Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa
File: 34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa (raw, json)
Hash identifier: NRdBeduE3UUyB/bhdSX/DNUPqQNI7xuRR65U0LtvjJY=
Subject key identifier: D8:38:D8:5C:45:31:4B:53:0D:74:FB:18:60:83:FF:D5:40:03:D4:64
Certificate issuer: /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial: 3BA624BE6FE779249A875F1F8227CF5FF559695D
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa
Signing time: Wed 27 Mar 2024 18:45:27 +0000
ROA not before: Wed 27 Mar 2024 18:40:27 +0000
ROA not after: Wed 26 Mar 2025 18:45:27 +0000
asID: 268101
IP address blocks: 45.168.156.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a6:24:be:6f:e7:79:24:9a:87:5f:1f:82:27:cf:5f:f5:59:69:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Validity
Not Before: Mar 27 18:40:27 2024 GMT
Not After : Mar 26 18:45:27 2025 GMT
Subject: CN=D838D85C45314B530D74FB186083FFD54003D464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:71:45:b7:fa:6b:49:ce:b5:df:77:54:af:d9:
e9:1b:c9:60:21:27:c0:8c:01:10:57:d8:00:37:3a:
e8:0b:20:53:79:ad:4c:b6:fa:ad:f4:f8:44:20:6d:
1e:24:7f:9f:e2:49:aa:c6:cf:7a:38:6d:dd:ab:91:
f5:0a:87:98:0e:db:22:bf:ba:5f:a6:e3:2c:07:e8:
ba:a7:d1:d1:9b:41:2c:87:29:4b:f2:80:35:0c:6f:
53:f5:09:12:a9:3e:66:9d:be:07:8a:0f:2c:20:51:
af:e5:3c:52:4d:5c:64:e0:f1:c9:1d:fa:01:12:b3:
6a:c7:7d:0d:16:2d:ab:9b:9f:65:f5:3c:0b:f8:24:
be:c2:9e:70:94:6e:27:bd:12:d7:45:d1:dc:94:66:
bb:b8:7b:36:ea:41:7e:95:e0:d2:85:f6:9d:bc:76:
e6:ad:c6:63:aa:86:16:af:82:7c:15:22:db:77:3d:
0b:9e:4d:55:56:ed:2f:e1:4c:f3:5c:5e:c9:93:6b:
a1:4b:11:de:af:62:d1:36:30:e6:42:da:c9:0c:9f:
22:c1:05:0a:c3:d7:ae:5b:8b:a6:89:3a:d2:8e:b4:
15:93:df:62:2e:89:e1:23:6c:fe:1d:71:81:42:9d:
c5:7e:08:db:8d:2d:23:4b:0f:d4:65:9d:91:e9:b4:
95:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:38:D8:5C:45:31:4B:53:0D:74:FB:18:60:83:FF:D5:40:03:D4:64
X509v3 Authority Key Identifier:
keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32332d3233203d3e20323638313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.156.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:10:bd:b8:60:72:61:8c:4a:2e:12:e8:c8:97:4e:23:78:d9:
4e:13:01:94:f6:06:54:da:b0:e4:4b:ff:1f:dd:95:ec:7a:d8:
49:83:59:68:cc:2e:bc:86:e7:a2:d2:12:e1:b5:22:6f:00:d5:
04:5b:55:d0:f9:a3:7c:46:7d:69:f3:05:3d:73:fc:95:e0:57:
0a:17:cc:12:84:27:d9:e2:04:54:fb:b2:cb:49:cb:c6:c1:4d:
24:18:87:a7:f1:ff:c0:2d:d3:e9:ff:73:f3:ad:70:31:e7:bf:
06:f8:62:b0:99:35:f9:ba:03:af:6b:b4:96:28:18:5b:5f:b2:
5b:c5:3a:58:9f:06:01:93:2b:e0:f9:a9:96:28:6a:29:2c:e2:
b6:52:1f:d5:3b:d9:40:b0:1f:7a:19:3e:60:76:0f:e9:e2:9c:
27:af:dd:8b:fd:99:c6:65:a8:f1:47:a5:5d:bc:bc:26:3c:f3:
bf:c7:06:b4:a2:fd:34:d9:c9:c6:9f:34:9f:90:cc:78:4e:e8:
cd:d2:39:7b:e3:8a:dd:18:d6:01:9f:e3:a3:b1:16:b1:ea:8c:
b8:94:0a:f5:25:1f:24:45:79:44:45:ac:a9:c9:2d:03:d7:78:
a3:37:9f:57:98:6e:8a:f6:06:49:3c:7a:ba:f3:46:3f:c6:c8:
c4:cf:b8:da
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO6Ykvm/neSSah18fgifPX/VZaV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0EzN0U2MTBGMzg4QTFEREQ2QjcxQjhBREQ5NDVGOTYw
NUVBMjQ3MjAeFw0yNDAzMjcxODQwMjdaFw0yNTAzMjYxODQ1MjdaMDMxMTAvBgNV
BAMTKEQ4MzhEODVDNDUzMTRCNTMwRDc0RkIxODYwODNGRkQ1NDAwM0Q0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIcUW3+mtJzrXfd1Sv2ekbyWAh
J8CMARBX2AA3OugLIFN5rUy2+q30+EQgbR4kf5/iSarGz3o4bd2rkfUKh5gO2yK/
ul+m4ywH6Lqn0dGbQSyHKUvygDUMb1P1CRKpPmadvgeKDywgUa/lPFJNXGTg8ckd
+gESs2rHfQ0WLaubn2X1PAv4JL7CnnCUbie9EtdF0dyUZru4ezbqQX6V4NKF9p28
duatxmOqhhavgnwVItt3PQueTVVW7S/hTPNcXsmTa6FLEd6vYtE2MOZC2skMnyLB
BQrD165bi6aJOtKOtBWT32IuieEjbP4dcYFCncV+CNuNLSNLD9RlnZHptJVfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2DjYXEUxS1MNdPsYYIP/1UAD1GQwHwYDVR0j
BBgwFoAUyjfmEPOIod3WtxuK3ZRflgXqJHIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNVJqVmFhMllOc3ZTeTI1WVR2TG52dTF1U2VTUGRLclNOMjdOWEN1cUpL
TlgvMC9DQTM3RTYxMEYzODhBMURERDZCNzFCOEFERDk0NUY5NjA1RUEyNDcyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NBMzdFNjEwRjM4OEExRERE
NkI3MUI4QUREOTQ1Rjk2MDVFQTI0NzIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVSalZhYTJZTnN2U3kyNVlUdkxudnUxdVNlU1BkS3JTTjI3TlhDdXFKS05YLzAv
MzQzNTJlMzEzNjM4MmUzMTM1MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzgzMTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtqJwwDQYJKoZIhvcNAQELBQADggEBAKoQvbhg
cmGMSi4S6MiXTiN42U4TAZT2BlTasORL/x/dlex62EmDWWjMLryG56LSEuG1Im8A
1QRbVdD5o3xGfWnzBT1z/JXgVwoXzBKEJ9niBFT7sstJy8bBTSQYh6fx/8At0+n/
c/OtcDHnvwb4YrCZNfm6A69rtJYoGFtfslvFOlifBgGTK+D5qZYoaiks4rZSH9U7
2UCwH3oZPmB2D+ninCev3Yv9mcZlqPFHpV28vCY887/HBrSi/TTZycafNJ+QzHhO
6M3SOXvjit0Y1gGf46OxFrHqjLiUCvUlHyRFeURFrKnJLQPXeKM3n1eYbor2Bkk8
errzRj/GyMTPuNo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org