Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32322d3232203d3e20323636303736.roa
File: 34352e342e3234302e302f32322d3232203d3e20323636303736.roa (raw, json)
Hash identifier: G1k1XWSClABy+ZI8VGzENWbVWHSsvXNIpSQtk//qSO4=
Subject key identifier: 40:F9:1B:18:1E:7D:24:94:85:53:48:51:54:5C:79:E7:7B:E3:EF:BF
Certificate issuer: /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial: 2571C179759F53DDFD5DEBB05A8192E3BCA1BF07
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32322d3232203d3e20323636303736.roa
Signing time: Mon 03 Apr 2023 18:50:37 +0000
ROA not before: Mon 03 Apr 2023 18:45:37 +0000
ROA not after: Mon 01 Apr 2024 18:50:37 +0000
asID: 266076
IP address blocks: 45.4.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:71:c1:79:75:9f:53:dd:fd:5d:eb:b0:5a:81:92:e3:bc:a1:bf:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Validity
Not Before: Apr 3 18:45:37 2023 GMT
Not After : Apr 1 18:50:37 2024 GMT
Subject: CN=40F91B181E7D249485534851545C79E77BE3EFBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:66:75:35:c7:c4:f7:b9:00:b2:42:12:06:b7:
99:f2:60:52:a6:b0:5c:ec:1e:e1:43:a8:98:55:37:
4f:f6:0a:9a:d8:1a:85:0d:77:08:77:30:49:5a:44:
23:f7:da:09:93:21:72:e8:00:62:fa:38:31:9d:4c:
5e:ef:82:b6:c0:57:cb:7d:bb:70:be:45:22:f5:eb:
69:3c:47:76:7c:e7:73:e2:1e:0e:78:f3:07:b6:0d:
20:a8:3d:91:bb:ba:d2:34:a7:ca:c0:f5:f0:cb:78:
e4:6d:11:2c:64:e4:74:d2:07:d9:56:86:a8:5b:30:
f9:c1:3e:0c:44:54:f6:b4:ef:7e:0c:07:3c:f7:43:
a6:02:f1:18:29:0b:e8:34:f6:7f:09:b5:ad:ff:3a:
d1:b5:25:80:e6:da:9f:f4:4d:2c:6d:25:a2:1c:84:
53:a3:ef:cb:8c:2b:9e:78:fb:be:7f:77:cb:8f:af:
98:57:12:43:11:60:e8:4b:02:8d:66:99:d1:06:af:
90:a3:ea:8d:f6:14:2f:a5:07:2f:f2:32:38:c1:d4:
55:b8:e0:ac:fb:53:8e:90:3f:0b:d1:62:55:a4:2f:
0d:1a:43:ec:16:a1:12:33:e0:f8:c3:2f:f5:72:af:
68:a9:76:9d:13:22:61:61:44:e2:a2:06:c4:20:13:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:1B:18:1E:7D:24:94:85:53:48:51:54:5C:79:E7:7B:E3:EF:BF
X509v3 Authority Key Identifier:
keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32322d3232203d3e20323636303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.240.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:fb:3f:98:48:ee:fb:6d:c5:eb:47:d9:78:b2:51:0f:bd:ca:
6a:a3:5e:16:ea:1a:ca:bc:33:58:b5:37:43:12:a8:fa:19:09:
2e:7d:3e:3f:00:d2:11:2d:a9:73:bb:15:dc:98:3e:cd:33:64:
49:de:23:8f:f2:8d:a0:bf:d5:02:52:6b:7e:76:b8:6b:62:0c:
fc:43:0f:93:68:17:b2:a8:29:0b:e8:80:e5:05:a3:5d:78:2d:
c2:0d:d8:0d:8f:1a:28:53:f4:79:6c:7b:b0:91:85:4f:06:9a:
70:5f:2f:d5:52:04:46:1b:40:b1:cd:47:61:22:5d:2c:1e:68:
a6:7f:28:19:69:e2:ec:4d:17:14:97:4d:07:22:98:17:f6:00:
95:b1:1c:dc:b1:71:51:fe:ee:7a:7e:aa:59:e0:86:79:81:bc:
b0:f5:fe:db:73:45:e7:4f:55:6d:0a:66:b4:09:f9:69:62:47:
c1:0b:31:0e:d7:38:38:d8:18:59:10:1e:f1:00:d4:6b:d5:52:
52:ab:72:b8:72:ad:ee:d9:1c:95:19:c3:11:75:39:a1:44:08:
06:db:a6:ed:1e:51:ea:55:cd:71:76:9d:bc:58:91:b0:d5:64:
c0:48:03:6f:f5:a2:35:b2:af:10:44:1c:3f:62:16:8a:ef:7c:
80:35:ec:51
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUJXHBeXWfU939XeuwWoGS47yhvwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwMUU0NzQ5MjQ4NEZEOENFODNGMTcwNzBFRkQ3MjUy
QjE0Q0REMDAeFw0yMzA0MDMxODQ1MzdaFw0yNDA0MDExODUwMzdaMDMxMTAvBgNV
BAMTKDQwRjkxQjE4MUU3RDI0OTQ4NTUzNDg1MTU0NUM3OUU3N0JFM0VGQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQZnU1x8T3uQCyQhIGt5nyYFKm
sFzsHuFDqJhVN0/2CprYGoUNdwh3MElaRCP32gmTIXLoAGL6ODGdTF7vgrbAV8t9
u3C+RSL162k8R3Z853PiHg548we2DSCoPZG7utI0p8rA9fDLeORtESxk5HTSB9lW
hqhbMPnBPgxEVPa0734MBzz3Q6YC8RgpC+g09n8Jta3/OtG1JYDm2p/0TSxtJaIc
hFOj78uMK554+75/d8uPr5hXEkMRYOhLAo1mmdEGr5Cj6o32FC+lBy/yMjjB1FW4
4Kz7U46QPwvRYlWkLw0aQ+wWoRIz4PjDL/Vyr2ipdp0TImFhROKiBsQgE9rrAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUQPkbGB59JJSFU0hRVFx553vj778wHwYDVR0j
BBgwFoAUNQHkdJJIT9jOg/FwcO/XJSsUzdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMktlczc0dG5Ta1k5dG91V296RmpnY1FSN1JtTGgxejh4cnBiSGY5YlRH
dkIvMC8zNTAxRTQ3NDkyNDg0RkQ4Q0U4M0YxNzA3MEVGRDcyNTJCMTRDREQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1MDFFNDc0OTI0ODRGRDhD
RTgzRjE3MDcwRUZENzI1MkIxNENERDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJLZXM3NHRuU2tZOXRvdVdvekZqZ2NRUjdSbUxoMXo4eHJwYkhmOWJUR3ZCLzAv
MzQzNTJlMzQyZTMyMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjMw
MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0E8DANBgkqhkiG9w0BAQsFAAOCAQEALPs/mEju+23F
60fZeLJRD73KaqNeFuoayrwzWLU3QxKo+hkJLn0+PwDSES2pc7sV3Jg+zTNkSd4j
j/KNoL/VAlJrfna4a2IM/EMPk2gXsqgpC+iA5QWjXXgtwg3YDY8aKFP0eWx7sJGF
TwaacF8v1VIERhtAsc1HYSJdLB5opn8oGWni7E0XFJdNByKYF/YAlbEc3LFxUf7u
en6qWeCGeYG8sPX+23NF509VbQpmtAn5aWJHwQsxDtc4ONgYWRAe8QDUa9VSUqty
uHKt7tkclRnDEXU5oUQIBtum7R5R6lXNcXadvFiRsNVkwEgDb/WiNbKvEEQcP2IW
iu98gDXsUQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 00:40:20 2025 by rpki-client