Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32332d3233203d3e20323636313036.roa
File: 34352e352e3230302e302f32332d3233203d3e20323636313036.roa (raw, json)
Hash identifier: N3Qqlwfpu1BtqqMxNvmsvHmOXG33c2m/F0zCOyLr7hs=
Subject key identifier: AF:7B:BD:65:63:F3:BB:55:BF:98:99:28:BC:C2:53:EB:E9:34:26:8E
Certificate issuer: /CN=F00BC93ADF69CEC0A0A9820F3354AABC782D1F04
Certificate serial: 415BDDD673B7AC056986C8129C53C7112CDFCC4B
Authority key identifier: F0:0B:C9:3A:DF:69:CE:C0:A0:A9:82:0F:33:54:AA:BC:78:2D:1F:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F00BC93ADF69CEC0A0A9820F3354AABC782D1F04.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32332d3233203d3e20323636313036.roa
Signing time: Wed 24 Jan 2024 18:24:35 +0000
ROA not before: Wed 24 Jan 2024 18:19:35 +0000
ROA not after: Wed 22 Jan 2025 18:24:35 +0000
asID: 266106
IP address blocks: 45.5.200.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:5b:dd:d6:73:b7:ac:05:69:86:c8:12:9c:53:c7:11:2c:df:cc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F00BC93ADF69CEC0A0A9820F3354AABC782D1F04
Validity
Not Before: Jan 24 18:19:35 2024 GMT
Not After : Jan 22 18:24:35 2025 GMT
Subject: CN=AF7BBD6563F3BB55BF989928BCC253EBE934268E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:fb:4e:79:82:40:a0:5e:d0:16:22:05:80:
3d:ed:24:26:ba:dc:12:59:a1:05:18:e5:df:4d:d7:
1f:32:f0:a9:12:be:82:42:5a:13:04:f2:a0:db:98:
ac:6f:66:3f:7a:4e:9f:14:ab:b0:29:08:6b:56:d7:
71:2c:92:11:4d:a3:9e:e4:c1:cb:a3:cc:d7:ae:04:
d8:5f:79:f8:a0:32:7e:62:13:d0:55:a3:80:1a:24:
9e:00:92:09:41:bd:47:36:3c:78:e0:44:4e:e9:20:
07:4b:0b:5d:41:80:d4:de:8f:e7:1b:6b:e1:01:1c:
43:05:b7:08:bb:d8:9c:1f:59:29:db:cf:9b:75:9e:
d7:5d:54:d9:31:8f:93:b1:11:9a:33:e2:22:54:68:
df:9b:29:80:43:c3:bd:b8:d6:96:88:02:ba:a3:d2:
05:8c:81:9f:58:1e:9b:d0:9e:09:4f:e6:95:25:9d:
ee:f4:b8:26:29:37:be:f7:1e:21:37:68:41:43:5b:
53:34:59:27:60:ce:b3:d4:23:42:f7:88:c5:06:d6:
18:57:d1:00:cb:20:fe:5b:6b:06:c5:76:5f:d2:0c:
76:cc:b8:60:05:45:2d:e6:ad:e2:d2:7b:6d:54:5e:
88:96:a2:8b:21:fe:50:40:87:91:db:0a:d8:27:31:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7B:BD:65:63:F3:BB:55:BF:98:99:28:BC:C2:53:EB:E9:34:26:8E
X509v3 Authority Key Identifier:
keyid:F0:0B:C9:3A:DF:69:CE:C0:A0:A9:82:0F:33:54:AA:BC:78:2D:1F:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/F00BC93ADF69CEC0A0A9820F3354AABC782D1F04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F00BC93ADF69CEC0A0A9820F3354AABC782D1F04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Au16rZkVMTtSCV68ZQF2D5hr1jpNyj9UBgmTaK6ecY5p/0/34352e352e3230302e302f32332d3233203d3e20323636313036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.200.0/23
Signature Algorithm: sha256WithRSAEncryption
7b:1f:36:e8:35:ed:a8:6e:49:67:87:d6:d7:5d:c4:c9:2b:ca:
ea:1f:c4:43:c3:9c:fc:2e:7d:ef:0c:38:7b:b2:9a:99:cd:65:
92:79:7e:65:b6:db:43:50:c7:d3:95:61:59:0a:1e:82:30:66:
34:ba:5b:45:f2:54:b8:16:e4:85:86:69:39:d0:d8:3c:8c:c7:
1f:87:a2:03:26:68:71:5a:be:f3:e4:5c:fe:3f:94:18:71:06:
c2:1e:81:1f:1b:01:2b:87:11:8e:1d:7f:5c:d5:03:3d:b4:ce:
0e:4e:2b:58:6f:20:1b:6e:07:b1:f2:c5:b1:1f:d4:b4:a3:d8:
52:df:b5:45:09:45:34:4f:8c:aa:a6:e9:1b:2a:2b:73:76:47:
c4:5e:07:82:a6:f6:0b:50:8f:07:ec:75:21:df:59:e7:f2:63:
a3:3b:c2:61:31:f5:e4:d0:92:56:7f:8e:5f:3d:79:67:f8:87:
ec:b7:d3:fa:b7:05:bc:6d:80:7a:26:7d:c9:97:21:fd:54:51:
9a:ab:b8:99:e6:ef:0c:ac:4c:d8:fb:8b:a7:62:10:f8:49:dc:
d7:3d:fc:3f:5f:85:21:f0:33:1f:e9:7c:04:39:4d:06:85:ea:
3f:40:82:85:e9:43:06:ba:84:c1:6a:5d:46:a8:fa:9b:56:a4:
00:68:ea:22
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUQVvd1nO3rAVphsgSnFPHESzfzEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjAwQkM5M0FERjY5Q0VDMEEwQTk4MjBGMzM1NEFBQkM3
ODJEMUYwNDAeFw0yNDAxMjQxODE5MzVaFw0yNTAxMjIxODI0MzVaMDMxMTAvBgNV
BAMTKEFGN0JCRDY1NjNGM0JCNTVCRjk4OTkyOEJDQzI1M0VCRTkzNDI2OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sftOeYJAoF7QFiIFgD3tJCa6
3BJZoQUY5d9N1x8y8KkSvoJCWhME8qDbmKxvZj96Tp8Uq7ApCGtW13EskhFNo57k
wcujzNeuBNhfefigMn5iE9BVo4AaJJ4AkglBvUc2PHjgRE7pIAdLC11BgNTej+cb
a+EBHEMFtwi72JwfWSnbz5t1ntddVNkxj5OxEZoz4iJUaN+bKYBDw7241paIArqj
0gWMgZ9YHpvQnglP5pUlne70uCYpN773HiE3aEFDW1M0WSdgzrPUI0L3iMUG1hhX
0QDLIP5bawbFdl/SDHbMuGAFRS3mreLSe21UXoiWoosh/lBAh5HbCtgnMbL/AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUr3u9ZWPzu1W/mJkovMJT6+k0Jo4wHwYDVR0j
BBgwFoAU8AvJOt9pzsCgqYIPM1SqvHgtHwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXUxNnJaa1ZNVHRTQ1Y2OFpRRjJENWhyMWpwTnlqOVVCZ21UYUs2ZWNZ
NXAvMC9GMDBCQzkzQURGNjlDRUMwQTBBOTgyMEYzMzU0QUFCQzc4MkQxRjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YwMEJDOTNBREY2OUNFQzBB
MEE5ODIwRjMzNTRBQUJDNzgyRDFGMDQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0F1MTZyWmtWTVR0U0NWNjhaUUYyRDVocjFqcE55ajlVQmdtVGFLNmVjWTVwLzAv
MzQzNTJlMzUyZTMyMzAzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMx
MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0FyDANBgkqhkiG9w0BAQsFAAOCAQEAex826DXtqG5J
Z4fW113EySvK6h/EQ8Oc/C597ww4e7Kamc1lknl+ZbbbQ1DH05VhWQoegjBmNLpb
RfJUuBbkhYZpOdDYPIzHH4eiAyZocVq+8+Rc/j+UGHEGwh6BHxsBK4cRjh1/XNUD
PbTODk4rWG8gG24HsfLFsR/UtKPYUt+1RQlFNE+MqqbpGyorc3ZHxF4Hgqb2C1CP
B+x1Id9Z5/JjozvCYTH15NCSVn+OXz15Z/iH7LfT+rcFvG2AeiZ9yZch/VRRmqu4
mebvDKxM2PuLp2IQ+Enc1z38P1+FIfAzH+l8BDlNBoXqP0CChelDBrqEwWpdRqj6
m1akAGjqIg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:55 2024 by rpki-client on console-fra.rpki-client.org