Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3137302e302f32332d3233203d3e20323637363232.roa
File: 34352e37312e3137302e302f32332d3233203d3e20323637363232.roa (raw, json)
Hash identifier: dnQKBV0KVMw8GcAhIhCgJoyj++MoRXtbb/o12y7ffvA=
Subject key identifier: 59:B2:D1:5E:51:00:59:CB:42:1F:7F:E5:A8:F2:9E:87:B9:90:F9:F1
Certificate issuer: /CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
Certificate serial: 0C43374136E12BE0ED6675CC964D57BEE2CF6B49
Authority key identifier: BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3137302e302f32332d3233203d3e20323637363232.roa
Signing time: Thu 05 Oct 2023 19:45:25 +0000
ROA not before: Thu 05 Oct 2023 19:40:25 +0000
ROA not after: Thu 03 Oct 2024 19:45:25 +0000
asID: 267622
IP address blocks: 45.71.170.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:43:37:41:36:e1:2b:e0:ed:66:75:cc:96:4d:57:be:e2:cf:6b:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF11A101D6B36EF2CEEC291A1E38900720240FF0
Validity
Not Before: Oct 5 19:40:25 2023 GMT
Not After : Oct 3 19:45:25 2024 GMT
Subject: CN=59B2D15E510059CB421F7FE5A8F29E87B990F9F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3c:52:32:13:ac:15:d6:c8:5a:f9:7f:2d:05:
47:83:f0:08:98:85:e7:56:60:ee:15:61:9e:db:c3:
36:06:68:ea:1c:fd:df:f6:a6:ab:c5:50:82:7e:c5:
48:ee:db:d3:08:b3:64:a7:6e:6a:18:85:6e:0a:ee:
19:ce:48:81:db:36:09:51:5a:13:e2:1f:bb:62:32:
07:f2:bc:ea:7a:80:dd:c9:3e:eb:84:8e:4c:7d:28:
b3:aa:38:dd:0e:a3:09:34:68:fd:46:22:4a:5a:62:
dd:ed:00:27:b6:dd:f4:a2:28:ab:d7:8c:2a:ed:03:
dd:dd:9d:6e:64:cd:ea:bf:81:00:e1:bb:df:92:23:
b2:66:76:ad:9c:5d:fa:ec:66:c1:40:e0:95:c8:9b:
33:b9:f8:c8:39:75:e3:d7:12:ef:f3:21:30:f1:2c:
49:9a:1c:80:17:83:76:54:fa:e0:8b:16:f7:85:8e:
57:a1:ac:92:34:75:e8:d5:91:3b:0a:83:99:36:a1:
b0:5d:5c:3c:08:03:40:0f:5a:fa:24:fe:69:08:7d:
06:e4:72:1a:9a:35:23:17:87:62:93:a7:4b:07:0a:
c6:b6:92:49:69:bb:3c:0d:51:61:27:00:34:c3:ae:
62:f8:49:23:63:b6:16:58:3c:e9:3b:5a:11:e8:37:
86:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B2:D1:5E:51:00:59:CB:42:1F:7F:E5:A8:F2:9E:87:B9:90:F9:F1
X509v3 Authority Key Identifier:
keyid:BF:11:A1:01:D6:B3:6E:F2:CE:EC:29:1A:1E:38:90:07:20:24:0F:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF11A101D6B36EF2CEEC291A1E38900720240FF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9miPSYG4qqwaEoTWBu6asqSLFACq1nTQw1rK4BQzkCGf/0/34352e37312e3137302e302f32332d3233203d3e20323637363232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.170.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:11:8b:dd:fa:1a:47:10:83:a6:33:90:dc:1d:92:a8:55:0e:
12:d1:9c:cf:0a:0f:95:b4:e8:e0:72:4a:b9:a0:82:dc:1a:65:
5d:19:2c:11:ec:c0:7c:4d:45:92:46:f5:83:16:36:f0:49:c8:
4c:8b:e3:b2:c2:6f:e9:16:c3:42:a4:49:08:3b:2f:23:24:44:
1b:e4:cf:85:8b:32:7e:dc:7a:c0:87:7a:59:d2:f3:f6:1b:21:
0d:be:17:f1:c3:58:63:17:67:b8:31:92:79:8a:6f:3b:15:0a:
a8:27:e1:f8:6f:66:a1:61:34:39:6b:26:76:bf:c7:e5:2d:44:
98:af:88:3d:23:95:03:e9:f0:a6:91:d4:b7:32:95:3a:c2:eb:
2b:ea:86:6f:10:52:c1:f5:f9:ab:18:ff:cc:d9:52:11:29:17:
fa:b2:a0:0a:26:da:d3:e4:9d:ec:2d:3f:07:26:fa:7b:2c:ca:
f4:fa:cf:f0:c1:75:17:0f:95:c6:dd:9d:7b:5b:24:4c:75:d3:
25:b5:5d:bf:6a:ab:79:58:64:b9:ba:92:f2:31:f5:5b:af:d2:
ba:c6:c2:5b:f4:98:fa:48:43:98:95:07:f5:11:10:52:9c:25:
2e:5b:63:cd:bd:1c:3b:ab:c1:08:a8:4c:71:a9:b1:31:35:5d:
fd:71:de:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDEM3QTbhK+DtZnXMlk1XvuLPa0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkYxMUExMDFENkIzNkVGMkNFRUMyOTFBMUUzODkwMDcy
MDI0MEZGMDAeFw0yMzEwMDUxOTQwMjVaFw0yNDEwMDMxOTQ1MjVaMDMxMTAvBgNV
BAMTKDU5QjJEMTVFNTEwMDU5Q0I0MjFGN0ZFNUE4RjI5RTg3Qjk5MEY5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PFIyE6wV1sha+X8tBUeD8AiY
hedWYO4VYZ7bwzYGaOoc/d/2pqvFUIJ+xUju29MIs2SnbmoYhW4K7hnOSIHbNglR
WhPiH7tiMgfyvOp6gN3JPuuEjkx9KLOqON0Oowk0aP1GIkpaYt3tACe23fSiKKvX
jCrtA93dnW5kzeq/gQDhu9+SI7Jmdq2cXfrsZsFA4JXImzO5+Mg5dePXEu/zITDx
LEmaHIAXg3ZU+uCLFveFjlehrJI0dejVkTsKg5k2obBdXDwIA0APWvok/mkIfQbk
chqaNSMXh2KTp0sHCsa2kklpuzwNUWEnADTDrmL4SSNjthZYPOk7WhHoN4YtAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWbLRXlEAWctCH3/lqPKeh7mQ+fEwHwYDVR0j
BBgwFoAUvxGhAdazbvLO7CkaHjiQByAkD/AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOW1pUFNZRzRxcXdhRW9UV0J1NmFzcVNMRkFDcTFuVFF3MXJLNEJRemtD
R2YvMC9CRjExQTEwMUQ2QjM2RUYyQ0VFQzI5MUExRTM4OTAwNzIwMjQwRkYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JGMTFBMTAxRDZCMzZFRjJD
RUVDMjkxQTFFMzg5MDA3MjAyNDBGRjAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzltaVBTWUc0cXF3YUVvVFdCdTZhc3FTTEZBQ3ExblRRdzFySzRCUXprQ0dmLzAv
MzQzNTJlMzczMTJlMzEzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzYzMjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUeqMA0GCSqGSIb3DQEBCwUAA4IBAQBcEYvd+hpH
EIOmM5DcHZKoVQ4S0ZzPCg+VtOjgckq5oILcGmVdGSwR7MB8TUWSRvWDFjbwSchM
i+Oywm/pFsNCpEkIOy8jJEQb5M+FizJ+3HrAh3pZ0vP2GyENvhfxw1hjF2e4MZJ5
im87FQqoJ+H4b2ahYTQ5ayZ2v8flLUSYr4g9I5UD6fCmkdS3MpU6wusr6oZvEFLB
9fmrGP/M2VIRKRf6sqAKJtrT5J3sLT8HJvp7LMr0+s/wwXUXD5XG3Z17WyRMddMl
tV2/aqt5WGS5upLyMfVbr9K6xsJb9Jj6SEOYlQf1ERBSnCUuW2PNvRw7q8EIqExx
qbExNV39cd7v
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org