Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32322d3234203d3e20323636313233.roa
File: 34352e352e3232302e302f32322d3234203d3e20323636313233.roa (raw, json)
Hash identifier: UK2wZqQakxjavH1uT68slBeMJT9VcbA8BXZHujb/hWM=
Subject key identifier: 5A:44:DC:76:7E:F0:7E:B6:71:23:FE:77:F5:20:6A:0A:CE:48:E5:A1
Certificate issuer: /CN=B540516BF13E60C4B889243545C5A243667A1C8E
Certificate serial: 4E651D0ABFE719A099728E0996F8F11695D5A8B4
Authority key identifier: B5:40:51:6B:F1:3E:60:C4:B8:89:24:35:45:C5:A2:43:66:7A:1C:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B540516BF13E60C4B889243545C5A243667A1C8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32322d3234203d3e20323636313233.roa
Signing time: Thu 13 Oct 2022 19:09:30 +0000
ROA not before: Thu 13 Oct 2022 19:04:30 +0000
ROA not after: Thu 12 Oct 2023 19:09:30 +0000
asID: 266123
IP address blocks: 45.5.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:65:1d:0a:bf:e7:19:a0:99:72:8e:09:96:f8:f1:16:95:d5:a8:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B540516BF13E60C4B889243545C5A243667A1C8E
Validity
Not Before: Oct 13 19:04:30 2022 GMT
Not After : Oct 12 19:09:30 2023 GMT
Subject: CN=5A44DC767EF07EB67123FE77F5206A0ACE48E5A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9c:b3:99:a9:ca:f7:73:84:76:98:04:db:33:
23:a6:be:75:79:9c:a2:97:0b:d3:1b:88:0f:35:50:
2a:3b:bb:b0:2f:e1:6f:56:e4:63:58:aa:e8:2d:21:
02:b8:b9:e3:ed:44:9f:71:35:ef:4e:7a:0d:95:3c:
a8:f9:f6:7a:2c:05:dc:02:e9:ad:62:0d:82:48:13:
4d:95:b6:28:b1:5c:43:7c:5d:92:d1:1a:50:f8:79:
40:71:8a:b3:c3:8a:19:e6:43:12:c4:04:38:f8:86:
72:af:ae:1a:1d:37:e9:e1:c0:d0:11:59:30:ce:c7:
26:9d:e9:9d:b7:37:c3:16:c7:48:7b:d5:95:83:4e:
9d:15:39:c0:a3:eb:73:55:4a:20:f0:dc:b3:04:c4:
ef:31:73:f0:21:b0:4e:84:3f:0b:5d:50:e1:5f:55:
5c:13:96:14:5d:7a:80:d2:a3:a9:a1:95:aa:bd:fc:
c3:93:c1:19:9a:82:a6:88:b7:3d:f8:f2:5b:20:86:
bc:56:ed:da:59:2f:23:66:1f:59:dc:7a:17:1c:74:
34:9b:ed:8a:c2:e1:fa:96:7a:1e:c6:f9:45:29:7a:
b2:bd:1d:02:e6:81:8d:9b:94:ff:2b:c2:87:f6:90:
a5:2d:a5:15:1d:f3:45:cf:bb:b3:5f:e2:8e:03:bf:
f9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:44:DC:76:7E:F0:7E:B6:71:23:FE:77:F5:20:6A:0A:CE:48:E5:A1
X509v3 Authority Key Identifier:
keyid:B5:40:51:6B:F1:3E:60:C4:B8:89:24:35:45:C5:A2:43:66:7A:1C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/B540516BF13E60C4B889243545C5A243667A1C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B540516BF13E60C4B889243545C5A243667A1C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5f7VwqbvHL1Zbkuxafh8in3C1JeG6343dTTw6fdV2uct/0/34352e352e3232302e302f32322d3234203d3e20323636313233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.220.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:a8:62:10:a0:c5:c0:51:31:44:0e:72:b3:d1:1a:e2:af:9b:
77:c8:df:01:fd:c9:49:3b:a6:43:ec:60:29:3f:0b:3b:02:ba:
80:28:c8:63:93:40:81:bf:cc:d1:2a:10:f9:2a:d1:23:7f:4d:
b2:dd:ec:24:7d:1c:dc:8e:17:99:90:05:03:cb:03:15:f7:36:
b0:7a:ae:93:e5:2d:67:d5:4c:76:83:a2:11:f8:50:10:66:19:
99:6f:c4:d8:4a:e2:9a:bf:c3:b8:31:81:a8:16:a9:d4:2e:18:
64:de:7d:b6:90:6f:eb:94:cd:ba:ed:da:b9:c2:88:eb:69:c9:
db:21:d0:80:e2:7c:95:dd:06:d1:8f:a4:49:f4:ca:fd:d3:e2:
e3:04:60:ae:ac:9d:13:ac:db:2b:1b:8c:e3:fc:dc:85:3d:b0:
ad:ce:97:20:9a:99:a7:52:db:ba:e3:ba:bc:f4:6f:13:02:58:
66:64:c4:56:4a:dc:cb:a0:70:73:91:52:9a:1d:11:fd:e3:e2:
9c:a3:a8:5e:a0:1a:18:d9:e7:e8:80:92:88:8a:db:74:a7:27:
75:60:e2:90:ef:2d:cf:f4:e7:af:ff:17:fb:9f:11:25:1b:cb:
5d:38:3a:76:df:5b:33:53:36:2a:10:24:59:ba:5f:3b:3a:9d:
d5:e0:ac:79
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUTmUdCr/nGaCZco4JlvjxFpXVqLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU0MDUxNkJGMTNFNjBDNEI4ODkyNDM1NDVDNUEyNDM2
NjdBMUM4RTAeFw0yMjEwMTMxOTA0MzBaFw0yMzEwMTIxOTA5MzBaMDMxMTAvBgNV
BAMTKDVBNDREQzc2N0VGMDdFQjY3MTIzRkU3N0Y1MjA2QTBBQ0U0OEU1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nLOZqcr3c4R2mATbMyOmvnV5
nKKXC9MbiA81UCo7u7Av4W9W5GNYqugtIQK4uePtRJ9xNe9Oeg2VPKj59nosBdwC
6a1iDYJIE02VtiixXEN8XZLRGlD4eUBxirPDihnmQxLEBDj4hnKvrhodN+nhwNAR
WTDOxyad6Z23N8MWx0h71ZWDTp0VOcCj63NVSiDw3LMExO8xc/AhsE6EPwtdUOFf
VVwTlhRdeoDSo6mhlaq9/MOTwRmagqaItz348lsghrxW7dpZLyNmH1ncehccdDSb
7YrC4fqWeh7G+UUperK9HQLmgY2blP8rwof2kKUtpRUd80XPu7Nf4o4Dv/klAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUWkTcdn7wfrZxI/539SBqCs5I5aEwHwYDVR0j
BBgwFoAUtUBRa/E+YMS4iSQ1RcWiQ2Z6HI4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWY3VndxYnZITDFaYmt1eGFmaDhpbjNDMUplRzYzNDNkVFR3NmZkVjJ1
Y3QvMC9CNTQwNTE2QkYxM0U2MEM0Qjg4OTI0MzU0NUM1QTI0MzY2N0ExQzhFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I1NDA1MTZCRjEzRTYwQzRC
ODg5MjQzNTQ1QzVBMjQzNjY3QTFDOEUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVmN1Z3cWJ2SEwxWmJrdXhhZmg4aW4zQzFKZUc2MzQzZFRUdzZmZFYydWN0LzAv
MzQzNTJlMzUyZTMyMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNjMx
MzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0F3DANBgkqhkiG9w0BAQsFAAOCAQEAjahiEKDFwFEx
RA5ys9Ea4q+bd8jfAf3JSTumQ+xgKT8LOwK6gCjIY5NAgb/M0SoQ+SrRI39Nst3s
JH0c3I4XmZAFA8sDFfc2sHquk+UtZ9VMdoOiEfhQEGYZmW/E2Erimr/DuDGBqBap
1C4YZN59tpBv65TNuu3aucKI62nJ2yHQgOJ8ld0G0Y+kSfTK/dPi4wRgrqydE6zb
KxuM4/zchT2wrc6XIJqZp1LbuuO6vPRvEwJYZmTEVkrcy6Bwc5FSmh0R/ePinKOo
XqAaGNnn6ICSiIrbdKcndWDikO8tz/Tnr/8X+58RJRvLXTg6dt9bM1M2KhAkWbpf
Ozqd1eCseQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:22:13 2025 by rpki-client