Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32342d3234203d3e20323638313230.roa
File: 34352e3136392e35362e302f32342d3234203d3e20323638313230.roa (raw, json)
Hash identifier: vauP5wHulwmDNupE9PEZzYHjUV1RTLpuNGTNNNmK6GA=
Subject key identifier: 44:F5:92:32:22:E6:30:2A:6A:06:0A:89:89:1D:38:C4:7E:76:E6:A1
Certificate issuer: /CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Certificate serial: 3AA4F8F0C9B0A29B0AC0AF516BB5E86554A97455
Authority key identifier: 95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32342d3234203d3e20323638313230.roa
Signing time: Tue 05 Mar 2024 15:54:37 +0000
ROA not before: Tue 05 Mar 2024 15:49:37 +0000
ROA not after: Tue 04 Mar 2025 15:54:37 +0000
asID: 268120
IP address blocks: 45.169.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a4:f8:f0:c9:b0:a2:9b:0a:c0:af:51:6b:b5:e8:65:54:a9:74:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Validity
Not Before: Mar 5 15:49:37 2024 GMT
Not After : Mar 4 15:54:37 2025 GMT
Subject: CN=44F5923222E6302A6A060A89891D38C47E76E6A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:26:21:0e:fe:1c:e9:4e:ee:62:50:4d:a5:
fd:f0:9f:64:3c:87:90:8b:0d:c4:d5:25:7c:a1:1e:
de:dd:1b:63:70:d0:90:f9:77:8c:a4:f1:f8:30:dd:
48:2c:09:54:cf:d4:8d:c5:94:4a:ab:ee:ba:6d:de:
02:49:bb:4f:b3:dd:e5:51:86:15:cc:61:7a:ad:ab:
32:d0:b8:64:9c:2d:b3:6f:5f:7e:dc:3f:45:82:17:
cb:c8:2f:96:94:20:1d:32:a1:77:3e:c9:63:de:1b:
5f:4d:a1:8f:35:4c:41:eb:22:b4:a0:12:d5:ad:1a:
f8:30:a6:4b:0e:1c:19:7c:73:92:ad:1a:fd:e2:05:
aa:49:9a:a8:f1:49:f3:a3:40:8a:49:ea:eb:d5:e4:
0d:fd:f9:69:bd:a2:ff:81:84:ab:6f:11:f2:9e:51:
74:ea:b4:db:b4:49:69:13:33:f2:34:af:d6:d6:68:
ad:1c:52:6a:5d:09:42:0b:3d:5c:2f:13:f0:ee:2c:
81:35:cc:d8:cc:69:49:25:7d:a2:d6:c1:12:2a:89:
57:8f:7b:79:d7:cd:1e:27:fa:66:f3:fc:e0:3a:22:
0f:97:08:c7:5f:ed:f9:f1:e5:7a:17:76:55:24:94:
b7:ee:67:d4:b9:1d:10:f0:4a:72:d8:ba:06:7a:6c:
6c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:92:32:22:E6:30:2A:6A:06:0A:89:89:1D:38:C4:7E:76:E6:A1
X509v3 Authority Key Identifier:
keyid:95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32342d3234203d3e20323638313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.56.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c2:63:df:77:16:20:65:63:15:7e:9e:15:50:77:13:a4:b3:
ef:89:7e:0d:51:42:8d:81:10:be:ec:cd:6a:d7:1c:e9:21:b1:
64:b6:95:b1:aa:6d:8a:3e:6c:05:d0:7d:cb:71:fe:32:b9:b7:
4e:a8:d9:05:cf:7f:24:bd:a3:7d:cb:65:1d:b8:1f:6f:a7:ca:
38:9a:1c:d2:74:f1:48:c3:14:48:37:b2:af:6d:56:c0:32:0f:
27:c2:04:62:3b:2a:46:92:bf:60:c3:5f:43:11:d3:6e:c8:8c:
68:d0:64:ec:a4:80:df:0b:a7:f0:09:77:1a:62:4b:e8:52:b5:
aa:fb:4a:62:ce:55:d8:3a:87:27:51:34:f8:bb:e3:1a:fe:88:
46:16:61:aa:c5:ca:80:48:fb:f4:10:e5:b4:6f:d3:a9:bf:a2:
1d:bc:bf:d5:df:66:7e:74:a3:c4:fb:6a:46:1f:34:85:8a:3b:
15:a1:f3:6a:b5:3b:78:88:3d:fb:6f:8f:ba:c8:35:06:33:50:
76:ff:e3:0e:15:63:51:d8:60:99:f1:d9:5f:32:80:3f:e0:39:
81:b2:dd:dd:f6:13:cd:9d:69:bc:6f:19:61:3a:a5:4a:ec:3e:
1a:27:e3:a4:cf:68:1d:7d:9d:29:24:27:97:95:bb:8f:b4:5c:
34:32:df:2b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOqT48MmwopsKwK9Ra7XoZVSpdFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTUyMDdEM0FBMzIyMjk4QTA5QkU0N0ZFNTZCRTZCODQ3
Q0JENTk2RTAeFw0yNDAzMDUxNTQ5MzdaFw0yNTAzMDQxNTU0MzdaMDMxMTAvBgNV
BAMTKDQ0RjU5MjMyMjJFNjMwMkE2QTA2MEE4OTg5MUQzOEM0N0U3NkU2QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3kSYhDv4c6U7uYlBNpf3wn2Q8
h5CLDcTVJXyhHt7dG2Nw0JD5d4yk8fgw3UgsCVTP1I3FlEqr7rpt3gJJu0+z3eVR
hhXMYXqtqzLQuGScLbNvX37cP0WCF8vIL5aUIB0yoXc+yWPeG19NoY81TEHrIrSg
EtWtGvgwpksOHBl8c5KtGv3iBapJmqjxSfOjQIpJ6uvV5A39+Wm9ov+BhKtvEfKe
UXTqtNu0SWkTM/I0r9bWaK0cUmpdCUILPVwvE/DuLIE1zNjMaUklfaLWwRIqiVeP
e3nXzR4n+mbz/OA6Ig+XCMdf7fnx5XoXdlUklLfuZ9S5HRDwSnLYugZ6bGzBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURPWSMiLmMCpqBgqJiR04xH525qEwHwYDVR0j
BBgwFoAUlSB9OqMiKYoJvkf+Vr5rhHy9WW4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnZrZGQ1MmJEZGRyamJGbXE4Q1h3cE1ONEpkWHJ0N1hTMlRqUGV0R1VU
SFovMC85NTIwN0QzQUEzMjIyOThBMDlCRTQ3RkU1NkJFNkI4NDdDQkQ1OTZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzk1MjA3RDNBQTMyMjI5OEEw
OUJFNDdGRTU2QkU2Qjg0N0NCRDU5NkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ2a2RkNTJiRGRkcmpiRm1xOENYd3BNTjRKZFhydDdYUzJUalBldEdVVEhaLzAv
MzQzNTJlMzEzNjM5MmUzNTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALak4MA0GCSqGSIb3DQEBCwUAA4IBAQB4wmPfdxYg
ZWMVfp4VUHcTpLPviX4NUUKNgRC+7M1q1xzpIbFktpWxqm2KPmwF0H3Lcf4yubdO
qNkFz38kvaN9y2UduB9vp8o4mhzSdPFIwxRIN7KvbVbAMg8nwgRiOypGkr9gw19D
EdNuyIxo0GTspIDfC6fwCXcaYkvoUrWq+0pizlXYOocnUTT4u+Ma/ohGFmGqxcqA
SPv0EOW0b9Opv6IdvL/V32Z+dKPE+2pGHzSFijsVofNqtTt4iD37b4+6yDUGM1B2
/+MOFWNR2GCZ8dlfMoA/4DmBst3d9hPNnWm8bxlhOqVK7D4aJ+Okz2gdfZ0pJCeX
lbuPtFw0Mt8r
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org