Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa
File: 34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa (raw, json)
Hash identifier: hA1RbA03P+upIoQ2Wx2tqOydHsvwy6N+oV3paW/wF4A=
Subject key identifier: 8B:60:CC:D2:82:57:D4:02:6D:D9:72:15:63:B3:EB:B2:D8:1C:BB:DA
Certificate issuer: /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial: 0ADFB474D541A368324EB41637BAB0F6F5D49FD3
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa
Signing time: Fri 20 Oct 2023 20:59:32 +0000
ROA not before: Fri 20 Oct 2023 20:54:32 +0000
ROA not after: Fri 18 Oct 2024 20:59:32 +0000
asID: 267334
IP address blocks: 45.233.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:df:b4:74:d5:41:a3:68:32:4e:b4:16:37:ba:b0:f6:f5:d4:9f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Validity
Not Before: Oct 20 20:54:32 2023 GMT
Not After : Oct 18 20:59:32 2024 GMT
Subject: CN=8B60CCD28257D4026DD9721563B3EBB2D81CBBDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a5:d2:31:b9:5f:d5:d7:d8:d0:f3:03:3b:26:
83:18:55:f6:83:45:82:f1:05:20:df:96:a6:a1:e1:
6a:b9:d5:00:77:50:d0:05:01:50:96:0e:90:56:50:
02:d4:7f:ee:ac:9a:f2:16:af:88:42:77:32:1d:fa:
08:8f:50:eb:28:90:42:25:33:7b:58:78:73:40:9a:
53:04:c1:e7:0a:16:9c:17:22:e4:74:b6:34:01:73:
31:3a:aa:df:d4:af:7a:7a:08:b7:64:76:f5:ca:1b:
e7:bc:ae:c9:84:cf:34:03:15:5a:2c:d1:13:fd:20:
46:40:50:8d:79:1f:0f:79:f3:b1:1f:50:63:13:02:
3d:29:1d:b4:0c:51:04:fa:df:64:58:50:54:17:42:
c5:bf:62:a1:dc:72:73:77:d4:c9:e9:27:3f:e7:bc:
bf:1e:4c:51:e3:4d:84:a6:56:75:4b:c3:18:97:50:
05:7f:82:77:c2:2e:08:69:a8:93:34:3e:51:00:42:
3d:8c:38:7d:76:a8:cc:72:3c:6c:b7:3f:c2:ff:89:
59:26:dd:b9:d2:9e:f9:cc:c1:4b:26:1c:b5:fd:34:
73:0a:8c:ab:cc:d9:da:74:c6:3e:2d:94:a1:78:d6:
13:65:4c:53:c7:b8:39:27:81:50:1e:ee:37:ec:70:
21:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:60:CC:D2:82:57:D4:02:6D:D9:72:15:63:B3:EB:B2:D8:1C:BB:DA
X509v3 Authority Key Identifier:
keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/34352e3233332e3235322e302f32332d3233203d3e20323637333334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
25:9d:14:55:13:68:a2:c4:2f:c0:85:87:26:46:f1:24:fb:a0:
c7:18:a1:e5:f6:87:e9:50:61:d6:75:ce:f7:2e:d5:b2:d2:dd:
b5:c6:25:dc:18:f6:fb:3b:33:b5:23:7b:7a:39:78:49:0f:87:
90:b1:a0:30:8d:d2:09:bf:57:2a:a2:6b:f0:6a:73:1f:b5:fd:
30:ca:eb:a5:f8:38:70:b9:ff:a0:9e:52:84:19:ae:9a:85:e5:
e3:23:cf:5c:9e:36:ec:8a:4a:1c:54:56:20:a5:52:2a:3a:b8:
a7:04:35:e1:c2:b7:ab:e8:60:a0:c7:2f:df:7f:d2:63:11:00:
2c:28:eb:c3:f2:33:12:55:22:e2:dc:f7:43:d6:c9:d8:02:8f:
11:b9:e6:ff:2e:1d:3e:dd:a1:ed:73:4f:5c:46:4f:18:57:44:
30:a9:c1:2e:bc:7a:db:08:0c:c8:7b:92:a8:ab:62:21:3c:4d:
6b:5e:94:2a:3e:5e:8d:e9:13:95:6a:10:ec:5f:3d:a3:a0:94:
b4:7d:b0:3b:b2:f8:b8:3a:c9:d4:0d:0f:89:07:e6:60:49:72:
77:d3:f1:81:3b:fb:c5:20:88:69:29:5b:8e:35:88:1b:98:aa:
1d:5f:b4:1c:fa:af:e7:be:cb:76:ec:b5:1d:bc:79:b1:f8:59:
df:6e:22:cd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCt+0dNVBo2gyTrQWN7qw9vXUn9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUzMjA4OUI3MTA2RkRDRUEwQTJEQzQxMURCRDdGM0NB
OTM2OEM4OTAeFw0yMzEwMjAyMDU0MzJaFw0yNDEwMTgyMDU5MzJaMDMxMTAvBgNV
BAMTKDhCNjBDQ0QyODI1N0Q0MDI2REQ5NzIxNTYzQjNFQkIyRDgxQ0JCREEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBpdIxuV/V19jQ8wM7JoMYVfaD
RYLxBSDflqah4Wq51QB3UNAFAVCWDpBWUALUf+6smvIWr4hCdzId+giPUOsokEIl
M3tYeHNAmlMEwecKFpwXIuR0tjQBczE6qt/Ur3p6CLdkdvXKG+e8rsmEzzQDFVos
0RP9IEZAUI15Hw9587EfUGMTAj0pHbQMUQT632RYUFQXQsW/YqHccnN31MnpJz/n
vL8eTFHjTYSmVnVLwxiXUAV/gnfCLghpqJM0PlEAQj2MOH12qMxyPGy3P8L/iVkm
3bnSnvnMwUsmHLX9NHMKjKvM2dp0xj4tlKF41hNlTFPHuDkngVAe7jfscCF3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUi2DM0oJX1AJt2XIVY7Prstgcu9owHwYDVR0j
BBgwFoAUlTIIm3EG/c6gotxBHb1/PKk2jIkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmZNd3k0TnF3ZWo0VWNVOEVMM2tuWjJreXRGbzE5Z0Y2eVBUMVJFaTJN
b3YvMC85NTMyMDg5QjcxMDZGRENFQTBBMkRDNDExREJEN0YzQ0E5MzY4Qzg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1MzIwODlCNzEwNkZEQ0VB
MEEyREM0MTFEQkQ3RjNDQTkzNjhDODkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JmTXd5NE5xd2VqNFVjVThFTDNrbloya3l0Rm8xOWdGNnlQVDFSRWkyTW92LzAv
MzQzNTJlMzIzMzMzMmUzMjM1MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzczMzMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt6fwwDQYJKoZIhvcNAQELBQADggEBACWdFFUT
aKLEL8CFhyZG8ST7oMcYoeX2h+lQYdZ1zvcu1bLS3bXGJdwY9vs7M7Uje3o5eEkP
h5CxoDCN0gm/Vyqia/Bqcx+1/TDK66X4OHC5/6CeUoQZrpqF5eMjz1yeNuyKShxU
ViClUio6uKcENeHCt6voYKDHL99/0mMRACwo68PyMxJVIuLc90PWydgCjxG55v8u
HT7doe1zT1xGTxhXRDCpwS68etsIDMh7kqirYiE8TWtelCo+Xo3pE5VqEOxfPaOg
lLR9sDuy+Lg6ydQND4kH5mBJcnfT8YE7+8UgiGkpW441iBuYqh1ftBz6r+e+y3bs
tR28ebH4Wd9uIs0=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:56 2024 by rpki-client on console-fra.rpki-client.org