Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa
File: 34352e3138322e35352e302f32342d3234203d3e20323639323835.roa (raw, json)
Hash identifier: iOl1Jhws0osNJtC4QhQxd1miHQOtEQjp0Segq2G7SBk=
Subject key identifier: 43:C2:86:78:23:67:5D:8D:2C:09:99:A6:C3:B9:C2:3F:3E:66:CE:1D
Certificate issuer: /CN=3D4867F11A1D652682FA95ED911B20D81139853D
Certificate serial: 4AACA9EF38E8488FC17587DE5B87533B1C2EAF73
Authority key identifier: 3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa
Signing time: Wed 28 Aug 2024 16:17:45 +0000
ROA not before: Wed 28 Aug 2024 16:12:45 +0000
ROA not after: Wed 27 Aug 2025 16:17:45 +0000
asID: 269285
IP address blocks: 45.182.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ac:a9:ef:38:e8:48:8f:c1:75:87:de:5b:87:53:3b:1c:2e:af:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D4867F11A1D652682FA95ED911B20D81139853D
Validity
Not Before: Aug 28 16:12:45 2024 GMT
Not After : Aug 27 16:17:45 2025 GMT
Subject: CN=43C2867823675D8D2C0999A6C3B9C23F3E66CE1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:a4:95:e4:93:62:cf:08:25:c4:a9:b9:dc:
fb:4a:b2:f5:e6:88:0e:4f:9e:fb:e2:e5:be:54:60:
f8:f6:6b:da:e2:0d:62:85:fa:94:be:7e:14:38:97:
9e:65:5c:ef:9a:e0:24:9d:4a:49:35:44:10:62:da:
a0:56:1a:d6:f7:b1:46:4a:92:36:e5:7a:7c:b4:fd:
bd:bd:c1:bc:af:74:58:36:c3:f4:9c:03:51:af:d0:
82:3d:15:0a:0f:8c:eb:7c:ed:83:8d:25:13:f4:e0:
43:b9:25:b3:bf:75:b0:21:4e:f2:0b:82:e8:97:2f:
84:ea:e4:c3:e5:3e:8c:65:96:96:f3:f6:a5:e7:47:
89:2c:5c:ce:45:9c:e1:10:1a:63:79:87:91:42:2d:
0f:12:be:22:c6:d5:6b:44:69:f5:6a:05:9f:ed:fb:
2b:78:27:2a:fb:4d:e9:23:ae:a4:2d:50:11:b5:62:
8a:04:67:dd:f9:69:f8:6f:4a:28:2d:71:62:8f:f8:
2a:b2:ee:c8:3f:00:24:1d:63:11:e2:7d:5f:90:19:
84:c7:64:79:ae:f0:f1:19:c8:49:46:08:e5:f9:00:
af:13:39:6f:94:61:1b:55:8b:2c:cc:a6:e3:aa:4a:
f5:f3:5b:f7:d8:8e:90:4f:da:dc:88:73:01:fa:aa:
38:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C2:86:78:23:67:5D:8D:2C:09:99:A6:C3:B9:C2:3F:3E:66:CE:1D
X509v3 Authority Key Identifier:
keyid:3D:48:67:F1:1A:1D:65:26:82:FA:95:ED:91:1B:20:D8:11:39:85:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/3D4867F11A1D652682FA95ED911B20D81139853D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3D4867F11A1D652682FA95ED911B20D81139853D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/52ngU2PkeTRhdAjBzpU4ehUBpeyPrMBqtzGgawpmq7id/0/34352e3138322e35352e302f32342d3234203d3e20323639323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.182.55.0/24
Signature Algorithm: sha256WithRSAEncryption
07:5a:7e:ab:17:a7:3d:87:55:8c:ca:44:d2:fa:b5:32:20:95:
fd:f2:1b:8e:8d:80:54:f0:8b:7f:d5:bc:78:af:67:e8:a9:0c:
c7:5a:04:e6:88:cd:69:ad:a6:b8:b5:1a:dc:1d:32:6f:c5:92:
5c:42:28:65:e9:1f:56:a3:b8:7c:61:d7:ee:4f:df:c3:94:03:
4e:46:2b:fe:89:4d:df:c4:62:42:78:12:04:c9:6d:7f:d9:b7:
fc:70:d7:8e:78:bb:18:4e:33:1b:67:83:87:36:37:64:e2:8d:
a0:68:1b:32:fa:5b:59:e8:bb:7d:68:c5:9f:0a:63:6a:7d:86:
fd:53:09:5d:55:49:82:e5:7a:d2:f3:aa:70:b4:a9:03:39:25:
5a:be:e4:fa:ed:f7:b8:44:51:bd:41:00:45:0b:93:57:19:02:
fe:26:aa:a9:65:df:78:35:ad:28:62:99:06:fe:e9:22:4b:b5:
e7:8a:aa:9b:37:5e:a9:78:0b:a9:bd:79:4c:82:6d:d8:49:8f:
cd:de:77:b0:50:dd:54:3c:4d:54:e5:f9:c4:7f:9e:9c:e8:1d:
ac:c4:eb:5f:59:c5:9d:db:dd:ac:8f:7f:4d:86:3d:7e:93:d3:
65:4d:55:53:04:c7:45:8c:1a:6e:f6:37:07:62:ba:27:dc:48:
2f:3e:83:29
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSqyp7zjoSI/BdYfeW4dTOxwur3MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0ODY3RjExQTFENjUyNjgyRkE5NUVEOTExQjIwRDgx
MTM5ODUzRDAeFw0yNDA4MjgxNjEyNDVaFw0yNTA4MjcxNjE3NDVaMDMxMTAvBgNV
BAMTKDQzQzI4Njc4MjM2NzVEOEQyQzA5OTlBNkMzQjlDMjNGM0U2NkNFMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVR6SV5JNizwglxKm53PtKsvXm
iA5Pnvvi5b5UYPj2a9riDWKF+pS+fhQ4l55lXO+a4CSdSkk1RBBi2qBWGtb3sUZK
kjbleny0/b29wbyvdFg2w/ScA1Gv0II9FQoPjOt87YONJRP04EO5JbO/dbAhTvIL
guiXL4Tq5MPlPoxllpbz9qXnR4ksXM5FnOEQGmN5h5FCLQ8SviLG1WtEafVqBZ/t
+yt4Jyr7TekjrqQtUBG1YooEZ935afhvSigtcWKP+Cqy7sg/ACQdYxHifV+QGYTH
ZHmu8PEZyElGCOX5AK8TOW+UYRtViyzMpuOqSvXzW/fYjpBP2tyIcwH6qjhTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQ8KGeCNnXY0sCZmmw7nCPz5mzh0wHwYDVR0j
BBgwFoAUPUhn8RodZSaC+pXtkRsg2BE5hT0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTJuZ1UyUGtlVFJoZEFqQnpwVTRlaFVCcGV5UHJNQnF0ekdnYXdwbXE3
aWQvMC8zRDQ4NjdGMTFBMUQ2NTI2ODJGQTk1RUQ5MTFCMjBEODExMzk4NTNELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNENDg2N0YxMUExRDY1MjY4
MkZBOTVFRDkxMUIyMEQ4MTEzOTg1M0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUybmdVMlBrZVRSaGRBakJ6cFU0ZWhVQnBleVByTUJxdHpHZ2F3cG1xN2lkLzAv
MzQzNTJlMzEzODMyMmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALbY3MA0GCSqGSIb3DQEBCwUAA4IBAQAHWn6rF6c9
h1WMykTS+rUyIJX98huOjYBU8It/1bx4r2foqQzHWgTmiM1praa4tRrcHTJvxZJc
Qihl6R9Wo7h8YdfuT9/DlANORiv+iU3fxGJCeBIEyW1/2bf8cNeOeLsYTjMbZ4OH
Njdk4o2gaBsy+ltZ6Lt9aMWfCmNqfYb9UwldVUmC5XrS86pwtKkDOSVavuT67fe4
RFG9QQBFC5NXGQL+JqqpZd94Na0oYpkG/ukiS7XniqqbN16peAupvXlMgm3YSY/N
3newUN1UPE1U5fnEf56c6B2sxOtfWcWd292sj39Nhj1+k9NlTVVTBMdFjBpu9jcH
Yron3EgvPoMp
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:39:16 2025 by rpki-client