Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa
File: 34352e3136382e36342e302f32322d3234203d3e20323638313338.roa (raw, json)
Hash identifier: t0R9frv8harkCDhlUxezfdv3poy75E0SjU8knQP3e2U=
Subject key identifier: 27:C3:E1:36:E9:61:B4:3A:02:D7:65:A9:D8:B1:E2:60:7F:86:2B:C2
Certificate issuer: /CN=711709BC181DF6689D366E1B328D3907419DF9AA
Certificate serial: 0B33CECE71B945E82EEC69FF1C4B2378AF2E3349
Authority key identifier: 71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa
Signing time: Tue 12 Mar 2024 14:06:29 +0000
ROA not before: Tue 12 Mar 2024 14:01:29 +0000
ROA not after: Tue 11 Mar 2025 14:06:29 +0000
asID: 268138
IP address blocks: 45.168.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:33:ce:ce:71:b9:45:e8:2e:ec:69:ff:1c:4b:23:78:af:2e:33:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=711709BC181DF6689D366E1B328D3907419DF9AA
Validity
Not Before: Mar 12 14:01:29 2024 GMT
Not After : Mar 11 14:06:29 2025 GMT
Subject: CN=27C3E136E961B43A02D765A9D8B1E2607F862BC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7c:28:d0:ee:43:92:8b:1e:5d:64:7b:df:da:
d4:b4:5e:7e:3e:83:aa:fc:74:4d:19:c2:5d:3b:14:
88:06:bc:94:f0:f9:88:31:96:3a:9a:a3:9e:9b:dc:
55:08:8c:91:2c:bc:13:6b:27:28:10:34:c0:f6:e0:
14:e9:20:14:9d:34:e9:d6:c7:39:3a:3e:c9:6b:6c:
ff:1f:0c:82:74:5f:2d:d0:fa:20:75:01:a7:0d:89:
b8:f3:5e:86:1f:12:1f:2d:09:6e:53:04:75:db:8b:
5e:2d:f3:28:36:46:be:43:23:5d:09:6c:7c:1e:3e:
7e:5b:fa:e4:b7:fa:f5:68:97:5b:4e:94:e4:d2:b0:
49:de:fd:33:d7:38:64:ad:94:6f:c2:f5:b6:dc:cd:
5b:38:a2:86:36:cb:c4:eb:f5:9e:23:8c:ef:1b:57:
d7:34:8d:ec:c5:a4:24:c9:95:8f:f4:42:b0:86:2c:
61:4e:b0:b6:1b:0a:2b:2e:41:1d:84:c6:7a:37:eb:
9f:c0:ae:fb:e0:77:1b:97:02:85:55:16:ec:54:13:
2e:3f:86:5e:30:e6:38:bd:c8:10:77:2f:be:7d:9c:
f4:6e:9a:2d:4f:95:7c:71:af:29:fd:fa:a2:c3:99:
e1:00:23:eb:33:39:f6:1c:65:57:66:37:3d:48:3f:
fc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C3:E1:36:E9:61:B4:3A:02:D7:65:A9:D8:B1:E2:60:7F:86:2B:C2
X509v3 Authority Key Identifier:
keyid:71:17:09:BC:18:1D:F6:68:9D:36:6E:1B:32:8D:39:07:41:9D:F9:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/711709BC181DF6689D366E1B328D3907419DF9AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/711709BC181DF6689D366E1B328D3907419DF9AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/34352e3136382e36342e302f32322d3234203d3e20323638313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.64.0/22
Signature Algorithm: sha256WithRSAEncryption
66:66:eb:91:35:eb:62:6a:63:68:6d:98:40:0f:a4:2c:10:a8:
e3:60:16:28:db:28:22:86:83:2b:03:0a:b8:9f:aa:d9:51:0e:
e8:55:8d:6a:5c:ae:d8:0d:05:46:29:d3:21:b5:35:a7:d6:19:
b1:bf:91:75:91:44:41:13:ac:bf:50:c5:32:f3:e3:96:6d:75:
bf:55:68:ce:45:18:24:fb:9f:8f:d5:de:34:02:45:bf:03:fc:
c0:86:0b:0f:0b:a0:5f:d5:16:51:45:a7:96:f7:3a:7c:0c:17:
70:5c:09:ca:7f:63:a1:8c:ce:5b:18:00:70:d5:af:60:45:f8:
47:b4:76:f2:99:e6:d5:b1:c9:b8:a5:6b:24:d5:76:9e:7c:eb:
67:68:71:80:9c:76:46:dd:39:b0:c0:5a:d9:46:18:c2:b9:00:
ce:3a:dc:89:64:48:bb:b6:dc:14:77:62:fb:5e:99:df:86:de:
3c:75:97:d4:79:57:f2:6f:d4:10:86:e5:8a:47:9c:cb:5c:8f:
59:3c:15:75:a8:52:25:d0:0e:42:54:4a:3c:7d:2e:f2:b9:13:
3e:75:fe:a4:fc:37:c8:32:25:ee:3f:f5:32:7f:d3:af:9d:75:
e0:76:44:7b:4b:c9:78:93:87:c9:44:09:c9:28:72:cc:bc:53:
43:e4:53:2a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCzPOznG5Regu7Gn/HEsjeK8uM0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzExNzA5QkMxODFERjY2ODlEMzY2RTFCMzI4RDM5MDc0
MTlERjlBQTAeFw0yNDAzMTIxNDAxMjlaFw0yNTAzMTExNDA2MjlaMDMxMTAvBgNV
BAMTKDI3QzNFMTM2RTk2MUI0M0EwMkQ3NjVBOUQ4QjFFMjYwN0Y4NjJCQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfCjQ7kOSix5dZHvf2tS0Xn4+
g6r8dE0Zwl07FIgGvJTw+Ygxljqao56b3FUIjJEsvBNrJygQNMD24BTpIBSdNOnW
xzk6PslrbP8fDIJ0Xy3Q+iB1AacNibjzXoYfEh8tCW5TBHXbi14t8yg2Rr5DI10J
bHwePn5b+uS3+vVol1tOlOTSsEne/TPXOGStlG/C9bbczVs4ooY2y8Tr9Z4jjO8b
V9c0jezFpCTJlY/0QrCGLGFOsLYbCisuQR2Exno365/ArvvgdxuXAoVVFuxUEy4/
hl4w5ji9yBB3L759nPRumi1PlXxxryn9+qLDmeEAI+szOfYcZVdmNz1IP/xFAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUJ8PhNulhtDoC12Wp2LHiYH+GK8IwHwYDVR0j
BBgwFoAUcRcJvBgd9midNm4bMo05B0Gd+aowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZaMmJHdUw0c0QyNnFEekVFSFdTaGJuMWtwaEJ5M2FSOTVmWlhBM2oy
aFMvMC83MTE3MDlCQzE4MURGNjY4OUQzNjZFMUIzMjhEMzkwNzQxOURGOUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzcxMTcwOUJDMTgxREY2Njg5
RDM2NkUxQjMyOEQzOTA3NDE5REY5QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2WjJiR3VMNHNEMjZxRHpFRUhXU2hibjFrcGhCeTNhUjk1ZlpYQTNqMmhTLzAv
MzQzNTJlMzEzNjM4MmUzNjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzMzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLahAMA0GCSqGSIb3DQEBCwUAA4IBAQBmZuuRNeti
amNobZhAD6QsEKjjYBYo2ygihoMrAwq4n6rZUQ7oVY1qXK7YDQVGKdMhtTWn1hmx
v5F1kURBE6y/UMUy8+OWbXW/VWjORRgk+5+P1d40AkW/A/zAhgsPC6Bf1RZRRaeW
9zp8DBdwXAnKf2OhjM5bGABw1a9gRfhHtHbymebVscm4pWsk1XaefOtnaHGAnHZG
3TmwwFrZRhjCuQDOOtyJZEi7ttwUd2L7Xpnfht48dZfUeVfyb9QQhuWKR5zLXI9Z
PBV1qFIl0A5CVEo8fS7yuRM+df6k/DfIMiXuP/Uyf9OvnXXgdkR7S8l4k4fJRAnJ
KHLMvFND5FMq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org