Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e372e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: dIg0kEap+JVa/p6HKowo1/sdGvBC6rqxQcxLmnnUr/o=
Subject key identifier: F5:59:BD:A5:D2:C5:90:4A:1D:6E:80:61:B0:7D:AE:78:ED:CB:8B:74
Certificate issuer: /CN=88C04555C130EFBD50B75032689878210EFAA940
Certificate serial: 3EAB0A03BFB1FAC6FD206FC54A5BD32AB8B8117D
Authority key identifier: 88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
Signing time: Mon 18 Dec 2023 18:48:30 +0000
ROA not before: Mon 18 Dec 2023 18:43:30 +0000
ROA not after: Mon 16 Dec 2024 18:48:30 +0000
asID: 268308
IP address blocks: 45.238.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:ab:0a:03:bf:b1:fa:c6:fd:20:6f:c5:4a:5b:d3:2a:b8:b8:11:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88C04555C130EFBD50B75032689878210EFAA940
Validity
Not Before: Dec 18 18:43:30 2023 GMT
Not After : Dec 16 18:48:30 2024 GMT
Subject: CN=F559BDA5D2C5904A1D6E8061B07DAE78EDCB8B74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:e4:5d:2f:08:ed:c0:4e:93:bf:ee:32:40:
3a:c3:0e:21:2d:1b:60:a1:17:ff:53:35:c3:d8:58:
3e:a0:55:64:42:e0:be:8c:2a:82:60:9a:f0:1e:ca:
65:00:9d:e7:a4:2f:22:a3:83:32:15:96:eb:94:35:
51:3e:17:b6:f0:e9:9b:cd:35:db:84:57:9d:32:de:
2f:eb:01:0c:79:a9:08:1e:8e:d1:1c:84:92:9c:78:
8a:93:9e:52:b2:54:f1:d6:4c:30:18:37:ee:26:4d:
63:7d:99:b4:59:34:35:44:73:b3:3b:48:74:bb:6d:
eb:6a:c2:e4:0f:db:69:4d:dd:de:2f:66:d6:63:b1:
39:cb:62:25:61:2f:b1:9d:f0:a7:df:02:f0:02:0d:
d6:76:97:1b:97:53:b3:7c:21:c1:8d:a0:c1:57:0f:
b6:0d:db:72:eb:b7:8b:dd:b3:5c:75:4a:e6:6b:83:
c5:49:ff:e0:08:6e:1d:8c:c1:42:69:4a:5c:30:1f:
c0:7b:72:97:d0:a4:db:fc:e4:5d:20:f1:9e:7d:bb:
c8:5c:f6:1a:c8:d4:46:40:b4:ce:53:c8:ef:d4:31:
38:6a:27:c5:e7:fa:3a:da:d0:71:4a:be:1a:ca:4b:
35:ea:75:ec:87:4a:bb:03:86:4f:e6:89:e8:02:08:
bb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:59:BD:A5:D2:C5:90:4A:1D:6E:80:61:B0:7D:AE:78:ED:CB:8B:74
X509v3 Authority Key Identifier:
keyid:88:C0:45:55:C1:30:EF:BD:50:B7:50:32:68:98:78:21:0E:FA:A9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/88C04555C130EFBD50B75032689878210EFAA940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88C04555C130EFBD50B75032689878210EFAA940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/0/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.7.0/24
Signature Algorithm: sha256WithRSAEncryption
40:99:8e:b5:a7:a8:61:f1:32:fe:f8:aa:d2:4e:a3:da:5f:73:
7b:7a:fd:47:f2:d4:07:df:35:13:11:be:4c:a1:c7:16:63:c4:
df:7d:96:9d:90:78:07:94:7f:28:4a:08:e7:7a:55:27:6b:d6:
24:5a:5d:ad:b5:83:b8:c3:dd:f5:fd:4b:21:93:12:8b:fc:89:
39:1d:8a:52:64:4f:17:c8:c5:a6:6a:13:2a:d0:90:0d:a9:d5:
66:ff:fa:1b:f5:a3:52:3e:d9:9f:9d:4f:d6:96:f0:95:b0:9d:
a3:b7:64:db:8b:d1:32:3f:67:4d:21:27:95:4b:a9:fd:a5:a0:
d2:60:b5:dc:98:b5:75:3d:2e:6c:f9:8a:cd:2f:51:aa:70:3e:
19:40:11:e0:52:c7:bc:cc:39:fe:80:0b:fb:39:07:93:c5:cd:
db:02:97:7d:4f:d3:ca:f6:db:fd:8d:1f:1c:fb:59:aa:f9:b2:
ab:15:86:eb:62:a4:3d:27:16:73:fd:ed:69:a8:db:5f:47:98:
d3:fc:ec:c1:1a:3c:94:1f:d5:9b:05:21:07:08:54:7e:02:21:
b4:49:ac:3a:b9:8b:a0:b4:d3:e8:8c:da:66:20:d6:b1:3a:b4:
89:40:95:0f:c6:c0:b5:9e:a2:28:9c:c3:1a:bc:0e:9e:9c:1f:
42:62:b5:09
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPqsKA7+x+sb9IG/FSlvTKri4EX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODhDMDQ1NTVDMTMwRUZCRDUwQjc1MDMyNjg5ODc4MjEw
RUZBQTk0MDAeFw0yMzEyMTgxODQzMzBaFw0yNDEyMTYxODQ4MzBaMDMxMTAvBgNV
BAMTKEY1NTlCREE1RDJDNTkwNEExRDZFODA2MUIwN0RBRTc4RURDQjhCNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs2eRdLwjtwE6Tv+4yQDrDDiEt
G2ChF/9TNcPYWD6gVWRC4L6MKoJgmvAeymUAneekLyKjgzIVluuUNVE+F7bw6ZvN
NduEV50y3i/rAQx5qQgejtEchJKceIqTnlKyVPHWTDAYN+4mTWN9mbRZNDVEc7M7
SHS7betqwuQP22lN3d4vZtZjsTnLYiVhL7Gd8KffAvACDdZ2lxuXU7N8IcGNoMFX
D7YN23Lrt4vds1x1SuZrg8VJ/+AIbh2MwUJpSlwwH8B7cpfQpNv85F0g8Z59u8hc
9hrI1EZAtM5TyO/UMThqJ8Xn+jra0HFKvhrKSzXqdeyHSrsDhk/miegCCLuHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU9Vm9pdLFkEodboBhsH2ueO3Li3QwHwYDVR0j
BBgwFoAUiMBFVcEw771Qt1AyaJh4IQ76qUAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNzI1REU4VnVDMUxFdHk1SERQQm9mZWlFUkNUQzlLMzh1OFVQNlNiaDV3
OW0vMC84OEMwNDU1NUMxMzBFRkJENTBCNzUwMzI2ODk4NzgyMTBFRkFBOTQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzg4QzA0NTU1QzEzMEVGQkQ1
MEI3NTAzMjY4OTg3ODIxMEVGQUE5NDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzcyNURFOFZ1QzFMRXR5NUhEUEJvZmVpRVJDVEM5SzM4dThVUDZTYmg1dzltLzAv
MzQzNTJlMzIzMzM4MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMz
MzAzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC3uBzANBgkqhkiG9w0BAQsFAAOCAQEAQJmOtaeoYfEy
/viq0k6j2l9ze3r9R/LUB981ExG+TKHHFmPE332WnZB4B5R/KEoI53pVJ2vWJFpd
rbWDuMPd9f1LIZMSi/yJOR2KUmRPF8jFpmoTKtCQDanVZv/6G/WjUj7Zn51P1pbw
lbCdo7dk24vRMj9nTSEnlUup/aWg0mC13Ji1dT0ubPmKzS9RqnA+GUAR4FLHvMw5
/oAL+zkHk8XN2wKXfU/Tyvbb/Y0fHPtZqvmyqxWG62KkPScWc/3taajbX0eY0/zs
wRo8lB/VmwUhBwhUfgIhtEmsOrmLoLTT6IzaZiDWsTq0iUCVD8bAtZ6iKJzDGrwO
npwfQmK1CQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:23 2024 by rpki-client on console-ams.rpki-client.org