XHPOsyTOmusMsx32SF/1h
quw+ItTwaeBCnVyY49JY9tYRBWNGbMCPst57ECXmxuSQkAnXJmlrHooCqluzeTI4
J4rAAdU/oNEUln5PpVAhIoGeR1HNezp7A3UVRlHLUnsndCkD+Do3R9MZIZRIV5QU
dxb8krrBGJyV4dUregdzRxqqKs8z3Gt+u9+aFzm4W85glGVdWVK1lvh4kAcgDZx9
A6Fr/MBZxSJQVXBPOf+KLoT4yb6KsVv1l8Clxp40kzs/LKOHXIroihRjZMJgGwFR
pLcjJhGID5eiIBecH6OVXxX/e4XLhK8aXoDV4qYx6oIt4A4VsgXjKoZET6WBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU10aOtfFVoFUwB8S+rgeUkMVITg4wHwYDVR0j
BBgwFoAUZpsFr2ileMr3n9untyrgR6lkNuYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3lUNVJqWlk4aFBCelFxaktxSzJ3QWhTeVZDaHFDVkM5SjdCMVF2RDZM
N3MvMC82NjlCMDVBRjY4QTU3OENBRjc5RkRCQTdCNzJBRTA0N0E5NjQzNkU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY2OUIwNUFGNjhBNTc4Q0FG
NzlGREJBN0I3MkFFMDQ3QTk2NDM2RTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN5VDVSalpZOGhQQnpRcWpLcUsyd0FoU3lWQ2hxQ1ZDOUo3QjFRdkQ2TDdzLzAv
MzQzNTJlMzEzNzMwMmUzMjMyMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzNzMxMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItquQwDQYJKoZIhvcNAQELBQADggEBAESbs690
ZszruohwtypAYbEAIlFHYxDAfyyF6mYuWpPIIFDuj8FVqckvd+JdqOcvhydcuciM
kTp86kNdw0iWrjdU7rYwXsQUT5anUhyvBBNJSnmSUJECK6icdcwFp7XCalFkoGhA
11zlrwgyaM4kAQCJ9jD7ZTmWUaQgDdH//trhcETtA3tvtqV1DcCMoNc58l+aXMFJ
g+3EtnBIQQViWOCr7iEo2vyvmPH0+ZFQ5ZA9n6GIRCNRW//ncZooJSC7Q6tHECw/
umpYteWwAwc2Lho0P117ErNpUO56E1IxpcLG2BI1GDfbFaCCLJbfMehySqhe+Gkf
sUhbwWqxdHNvLnI=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org