Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3332203d3e20323636303636.roa
File: 34352e342e3132342e302f32322d3332203d3e20323636303636.roa (raw, json)
Hash identifier: dX53MDDU3MY3ImmlbFkCvZY21NY5Kbh6a51WfiVcrCI=
Subject key identifier: C3:77:11:22:E7:52:0E:EE:63:52:8A:2E:03:82:1E:DA:B5:2E:00:2B
Certificate issuer: /CN=7E99CA814A6D62B66266BB747FA150A56BDE8657
Certificate serial: 6EDDA72D3BE18B87A858680ED54056B7C4B542B5
Authority key identifier: 7E:99:CA:81:4A:6D:62:B6:62:66:BB:74:7F:A1:50:A5:6B:DE:86:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3332203d3e20323636303636.roa
Signing time: Thu 22 Feb 2024 15:10:54 +0000
ROA not before: Thu 22 Feb 2024 15:05:54 +0000
ROA not after: Thu 20 Feb 2025 15:10:54 +0000
asID: 266066
IP address blocks: 45.4.124.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:dd:a7:2d:3b:e1:8b:87:a8:58:68:0e:d5:40:56:b7:c4:b5:42:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E99CA814A6D62B66266BB747FA150A56BDE8657
Validity
Not Before: Feb 22 15:05:54 2024 GMT
Not After : Feb 20 15:10:54 2025 GMT
Subject: CN=C3771122E7520EEE63528A2E03821EDAB52E002B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:de:53:84:e1:a1:e2:04:06:af:4a:9b:12:
bf:1c:35:ac:56:b7:23:b8:c7:32:5c:a7:23:52:9b:
8f:a2:83:66:f8:b4:30:2e:30:f6:81:0d:39:20:44:
63:74:19:48:47:8d:9e:6e:4a:ca:da:91:e9:7d:0f:
84:d6:c8:07:1e:0f:e1:ce:92:11:c0:2d:5b:99:51:
18:1c:cf:2b:15:90:2b:89:85:69:bd:4f:45:99:35:
b0:1a:c2:ff:5f:e4:4d:74:fb:87:6b:4f:e3:f5:4b:
60:6d:1b:64:d5:e9:d9:be:93:d7:4d:d8:9d:66:45:
46:fb:49:89:27:ed:e9:eb:f1:eb:2e:91:8d:9e:37:
1e:3c:d3:b8:98:a2:b7:e0:f2:4b:3c:62:c8:af:2f:
c1:c9:c7:42:3e:e9:81:85:aa:71:37:c1:40:0d:db:
22:6e:99:b9:8b:77:b7:f0:2a:6a:d2:24:4e:bc:95:
2b:84:a9:f3:a2:bd:21:be:81:4f:0d:e1:36:9f:f7:
28:3d:fb:e5:63:ae:b0:97:73:6d:ea:fa:8a:f9:27:
4d:15:58:ac:44:0f:6b:54:89:eb:1f:14:dc:5c:17:
1b:ab:b1:93:85:20:93:ab:83:9f:24:f9:f5:fb:1a:
2b:02:e8:f9:75:8c:6f:7e:41:ba:43:4e:f9:32:de:
50:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:77:11:22:E7:52:0E:EE:63:52:8A:2E:03:82:1E:DA:B5:2E:00:2B
X509v3 Authority Key Identifier:
keyid:7E:99:CA:81:4A:6D:62:B6:62:66:BB:74:7F:A1:50:A5:6B:DE:86:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E99CA814A6D62B66266BB747FA150A56BDE8657.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32322d3332203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.124.0/22
Signature Algorithm: sha256WithRSAEncryption
d8:6d:5c:fc:70:01:02:6d:60:8e:b2:47:5b:09:aa:ba:6e:76:
ff:e3:c2:60:a7:c6:81:89:cc:81:17:0e:b1:63:ef:16:5a:a4:
33:ca:26:0f:09:57:b3:a8:52:ab:ea:29:3b:a5:28:0a:63:2e:
2f:d2:de:2f:bf:52:ab:41:d2:44:8e:a8:4e:00:d3:bf:87:39:
d8:a1:a0:56:92:bd:29:58:af:a7:94:be:6d:07:b8:70:f4:e9:
4e:e5:54:a9:c5:a6:aa:09:e5:5f:81:d5:d7:1b:05:18:fe:11:
5f:f9:1f:be:48:5a:85:cc:04:de:1e:d7:44:d1:35:e6:af:18:
f1:c0:4c:4f:65:8a:4d:96:3c:a6:d6:ba:61:14:a4:e2:ad:f6:
e4:05:1f:d0:31:eb:23:21:6b:e2:50:aa:e6:51:bf:93:03:2f:
b1:ad:1a:a3:06:cf:aa:e3:85:1a:73:00:b8:40:71:3d:d3:2d:
58:5f:2a:32:ee:71:52:03:b7:13:cc:56:60:a0:2a:9e:63:50:
dd:a6:ad:63:b3:c4:75:5f:28:ba:05:59:f0:49:5a:e6:4f:bf:
31:7e:90:83:09:cf:0f:5a:4b:2c:83:fa:28:46:e4:5c:6d:66:
33:14:9a:7f:c3:51:57:aa:36:ef:a2:c2:e9:29:6b:ad:57:f3:
cd:bb:e0:72
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbt2nLTvhi4eoWGgO1UBWt8S1QrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U5OUNBODE0QTZENjJCNjYyNjZCQjc0N0ZBMTUwQTU2
QkRFODY1NzAeFw0yNDAyMjIxNTA1NTRaFw0yNTAyMjAxNTEwNTRaMDMxMTAvBgNV
BAMTKEMzNzcxMTIyRTc1MjBFRUU2MzUyOEEyRTAzODIxRURBQjUyRTAwMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSON5ThOGh4gQGr0qbEr8cNaxW
tyO4xzJcpyNSm4+ig2b4tDAuMPaBDTkgRGN0GUhHjZ5uSsrakel9D4TWyAceD+HO
khHALVuZURgczysVkCuJhWm9T0WZNbAawv9f5E10+4drT+P1S2BtG2TV6dm+k9dN
2J1mRUb7SYkn7enr8esukY2eNx4807iYorfg8ks8YsivL8HJx0I+6YGFqnE3wUAN
2yJumbmLd7fwKmrSJE68lSuEqfOivSG+gU8N4Taf9yg9++VjrrCXc23q+or5J00V
WKxED2tUiesfFNxcFxursZOFIJOrg58k+fX7GisC6Pl1jG9+QbpDTvky3lBbAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUw3cRIudSDu5jUoouA4Ie2rUuACswHwYDVR0j
BBgwFoAUfpnKgUptYrZiZrt0f6FQpWvehlcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk1DV1hQdXhDd0FjRUxidHo4WHdNek5IaWloM2NHd2VQU21IWGdBekI5
NncvMC83RTk5Q0E4MTRBNkQ2MkI2NjI2NkJCNzQ3RkExNTBBNTZCREU4NjU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdFOTlDQTgxNEE2RDYyQjY2
MjY2QkI3NDdGQTE1MEE1NkJERTg2NTcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JNQ1dYUHV4Q3dBY0VMYnR6OFh3TXpOSGlpaDNjR3dlUFNtSFhnQXpCOTZ3LzAv
MzQzNTJlMzQyZTMxMzIzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNjMw
MzYzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0EfDANBgkqhkiG9w0BAQsFAAOCAQEA2G1c/HABAm1g
jrJHWwmqum52/+PCYKfGgYnMgRcOsWPvFlqkM8omDwlXs6hSq+opO6UoCmMuL9Le
L79Sq0HSRI6oTgDTv4c52KGgVpK9KVivp5S+bQe4cPTpTuVUqcWmqgnlX4HV1xsF
GP4RX/kfvkhahcwE3h7XRNE15q8Y8cBMT2WKTZY8pta6YRSk4q325AUf0DHrIyFr
4lCq5lG/kwMvsa0aowbPquOFGnMAuEBxPdMtWF8qMu5xUgO3E8xWYKAqnmNQ3aat
Y7PEdV8ougVZ8Ela5k+/MX6QgwnPD1pLLIP6KEbkXG1mMxSaf8NRV6o276LC6Slr
rVfzzbvgcg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:15 2024 by rpki-client on console-ams.rpki-client.org