Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32322d3232203d3e20323636303438.roa
File: 34352e342e3131362e302f32322d3232203d3e20323636303438.roa (raw, json)
Hash identifier: ZHVszvFdJCXVGqMjprlkm4uCav1wmztJDdwhIViyFUk=
Subject key identifier: E0:4C:57:CA:7C:E9:07:9E:EF:82:E5:91:1E:6C:2A:7B:01:11:2F:D2
Certificate issuer: /CN=2DB41A3BC0B44F47245BA46320F4817897477307
Certificate serial: 6EBE9DCF4B876ED280B2DAF19C5ED3FCCC8BA4F0
Authority key identifier: 2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32322d3232203d3e20323636303438.roa
Signing time: Thu 30 Nov 2023 20:19:01 +0000
ROA not before: Thu 30 Nov 2023 20:14:01 +0000
ROA not after: Thu 28 Nov 2024 20:19:01 +0000
asID: 266048
IP address blocks: 45.4.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:be:9d:cf:4b:87:6e:d2:80:b2:da:f1:9c:5e:d3:fc:cc:8b:a4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DB41A3BC0B44F47245BA46320F4817897477307
Validity
Not Before: Nov 30 20:14:01 2023 GMT
Not After : Nov 28 20:19:01 2024 GMT
Subject: CN=E04C57CA7CE9079EEF82E5911E6C2A7B01112FD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5f:d6:48:90:f5:91:e2:3f:98:f3:67:e3:c6:
56:29:70:1c:1f:14:f3:10:86:26:bc:5c:69:36:e8:
95:04:d3:c1:db:fe:7d:85:cd:07:dd:d6:a6:fc:11:
76:14:ed:e8:d9:35:32:b8:a0:0c:32:37:b9:0e:2b:
ef:86:da:01:bb:4d:da:9f:a1:50:75:4c:16:3b:27:
e3:a1:89:29:e7:a2:29:cd:84:3e:4a:8e:40:d0:62:
f4:fa:f3:97:ae:cb:d3:04:7a:e9:e3:a5:61:dd:15:
00:fb:f8:40:33:6e:94:b2:34:90:58:c5:ef:70:11:
43:3f:82:3e:ef:41:79:ad:17:ea:fd:d9:80:b4:65:
65:e7:a3:72:d0:0a:e6:96:a1:e6:cf:7a:bf:20:f5:
c7:e0:be:f0:78:84:0c:3e:a5:49:83:bc:6c:58:11:
fb:2d:ca:88:87:24:4d:d0:9f:d8:26:7b:4f:b3:91:
5f:26:f9:01:d3:0e:b0:60:8c:0f:11:0e:e5:1a:4c:
4d:bd:14:10:2b:81:77:70:0c:58:ca:86:26:b7:7e:
4d:f8:c8:a1:be:1f:d0:e5:c1:c9:f1:50:52:05:c4:
83:5e:99:13:d4:2e:3a:55:ae:b2:69:d6:69:b3:8c:
bb:ee:6b:bd:08:b5:51:c6:a5:f0:5c:ee:a0:e3:0a:
2b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4C:57:CA:7C:E9:07:9E:EF:82:E5:91:1E:6C:2A:7B:01:11:2F:D2
X509v3 Authority Key Identifier:
keyid:2D:B4:1A:3B:C0:B4:4F:47:24:5B:A4:63:20:F4:81:78:97:47:73:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/2DB41A3BC0B44F47245BA46320F4817897477307.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DB41A3BC0B44F47245BA46320F4817897477307.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4iPxLC3gWwdjrrQmTLZbsZu1eVWfLqyvX1YnGW6N4P56/0/34352e342e3131362e302f32322d3232203d3e20323636303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.116.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:d7:a9:a1:e2:e7:dc:1c:c1:08:03:93:66:d4:55:1b:9b:32:
58:1d:f8:49:9e:fa:00:12:3e:8f:df:77:98:16:61:40:c2:f4:
b7:7a:30:cc:5e:66:2d:b1:97:b6:78:1f:ea:43:7a:ad:ea:55:
02:c0:2f:ee:a6:e6:66:00:6a:36:ed:72:08:bd:1b:62:b6:e9:
cb:a1:e9:a5:c5:ad:b2:56:9b:e9:22:e2:e9:87:89:46:1c:e3:
38:b6:97:31:75:d2:8f:de:9e:27:77:72:db:6d:0d:ac:10:35:
ef:c9:79:a3:92:75:10:6e:2f:cc:a2:c0:e6:6a:27:e8:42:07:
a9:96:37:36:0f:c6:9f:40:3f:00:b0:24:fe:7a:20:19:19:c6:
ca:36:04:0c:46:56:e5:15:17:c0:a2:4d:00:2f:87:e7:55:e6:
d5:6a:de:56:fa:b4:b2:71:4e:10:b8:b0:59:b4:1c:a4:f2:ae:
99:95:ba:71:9b:6b:f5:2f:19:dc:3d:7c:6c:a6:c1:ce:82:18:
f6:2e:13:06:e5:bf:25:81:90:24:83:45:41:a8:50:de:8e:b9:
3c:1c:1d:c0:ed:69:2b:e7:e3:49:68:ae:2b:30:a3:44:fe:94:
a4:f1:2a:4f:28:27:86:c8:5d:94:7f:d4:48:b0:3b:81:45:80:
78:1c:a0:76
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUbr6dz0uHbtKAstrxnF7T/MyLpPAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkRCNDFBM0JDMEI0NEY0NzI0NUJBNDYzMjBGNDgxNzg5
NzQ3NzMwNzAeFw0yMzExMzAyMDE0MDFaFw0yNDExMjgyMDE5MDFaMDMxMTAvBgNV
BAMTKEUwNEM1N0NBN0NFOTA3OUVFRjgyRTU5MTFFNkMyQTdCMDExMTJGRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqX9ZIkPWR4j+Y82fjxlYpcBwf
FPMQhia8XGk26JUE08Hb/n2FzQfd1qb8EXYU7ejZNTK4oAwyN7kOK++G2gG7Tdqf
oVB1TBY7J+OhiSnnoinNhD5KjkDQYvT685euy9MEeunjpWHdFQD7+EAzbpSyNJBY
xe9wEUM/gj7vQXmtF+r92YC0ZWXno3LQCuaWoebPer8g9cfgvvB4hAw+pUmDvGxY
EfstyoiHJE3Qn9gme0+zkV8m+QHTDrBgjA8RDuUaTE29FBArgXdwDFjKhia3fk34
yKG+H9DlwcnxUFIFxINemRPULjpVrrJp1mmzjLvua70ItVHGpfBc7qDjCivTAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU4ExXynzpB57vguWRHmwqewERL9IwHwYDVR0j
BBgwFoAULbQaO8C0T0ckW6RjIPSBeJdHcwcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGlQeExDM2dXd2RqcnJRbVRMWmJzWnUxZVZXZkxxeXZYMVluR1c2TjRQ
NTYvMC8yREI0MUEzQkMwQjQ0RjQ3MjQ1QkE0NjMyMEY0ODE3ODk3NDc3MzA3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJEQjQxQTNCQzBCNDRGNDcy
NDVCQTQ2MzIwRjQ4MTc4OTc0NzczMDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRpUHhMQzNnV3dkanJyUW1UTFpic1p1MWVWV2ZMcXl2WDFZbkdXNk40UDU2LzAv
MzQzNTJlMzQyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzNjMw
MzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0EdDANBgkqhkiG9w0BAQsFAAOCAQEArtepoeLn3BzB
CAOTZtRVG5syWB34SZ76ABI+j993mBZhQML0t3owzF5mLbGXtngf6kN6repVAsAv
7qbmZgBqNu1yCL0bYrbpy6HppcWtslab6SLi6YeJRhzjOLaXMXXSj96eJ3dy220N
rBA178l5o5J1EG4vzKLA5mon6EIHqZY3Ng/Gn0A/ALAk/nogGRnGyjYEDEZW5RUX
wKJNAC+H51Xm1WreVvq0snFOELiwWbQcpPKumZW6cZtr9S8Z3D18bKbBzoIY9i4T
BuW/JYGQJINFQahQ3o65PBwdwO1pK+fjSWiuKzCjRP6UpPEqTygnhshdlH/USLA7
gUWAeBygdg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:00 2024 by rpki-client on console-ams.rpki-client.org