Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32332d3233203d3e20323636303736.roa
File: 34352e342e3234302e302f32332d3233203d3e20323636303736.roa (raw, json)
Hash identifier: 536tzYQ23oinLcI1ErpSMs+VhBID7p6UyzD93EnHP7w=
Subject key identifier: 71:FC:1B:7E:50:B3:24:C2:96:DE:C4:C2:13:12:FB:54:FF:2F:0D:0D
Certificate issuer: /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial: 49CC36368044F88C772EB6B7267F5302ACAD2A19
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32332d3233203d3e20323636303736.roa
Signing time: Mon 03 Apr 2023 18:50:35 +0000
ROA not before: Mon 03 Apr 2023 18:45:35 +0000
ROA not after: Mon 01 Apr 2024 18:50:35 +0000
asID: 266076
IP address blocks: 45.4.240.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:cc:36:36:80:44:f8:8c:77:2e:b6:b7:26:7f:53:02:ac:ad:2a:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Validity
Not Before: Apr 3 18:45:35 2023 GMT
Not After : Apr 1 18:50:35 2024 GMT
Subject: CN=71FC1B7E50B324C296DEC4C21312FB54FF2F0D0D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:83:25:98:ec:e5:f3:b8:37:9f:a3:9e:46:c2:
1e:ba:df:f7:1d:be:14:66:97:5c:4b:0e:74:f3:23:
2d:d8:7a:15:f6:2a:f8:be:61:bd:b1:5f:70:e5:4c:
9a:ba:38:4b:cd:e2:9a:5c:50:fd:1e:22:3b:a0:c2:
43:f4:df:5b:33:97:ec:7c:18:80:8b:71:83:74:fc:
11:9d:a4:00:11:0e:d3:5b:5a:a7:a2:66:1e:ff:7e:
36:6c:3c:b7:c5:dc:05:ad:93:94:9d:d3:d1:ff:57:
96:51:eb:a7:d8:29:6c:e4:50:74:0d:66:90:36:97:
30:1e:13:52:59:c9:23:2d:89:98:6e:87:a9:b5:a2:
6c:f4:2c:f4:1a:b2:ef:c5:0c:4c:4b:11:e1:28:27:
cd:db:6b:d3:c2:85:e1:a8:c6:91:75:2d:1a:0e:f8:
36:ea:4c:47:ed:fd:6a:9f:92:48:6c:32:96:35:74:
48:50:b4:46:05:2a:5a:f6:9f:13:06:76:9e:e8:3f:
7e:47:73:5d:05:bf:c3:18:49:20:34:28:52:8c:bd:
d3:7e:85:cc:7d:16:df:39:d2:fb:37:d4:be:40:74:
3e:9a:4a:53:03:7b:6b:0f:0d:f1:80:8b:d9:9a:fb:
49:93:04:d7:c6:58:07:dd:c7:a4:fb:6d:14:0d:42:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FC:1B:7E:50:B3:24:C2:96:DE:C4:C2:13:12:FB:54:FF:2F:0D:0D
X509v3 Authority Key Identifier:
keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234302e302f32332d3233203d3e20323636303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.240.0/23
Signature Algorithm: sha256WithRSAEncryption
de:ec:7a:87:71:5b:94:14:c1:b4:b4:ca:8d:fd:bb:99:b7:d2:
1f:70:d2:03:e4:e0:f4:37:38:3b:c7:d0:e2:88:b1:e1:d0:2c:
74:03:5c:49:c5:47:7b:ee:1f:6b:5c:0d:1f:12:a2:1a:bc:5f:
a2:a5:9e:38:d9:a3:c1:e4:c0:bd:db:1d:ca:3b:d0:78:85:75:
12:34:f1:e9:6e:d6:d4:4e:44:1b:b7:63:ee:1c:16:d7:44:16:
43:33:73:04:10:e5:53:89:ab:73:bf:7e:3e:d4:12:d1:d1:31:
62:17:25:e5:83:90:2d:5d:a8:84:a5:f7:4d:57:56:cc:f4:f2:
ec:95:93:b6:e5:9f:48:81:24:86:a8:c0:5a:3a:50:b7:e9:4e:
6f:4e:72:70:aa:7d:42:68:d4:1f:18:ad:53:ff:6a:df:c0:16:
af:c7:28:9d:af:d0:1d:b4:cf:c1:b1:56:dd:35:79:81:03:08:
fd:c0:cc:6c:a8:c2:42:f9:ee:35:f0:48:a7:cb:6b:99:1b:8f:
6d:c7:62:44:d3:68:17:3a:e3:ee:e9:24:e2:ce:45:1a:38:35:
c9:b8:c3:26:7f:95:6a:db:ed:48:9b:d9:f0:0b:b6:b2:ba:63:
b8:06:c3:38:49:46:ae:8f:aa:57:56:aa:c2:df:09:45:b6:64:
a8:05:11:5c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUScw2NoBE+Ix3Lra3Jn9TAqytKhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwMUU0NzQ5MjQ4NEZEOENFODNGMTcwNzBFRkQ3MjUy
QjE0Q0REMDAeFw0yMzA0MDMxODQ1MzVaFw0yNDA0MDExODUwMzVaMDMxMTAvBgNV
BAMTKDcxRkMxQjdFNTBCMzI0QzI5NkRFQzRDMjEzMTJGQjU0RkYyRjBEMEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhgyWY7OXzuDefo55Gwh663/cd
vhRml1xLDnTzIy3YehX2Kvi+Yb2xX3DlTJq6OEvN4ppcUP0eIjugwkP031szl+x8
GICLcYN0/BGdpAARDtNbWqeiZh7/fjZsPLfF3AWtk5Sd09H/V5ZR66fYKWzkUHQN
ZpA2lzAeE1JZySMtiZhuh6m1omz0LPQasu/FDExLEeEoJ83ba9PCheGoxpF1LRoO
+DbqTEft/WqfkkhsMpY1dEhQtEYFKlr2nxMGdp7oP35Hc10Fv8MYSSA0KFKMvdN+
hcx9Ft850vs31L5AdD6aSlMDe2sPDfGAi9ma+0mTBNfGWAfdx6T7bRQNQnxdAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUcfwbflCzJMKW3sTCExL7VP8vDQ0wHwYDVR0j
BBgwFoAUNQHkdJJIT9jOg/FwcO/XJSsUzdAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMktlczc0dG5Ta1k5dG91V296RmpnY1FSN1JtTGgxejh4cnBiSGY5YlRH
dkIvMC8zNTAxRTQ3NDkyNDg0RkQ4Q0U4M0YxNzA3MEVGRDcyNTJCMTRDREQwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM1MDFFNDc0OTI0ODRGRDhD
RTgzRjE3MDcwRUZENzI1MkIxNENERDAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJLZXM3NHRuU2tZOXRvdVdvekZqZ2NRUjdSbUxoMXo4eHJwYkhmOWJUR3ZCLzAv
MzQzNTJlMzQyZTMyMzQzMDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNjMw
MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS0E8DANBgkqhkiG9w0BAQsFAAOCAQEA3ux6h3FblBTB
tLTKjf27mbfSH3DSA+Tg9Dc4O8fQ4oix4dAsdANcScVHe+4fa1wNHxKiGrxfoqWe
ONmjweTAvdsdyjvQeIV1EjTx6W7W1E5EG7dj7hwW10QWQzNzBBDlU4mrc79+PtQS
0dExYhcl5YOQLV2ohKX3TVdWzPTy7JWTtuWfSIEkhqjAWjpQt+lOb05ycKp9QmjU
HxitU/9q38AWr8cona/QHbTPwbFW3TV5gQMI/cDMbKjCQvnuNfBIp8trmRuPbcdi
RNNoFzrj7ukk4s5FGjg1ybjDJn+VatvtSJvZ8Au2srpjuAbDOElGro+qV1aqwt8J
RbZkqAURXA==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:11 2025 by rpki-client