Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/34352e3137332e38382e302f32322d3234203d3e20323638383139.roa
File: 34352e3137332e38382e302f32322d3234203d3e20323638383139.roa (raw, json)
Hash identifier: +3AYxjF5KG4kfE+dt9BumquLrqWvIs5uPnkoBjoXaOU=
Subject key identifier: EA:34:93:EC:7D:6D:31:AA:21:90:7E:46:03:C8:54:CF:96:77:E3:F4
Certificate issuer: /CN=6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9
Certificate serial: 41CCFC836BA78A35DE968707F31373E4C0CD0E64
Authority key identifier: 6A:FA:DF:67:C1:53:29:A0:A3:A3:65:6D:FF:DF:6C:F4:FA:51:85:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/34352e3137332e38382e302f32322d3234203d3e20323638383139.roa
Signing time: Tue 26 Dec 2023 15:25:21 +0000
ROA not before: Tue 26 Dec 2023 15:20:21 +0000
ROA not after: Tue 24 Dec 2024 15:25:21 +0000
asID: 268819
IP address blocks: 45.173.88.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:cc:fc:83:6b:a7:8a:35:de:96:87:07:f3:13:73:e4:c0:cd:0e:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9
Validity
Not Before: Dec 26 15:20:21 2023 GMT
Not After : Dec 24 15:25:21 2024 GMT
Subject: CN=EA3493EC7D6D31AA21907E4603C854CF9677E3F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:de:80:37:7e:84:72:fd:34:fe:84:31:cb:
70:76:20:42:37:bf:13:9a:08:44:98:08:8d:f1:88:
8d:c2:1a:b6:b4:b6:68:53:36:63:7c:dd:ce:36:6f:
34:7c:5a:79:6b:2b:24:da:ff:d6:1f:5f:8a:96:fc:
d8:4c:ea:1b:c1:22:8e:17:00:81:c5:6a:01:ca:73:
75:2b:65:de:21:04:01:e3:45:4d:5e:e1:9f:a4:4d:
a8:6d:7f:ac:44:17:b2:ce:a7:d5:7f:af:88:b5:b3:
88:83:28:76:48:c3:81:37:63:fa:41:66:fe:a7:07:
de:61:5d:e4:30:d6:a3:93:23:be:92:97:8f:4f:4e:
7e:18:cb:12:ef:9d:e0:1b:19:de:0e:dc:3e:e8:17:
92:c9:c7:05:a5:8f:30:cd:2d:f7:64:48:5f:4e:72:
3b:f9:57:b3:0f:d4:06:0d:4c:42:35:f4:12:75:89:
11:0e:f9:34:3c:9a:12:a3:5d:5e:a7:db:7e:1e:25:
d8:27:a0:63:d6:5d:76:b4:00:42:5d:d5:de:32:82:
33:35:f2:b0:58:3f:0d:66:ab:73:0e:b4:a8:3a:81:
f1:84:9f:09:47:23:61:d8:6f:1f:f6:13:d0:a1:24:
69:83:fa:79:aa:14:5f:bb:ac:7d:d0:19:aa:aa:98:
7d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:34:93:EC:7D:6D:31:AA:21:90:7E:46:03:C8:54:CF:96:77:E3:F4
X509v3 Authority Key Identifier:
keyid:6A:FA:DF:67:C1:53:29:A0:A3:A3:65:6D:FF:DF:6C:F4:FA:51:85:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AFADF67C15329A0A3A3656DFFDF6CF4FA5185D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/53becEPPg8g2UGZLFKdmLnXmgA3m8t5v9qThcY9TP31y/0/34352e3137332e38382e302f32322d3234203d3e20323638383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.88.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:c6:8a:af:93:73:8f:c2:f2:96:35:10:c2:5c:8c:18:ff:50:
c7:36:c8:fd:4b:02:3c:c8:ee:2a:ea:64:67:a8:5d:c1:c8:c1:
f2:4a:e0:b0:57:36:89:07:c4:15:7e:46:8c:ee:6e:ea:aa:60:
6d:82:45:78:a8:f1:1e:4d:44:02:95:52:d7:4e:31:e9:61:44:
18:9f:1a:14:c3:cb:d3:ec:25:a7:47:ca:54:a2:e8:6a:68:62:
b2:76:05:8d:bc:71:1b:2c:1b:40:f2:a4:62:16:9f:a5:4d:7d:
cc:99:8f:49:44:cf:28:f1:1d:bf:e2:5d:01:c4:4c:b9:cb:7a:
00:02:73:b3:8d:c8:a1:a6:5e:12:7b:f9:37:a3:94:1e:45:f9:
28:d9:4e:38:de:8e:02:45:2b:ca:ef:17:d8:77:a8:3d:98:1b:
95:7f:52:40:67:d3:e4:0f:16:e6:b0:12:c7:9d:2b:5a:62:5a:
84:f5:13:4b:ae:9b:ba:71:e7:a7:45:f2:1a:9a:c7:b9:a7:56:
a4:67:46:c5:a9:33:f7:8b:cd:e5:ab:81:15:f3:73:a9:a3:db:
fb:78:e0:6e:e5:5e:11:57:4b:bc:23:15:15:e4:60:a9:3d:a1:
98:f7:f0:b3:88:8e:e8:aa:18:28:ba:e5:ea:cf:3d:62:4b:60:
d1:53:72:03
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQcz8g2unijXelocH8xNz5MDNDmQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFGQURGNjdDMTUzMjlBMEEzQTM2NTZERkZERjZDRjRG
QTUxODVEOTAeFw0yMzEyMjYxNTIwMjFaFw0yNDEyMjQxNTI1MjFaMDMxMTAvBgNV
BAMTKEVBMzQ5M0VDN0Q2RDMxQUEyMTkwN0U0NjAzQzg1NENGOTY3N0UzRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8mt6AN36Ecv00/oQxy3B2IEI3
vxOaCESYCI3xiI3CGra0tmhTNmN83c42bzR8WnlrKyTa/9YfX4qW/NhM6hvBIo4X
AIHFagHKc3UrZd4hBAHjRU1e4Z+kTahtf6xEF7LOp9V/r4i1s4iDKHZIw4E3Y/pB
Zv6nB95hXeQw1qOTI76Sl49PTn4YyxLvneAbGd4O3D7oF5LJxwWljzDNLfdkSF9O
cjv5V7MP1AYNTEI19BJ1iREO+TQ8mhKjXV6n234eJdgnoGPWXXa0AEJd1d4ygjM1
8rBYPw1mq3MOtKg6gfGEnwlHI2HYbx/2E9ChJGmD+nmqFF+7rH3QGaqqmH17AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU6jST7H1tMaohkH5GA8hUz5Z34/QwHwYDVR0j
BBgwFoAUavrfZ8FTKaCjo2Vt/99s9PpRhdkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNiZWNFUFBnOGcyVUdaTEZLZG1MblhtZ0EzbTh0NXY5cVRoY1k5VFAz
MXkvMC82QUZBREY2N0MxNTMyOUEwQTNBMzY1NkRGRkRGNkNGNEZBNTE4NUQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzZBRkFERjY3QzE1MzI5QTBB
M0EzNjU2REZGREY2Q0Y0RkE1MTg1RDkuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzYmVjRVBQZzhnMlVHWkxGS2RtTG5YbWdBM204dDV2OXFUaGNZOVRQMzF5LzAv
MzQzNTJlMzEzNzMzMmUzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa1YMA0GCSqGSIb3DQEBCwUAA4IBAQCqxoqvk3OP
wvKWNRDCXIwY/1DHNsj9SwI8yO4q6mRnqF3ByMHySuCwVzaJB8QVfkaM7m7qqmBt
gkV4qPEeTUQClVLXTjHpYUQYnxoUw8vT7CWnR8pUouhqaGKydgWNvHEbLBtA8qRi
Fp+lTX3MmY9JRM8o8R2/4l0BxEy5y3oAAnOzjcihpl4Se/k3o5QeRfko2U443o4C
RSvK7xfYd6g9mBuVf1JAZ9PkDxbmsBLHnStaYlqE9RNLrpu6ceenRfIamse5p1ak
Z0bFqTP3i83lq4EV83Opo9v7eOBu5V4RV0u8IxUV5GCpPaGY9/CziI7oqhgouuXq
zz1iS2DRU3ID
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:38:57 2025 by rpki-client