Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32392e302f32342d3234203d3e20323638323633.roa
File: 34352e3233372e32392e302f32342d3234203d3e20323638323633.roa (raw, json)
Hash identifier: HFEfGmOXM4L8vkZTHnUGcFEfqqWvcfomUS+mgeesFgc=
Subject key identifier: 8B:F3:06:0F:99:87:D1:6C:3C:9F:80:47:57:AB:34:45:73:A6:2C:B0
Certificate issuer: /CN=E22818D8F42D1506482150955FA216049875C2A8
Certificate serial: 1526E0FBDAC95C45F1E539EA26B716AE409A4B7A
Authority key identifier: E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32392e302f32342d3234203d3e20323638323633.roa
Signing time: Mon 05 Feb 2024 19:47:23 +0000
ROA not before: Mon 05 Feb 2024 19:42:23 +0000
ROA not after: Mon 03 Feb 2025 19:47:23 +0000
asID: 268263
IP address blocks: 45.237.29.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:26:e0:fb:da:c9:5c:45:f1:e5:39:ea:26:b7:16:ae:40:9a:4b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E22818D8F42D1506482150955FA216049875C2A8
Validity
Not Before: Feb 5 19:42:23 2024 GMT
Not After : Feb 3 19:47:23 2025 GMT
Subject: CN=8BF3060F9987D16C3C9F804757AB344573A62CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:ed:31:43:d1:e0:70:cb:c7:cb:5e:07:6f:
43:e3:fb:db:14:84:4b:dd:ac:37:67:bb:25:52:50:
04:ee:68:31:a7:99:5f:3d:e6:6e:9b:07:b5:b6:19:
18:75:6b:12:74:27:d7:0e:94:a1:82:9d:cf:89:bc:
02:3e:19:9b:72:ce:f9:c2:b9:b0:03:00:4b:12:46:
f4:0f:c9:8a:00:ac:9e:a7:27:99:81:59:9e:90:53:
9f:f8:9e:3a:13:53:90:65:9b:a1:f2:f5:27:34:82:
47:c8:4f:3e:1e:6c:35:d1:2f:1d:57:6a:fb:c7:d7:
d1:14:ba:87:f3:fc:65:58:c2:d9:8f:e9:f6:76:dc:
83:63:2d:14:75:72:0e:5f:7f:9c:c0:e4:e2:26:97:
44:48:9a:b5:05:9e:d8:f8:0d:04:e5:fd:af:3c:0a:
38:d1:5d:6f:95:38:71:07:c1:b0:58:c4:25:cb:38:
5d:3f:00:c9:d3:27:ce:c3:a5:dc:e2:d3:59:01:4a:
a3:4e:3b:64:71:89:ca:b9:c8:fd:10:c0:4e:5e:da:
cc:dc:94:30:63:e3:13:1c:31:61:9a:20:6a:35:ba:
05:3b:da:a3:f9:36:56:af:77:57:0c:82:89:87:9a:
db:c5:47:f8:e3:cc:3f:dc:a7:75:37:63:3f:6c:99:
2b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F3:06:0F:99:87:D1:6C:3C:9F:80:47:57:AB:34:45:73:A6:2C:B0
X509v3 Authority Key Identifier:
keyid:E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/E22818D8F42D1506482150955FA216049875C2A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32392e302f32342d3234203d3e20323638323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.29.0/24
Signature Algorithm: sha256WithRSAEncryption
63:81:a6:53:ae:be:2c:82:d7:ce:20:22:43:6f:76:ed:a7:fb:
ea:d2:a6:25:bd:65:41:86:53:90:95:dc:81:fe:76:14:12:eb:
5e:c2:ec:8b:bb:8b:50:f4:10:6a:70:4e:35:b9:6d:f9:95:c0:
b7:46:9e:67:a0:fb:1c:08:11:a2:89:b2:7b:03:20:9a:37:6d:
b3:43:04:2c:3f:3b:2d:b4:fc:95:78:07:e8:00:1f:37:54:f8:
48:3d:e9:12:3a:8e:45:65:87:93:dd:39:a3:f3:41:5f:ab:70:
71:3e:48:86:1f:20:5a:50:36:15:3d:7a:56:d1:07:22:03:fe:
ad:e8:62:9c:28:51:3c:4a:84:d3:76:04:74:c6:88:41:fa:56:
14:3d:25:e4:2a:e1:7f:86:f4:3f:53:1f:cc:e9:4c:c5:e4:2d:
37:41:ad:78:ec:56:88:80:7b:00:f4:6e:43:45:1d:6a:b1:2c:
73:d6:60:93:3a:d8:6e:0f:92:97:8e:2e:b3:13:a0:84:77:63:
8e:d2:b8:91:bc:40:83:40:cd:aa:25:1a:30:d9:f6:3b:42:ce:
f8:b2:e8:cc:27:11:a8:3c:73:56:9c:76:a0:98:e4:5c:3b:28:
ee:fd:46:22:6f:84:6d:77:2a:bd:cf:42:f8:db:06:5a:08:2d:
23:60:51:d1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFSbg+9rJXEXx5TnqJrcWrkCaS3owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTIyODE4RDhGNDJEMTUwNjQ4MjE1MDk1NUZBMjE2MDQ5
ODc1QzJBODAeFw0yNDAyMDUxOTQyMjNaFw0yNTAyMDMxOTQ3MjNaMDMxMTAvBgNV
BAMTKDhCRjMwNjBGOTk4N0QxNkMzQzlGODA0NzU3QUIzNDQ1NzNBNjJDQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7D+0xQ9HgcMvHy14Hb0Pj+9sU
hEvdrDdnuyVSUATuaDGnmV895m6bB7W2GRh1axJ0J9cOlKGCnc+JvAI+GZtyzvnC
ubADAEsSRvQPyYoArJ6nJ5mBWZ6QU5/4njoTU5Blm6Hy9Sc0gkfITz4ebDXRLx1X
avvH19EUuofz/GVYwtmP6fZ23INjLRR1cg5ff5zA5OIml0RImrUFntj4DQTl/a88
CjjRXW+VOHEHwbBYxCXLOF0/AMnTJ87Dpdzi01kBSqNOO2Rxicq5yP0QwE5e2szc
lDBj4xMcMWGaIGo1ugU72qP5Nlavd1cMgomHmtvFR/jjzD/cp3U3Yz9smSvHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUi/MGD5mH0Ww8n4BHV6s0RXOmLLAwHwYDVR0j
BBgwFoAU4igY2PQtFQZIIVCVX6IWBJh1wqgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNXBDTGNZS3hVUVlqNFN0bUJrR05QZjF4OU1BdndhazVmeUVvb3JON25j
UUwvMC9FMjI4MThEOEY0MkQxNTA2NDgyMTUwOTU1RkEyMTYwNDk4NzVDMkE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0UyMjgxOEQ4RjQyRDE1MDY0
ODIxNTA5NTVGQTIxNjA0OTg3NUMyQTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVwQ0xjWUt4VVFZajRTdG1Ca0dOUGYxeDlNQXZ3YWs1ZnlFb29yTjduY1FMLzAv
MzQzNTJlMzIzMzM3MmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALe0dMA0GCSqGSIb3DQEBCwUAA4IBAQBjgaZTrr4s
gtfOICJDb3btp/vq0qYlvWVBhlOQldyB/nYUEutewuyLu4tQ9BBqcE41uW35lcC3
Rp5noPscCBGiibJ7AyCaN22zQwQsPzsttPyVeAfoAB83VPhIPekSOo5FZYeT3Tmj
80Ffq3BxPkiGHyBaUDYVPXpW0QciA/6t6GKcKFE8SoTTdgR0xohB+lYUPSXkKuF/
hvQ/Ux/M6UzF5C03Qa147FaIgHsA9G5DRR1qsSxz1mCTOthuD5KXji6zE6CEd2OO
0riRvECDQM2qJRow2fY7Qs74sujMJxGoPHNWnHagmORcOyju/UYib4Rtdyq9z0L4
2wZaCC0jYFHR
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:49 2025 by rpki-client