Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36372e302f32342d3234203d3e20323638343434.roa
File: 34352e3136312e36372e302f32342d3234203d3e20323638343434.roa (raw, json)
Hash identifier: N8XXYaQGOBphpno9Cu0in3rBQY3u+/svvFOar6KLifc=
Subject key identifier: 93:B6:B2:AA:50:C3:6C:73:A7:DF:07:DE:49:AE:F2:60:9D:33:FE:9F
Certificate issuer: /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial: 3D8D4DD3BA544AFB49B9C70AA9D62B1552BE8AAE
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36372e302f32342d3234203d3e20323638343434.roa
Signing time: Mon 08 Jan 2024 16:45:43 +0000
ROA not before: Mon 08 Jan 2024 16:40:43 +0000
ROA not after: Mon 06 Jan 2025 16:45:43 +0000
asID: 268444
IP address blocks: 45.161.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:8d:4d:d3:ba:54:4a:fb:49:b9:c7:0a:a9:d6:2b:15:52:be:8a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Validity
Not Before: Jan 8 16:40:43 2024 GMT
Not After : Jan 6 16:45:43 2025 GMT
Subject: CN=93B6B2AA50C36C73A7DF07DE49AEF2609D33FE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:84:d1:96:e1:f2:33:6d:c3:e6:e9:49:f3:0e:
8d:b4:67:22:27:36:de:99:8f:9e:92:98:cf:bc:2b:
55:ec:38:5d:a3:0a:00:55:fe:52:9d:79:50:77:29:
29:70:9a:ed:6f:02:11:7d:61:15:8c:40:65:7b:27:
4a:8f:37:57:23:b9:2a:d8:d8:6f:98:8c:59:d0:49:
f1:92:c3:f2:5e:3c:bf:b5:66:91:1c:c9:5b:d2:00:
96:22:0e:7d:b2:1a:76:3a:75:e2:53:3d:4d:88:0c:
ce:da:0d:53:4b:71:70:b5:48:25:8c:c3:9f:a7:a4:
a1:b3:ed:32:0a:2a:81:93:5a:0f:35:6f:8e:2c:a1:
5c:79:31:79:1e:56:3c:c2:8e:38:00:e9:f8:be:ac:
c8:48:ba:d2:a3:3e:72:8f:40:64:81:28:da:64:db:
de:03:3f:d7:c4:7b:9a:f2:ec:cc:e1:b9:70:e9:f6:
74:b5:84:3e:e7:5a:55:5a:f5:6e:d5:7b:f7:ea:c2:
05:5d:e0:c7:c2:e0:75:3a:af:1e:2c:73:fa:33:d7:
ca:bd:8f:d2:5d:f3:8c:8b:b1:ac:8d:f7:82:69:e8:
c9:f3:ee:41:02:68:81:e5:18:cc:e0:8e:86:7f:c6:
cc:d8:60:ff:0e:a1:67:71:99:ee:27:32:32:5e:56:
f6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B6:B2:AA:50:C3:6C:73:A7:DF:07:DE:49:AE:F2:60:9D:33:FE:9F
X509v3 Authority Key Identifier:
keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36372e302f32342d3234203d3e20323638343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.67.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b0:64:59:af:e0:5a:fb:91:3f:1e:08:f5:c7:94:c1:62:a7:
f9:80:eb:f3:1c:fa:bf:6a:04:b9:3b:d2:57:5d:bf:f8:39:dc:
a7:81:9e:0f:b3:08:47:9c:ab:11:08:f7:27:da:45:de:f9:a1:
71:72:3d:ab:43:77:43:2e:46:eb:f5:09:40:0c:6e:a4:86:b1:
3b:6a:ac:13:7f:52:60:9b:91:c2:13:3a:b6:57:46:ab:fb:b8:
42:79:bd:85:cd:ea:2f:7d:74:5b:0d:6e:60:54:69:00:81:58:
18:81:08:2d:c7:05:2d:32:3c:9d:f5:86:91:84:b7:88:2d:6c:
62:8d:09:f9:79:09:d9:90:35:7c:25:a6:5a:c4:fe:8e:f9:fe:
4e:b1:95:37:e9:21:68:11:b8:ad:db:18:f8:c5:a5:08:f4:ab:
eb:66:6e:eb:f3:34:b0:08:33:af:b8:a5:08:5c:11:89:49:59:
ce:e3:00:e6:db:c6:8d:2a:52:86:a4:b4:e4:53:a5:65:f8:2f:
1c:af:1e:ed:e9:23:b3:ac:65:56:11:0a:fb:42:42:4b:dd:28:
75:c7:20:9a:fc:dc:ae:9a:0e:83:ef:9e:05:9d:67:92:a5:2d:
ad:3b:4b:8f:13:c9:87:fa:be:a4:f3:8e:1d:c3:4c:de:c8:d4:
45:65:fe:ed
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPY1N07pUSvtJuccKqdYrFVK+iq4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1Q0E5RDM1QkY1NkMwREM1QjA2NUY0NDhCMDU4NUFE
MDdGN0YyNTAeFw0yNDAxMDgxNjQwNDNaFw0yNTAxMDYxNjQ1NDNaMDMxMTAvBgNV
BAMTKDkzQjZCMkFBNTBDMzZDNzNBN0RGMDdERTQ5QUVGMjYwOUQzM0ZFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDohNGW4fIzbcPm6UnzDo20ZyIn
Nt6Zj56SmM+8K1XsOF2jCgBV/lKdeVB3KSlwmu1vAhF9YRWMQGV7J0qPN1cjuSrY
2G+YjFnQSfGSw/JePL+1ZpEcyVvSAJYiDn2yGnY6deJTPU2IDM7aDVNLcXC1SCWM
w5+npKGz7TIKKoGTWg81b44soVx5MXkeVjzCjjgA6fi+rMhIutKjPnKPQGSBKNpk
294DP9fEe5ry7MzhuXDp9nS1hD7nWlVa9W7Ve/fqwgVd4MfC4HU6rx4sc/oz18q9
j9Jd84yLsayN94Jp6Mnz7kECaIHlGMzgjoZ/xszYYP8OoWdxme4nMjJeVvZJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUk7ayqlDDbHOn3wfeSa7yYJ0z/p8wHwYDVR0j
BBgwFoAUrFyp01v1bA3FsGX0SLBYWtB/fyUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkxOcnZUOVo2dXRpS0hiQkNBUmtTWENqQjNpVktYVnF4RnZYNHZSTlBw
NW4vMC9BQzVDQTlEMzVCRjU2QzBEQzVCMDY1RjQ0OEIwNTg1QUQwN0Y3RjI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FDNUNBOUQzNUJGNTZDMERD
NUIwNjVGNDQ4QjA1ODVBRDA3RjdGMjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJMTnJ2VDlaNnV0aUtIYkJDQVJrU1hDakIzaVZLWFZxeEZ2WDR2Uk5QcDVuLzAv
MzQzNTJlMzEzNjMxMmUzNjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzQzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaFDMA0GCSqGSIb3DQEBCwUAA4IBAQBtsGRZr+Ba
+5E/Hgj1x5TBYqf5gOvzHPq/agS5O9JXXb/4OdyngZ4PswhHnKsRCPcn2kXe+aFx
cj2rQ3dDLkbr9QlADG6khrE7aqwTf1Jgm5HCEzq2V0ar+7hCeb2FzeovfXRbDW5g
VGkAgVgYgQgtxwUtMjyd9YaRhLeILWxijQn5eQnZkDV8JaZaxP6O+f5OsZU36SFo
Ebit2xj4xaUI9KvrZm7r8zSwCDOvuKUIXBGJSVnO4wDm28aNKlKGpLTkU6Vl+C8c
rx7t6SOzrGVWEQr7QkJL3Sh1xyCa/Nyumg6D754FnWeSpS2tO0uPE8mH+r6k844d
w0zeyNRFZf7t
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:45:01 2025 by rpki-client