Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/34352e3232342e3136342e302f32322d3234203d3e20323637363632.roa
File: 34352e3232342e3136342e302f32322d3234203d3e20323637363632.roa (raw, json)
Hash identifier: jB8LdBfHb9cotYkJDeG1kEWynpjsrzFmAt9qeA1EPRM=
Subject key identifier: 7F:F2:77:5A:19:34:1D:AD:EC:24:33:C9:D7:51:D9:E0:DB:2A:FF:79
Certificate issuer: /CN=7AAFCFB9DE7462BB49F0748B8300043D3B895DCA
Certificate serial: 29B96BC6791B3266A6B043F45680546D51995350
Authority key identifier: 7A:AF:CF:B9:DE:74:62:BB:49:F0:74:8B:83:00:04:3D:3B:89:5D:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/34352e3232342e3136342e302f32322d3234203d3e20323637363632.roa
Signing time: Mon 17 Jul 2023 14:30:23 +0000
ROA not before: Mon 17 Jul 2023 14:25:23 +0000
ROA not after: Mon 15 Jul 2024 14:30:23 +0000
asID: 267662
IP address blocks: 45.224.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:b9:6b:c6:79:1b:32:66:a6:b0:43:f4:56:80:54:6d:51:99:53:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AAFCFB9DE7462BB49F0748B8300043D3B895DCA
Validity
Not Before: Jul 17 14:25:23 2023 GMT
Not After : Jul 15 14:30:23 2024 GMT
Subject: CN=7FF2775A19341DADEC2433C9D751D9E0DB2AFF79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:2d:1c:64:fb:1b:7e:81:ba:ee:0f:2f:a6:
c2:6b:f8:9e:58:fc:2e:76:b0:47:e8:30:8e:69:61:
70:cd:c0:4f:4d:84:9f:54:13:4b:26:55:08:95:32:
f7:38:d0:8e:0b:5d:84:d7:64:0a:4f:07:f3:18:20:
3d:52:90:b9:53:4e:31:69:9c:36:25:73:87:8e:17:
c0:61:a3:07:6f:75:c4:26:8c:61:93:80:6f:aa:60:
d7:a0:15:2f:79:a1:c0:65:56:f9:f0:01:0d:ac:35:
ef:88:5d:8b:a3:80:bb:f3:49:71:96:5b:e0:cd:de:
0b:af:c6:5b:7c:08:d0:da:11:03:37:98:f7:96:6f:
62:da:47:85:a6:5f:47:fd:df:b8:c2:19:1e:40:05:
fc:c2:c8:08:80:3e:a2:a7:d0:26:92:77:b7:d0:c0:
76:92:44:1b:12:17:10:af:e4:68:c1:db:8b:1a:45:
70:aa:8a:ba:c4:9a:9e:5b:ca:14:01:4f:e3:af:4d:
a7:0d:9a:21:1f:09:69:24:fb:d8:e1:b7:64:51:de:
48:7d:ba:ee:e7:77:bb:18:ee:46:dc:1b:d1:ff:1e:
0f:6c:fa:76:07:79:a5:42:39:cc:ed:52:a3:46:e3:
6f:19:49:2f:c9:79:7a:c0:4d:5d:07:7e:2b:3c:f9:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:77:5A:19:34:1D:AD:EC:24:33:C9:D7:51:D9:E0:DB:2A:FF:79
X509v3 Authority Key Identifier:
keyid:7A:AF:CF:B9:DE:74:62:BB:49:F0:74:8B:83:00:04:3D:3B:89:5D:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/34352e3232342e3136342e302f32322d3234203d3e20323637363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.164.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:2d:49:db:ad:a4:1b:7a:89:d1:d0:f9:d7:d7:a1:73:dc:b0:
e0:d3:e3:6b:dd:f2:6b:59:c0:18:97:01:aa:24:88:33:7b:b0:
80:fd:5a:a4:79:b8:be:83:5f:c0:fd:51:f3:33:45:7d:4f:25:
30:6f:69:85:74:c6:cb:f4:b0:cc:30:e0:54:ad:4b:ac:30:1c:
00:50:d8:21:3e:3e:75:17:cb:0a:80:cf:9c:4e:1f:3c:7f:1d:
87:9d:e1:32:45:5c:7c:a5:2c:44:74:7d:c2:e6:e9:3a:e5:1e:
f9:a1:76:27:f6:aa:09:a8:d4:87:5a:d3:9f:ca:47:78:d5:89:
2c:a1:bd:9f:e7:c8:e9:69:b3:1c:6d:ad:ae:12:5c:15:0b:7b:
69:ad:d1:d5:09:40:eb:ce:75:95:9b:91:2d:39:bc:84:1c:9e:
12:a6:86:f3:8d:37:92:73:15:fd:d0:f1:5d:3f:6e:ab:b5:ee:
de:41:d4:03:1f:49:cf:01:62:2c:e8:0d:3d:e1:54:77:30:63:
50:45:f9:ec:1f:2e:7d:1f:41:22:d6:6f:67:12:42:23:6e:7c:
ff:0e:aa:03:7b:cd:83:cb:ba:35:6c:07:ec:98:b6:ca:f3:97:
ea:1d:7f:80:c3:3c:e0:09:cb:73:c8:7f:60:e7:06:bf:91:d4:
96:29:23:83
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKblrxnkbMmamsEP0VoBUbVGZU1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0FBRkNGQjlERTc0NjJCQjQ5RjA3NDhCODMwMDA0M0Qz
Qjg5NURDQTAeFw0yMzA3MTcxNDI1MjNaFw0yNDA3MTUxNDMwMjNaMDMxMTAvBgNV
BAMTKDdGRjI3NzVBMTkzNDFEQURFQzI0MzNDOUQ3NTFEOUUwREIyQUZGNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEC0cZPsbfoG67g8vpsJr+J5Y
/C52sEfoMI5pYXDNwE9NhJ9UE0smVQiVMvc40I4LXYTXZApPB/MYID1SkLlTTjFp
nDYlc4eOF8BhowdvdcQmjGGTgG+qYNegFS95ocBlVvnwAQ2sNe+IXYujgLvzSXGW
W+DN3guvxlt8CNDaEQM3mPeWb2LaR4WmX0f937jCGR5ABfzCyAiAPqKn0CaSd7fQ
wHaSRBsSFxCv5GjB24saRXCqirrEmp5byhQBT+OvTacNmiEfCWkk+9jht2RR3kh9
uu7nd7sY7kbcG9H/Hg9s+nYHeaVCOcztUqNG428ZSS/JeXrATV0Hfis8+WEtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUf/J3Whk0Ha3sJDPJ11HZ4Nsq/3kwHwYDVR0j
BBgwFoAUeq/Pud50YrtJ8HSLgwAEPTuJXcowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNU1WZ2VMOWhqak1NdWJCYTFXWVRURlhvRjYzWnhCR0s0MllSU1hhbkxV
b00vMC83QUFGQ0ZCOURFNzQ2MkJCNDlGMDc0OEI4MzAwMDQzRDNCODk1RENBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBQUZDRkI5REU3NDYyQkI0
OUYwNzQ4QjgzMDAwNDNEM0I4OTVEQ0EuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVNVmdlTDloampNTXViQmExV1lUVEZYb0Y2M1p4QkdLNDJZUlNYYW5MVW9NLzAv
MzQzNTJlMzIzMjM0MmUzMTM2MzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzczNjM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4KQwDQYJKoZIhvcNAQELBQADggEBAA8tSdut
pBt6idHQ+dfXoXPcsODT42vd8mtZwBiXAaokiDN7sID9WqR5uL6DX8D9UfMzRX1P
JTBvaYV0xsv0sMww4FStS6wwHABQ2CE+PnUXywqAz5xOHzx/HYed4TJFXHylLER0
fcLm6TrlHvmhdif2qgmo1Ida05/KR3jViSyhvZ/nyOlpsxxtra4SXBULe2mt0dUJ
QOvOdZWbkS05vIQcnhKmhvONN5JzFf3Q8V0/bqu17t5B1AMfSc8BYizoDT3hVHcw
Y1BF+ewfLn0fQSLWb2cSQiNufP8OqgN7zYPLujVsB+yYtsrzl+odf4DDPOAJy3PI
f2DnBr+R1JYpI4M=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:26:47 2025 by rpki-client