Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa
File: 34352e372e302e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier: a8AMBx35J7vUKyzFbgxJrd0UPACDV6T/ZTPkx4U6MA8=
Subject key identifier: 79:AA:8A:C3:C7:44:04:B0:09:53:B3:7E:82:BD:41:34:BE:D1:06:0E
Certificate issuer: /CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
Certificate serial: 3923F148587484A251DA8B09A8DC70F5A9F50E85
Authority key identifier: BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa
Signing time: Tue 12 Mar 2024 21:17:27 +0000
ROA not before: Tue 12 Mar 2024 21:12:27 +0000
ROA not after: Tue 11 Mar 2025 21:17:27 +0000
asID: 267388
IP address blocks: 45.7.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:23:f1:48:58:74:84:a2:51:da:8b:09:a8:dc:70:f5:a9:f5:0e:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDF87BF76BB69D53875E8C1E1D2E5F88253D3025
Validity
Not Before: Mar 12 21:12:27 2024 GMT
Not After : Mar 11 21:17:27 2025 GMT
Subject: CN=79AA8AC3C74404B00953B37E82BD4134BED1060E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:e0:d1:c8:a6:8d:e9:1c:7f:ad:61:be:1c:
b4:03:1b:05:01:09:37:12:fd:f0:7d:ef:e7:9f:6e:
10:ea:67:56:39:3a:7e:e2:63:be:3f:d5:b9:12:bd:
f2:c0:83:d1:86:c4:ad:6d:71:35:a5:7e:91:9c:60:
10:4c:4c:03:40:05:d9:aa:c2:41:ff:41:c5:09:36:
e1:a3:13:c1:d4:d8:6f:96:b2:ac:37:53:4b:37:b8:
94:0b:40:67:ed:a0:00:2f:d7:b2:34:7e:35:0f:d6:
16:fe:17:a2:6d:0e:49:7a:c9:8d:bb:b1:60:0a:d9:
fc:3d:0a:4a:f2:b8:6d:28:34:9f:2a:a7:d2:8e:ef:
80:af:c0:1b:97:81:66:f9:c0:c5:6a:ef:fd:eb:39:
bc:2b:3e:77:24:9c:c9:77:bd:17:aa:1c:79:95:8c:
57:df:b8:58:9a:8b:25:19:14:45:90:53:99:01:bd:
46:10:1f:5d:a3:06:3d:bc:87:36:fd:32:b0:03:f7:
21:16:ac:0c:cd:41:71:54:a4:60:c4:2d:0e:cb:0f:
77:b9:e5:dd:49:13:a9:e7:51:b8:ba:ec:3d:67:4e:
13:70:66:4d:e9:b0:4d:3f:c2:9f:86:38:11:f8:ae:
d4:db:62:bd:be:f3:f2:e3:6a:a6:a9:f8:e0:9c:61:
48:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AA:8A:C3:C7:44:04:B0:09:53:B3:7E:82:BD:41:34:BE:D1:06:0E
X509v3 Authority Key Identifier:
keyid:BD:F8:7B:F7:6B:B6:9D:53:87:5E:8C:1E:1D:2E:5F:88:25:3D:30:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BDF87BF76BB69D53875E8C1E1D2E5F88253D3025.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.0.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:9a:69:23:6a:d9:bd:2a:08:15:ba:c3:c3:51:37:12:43:8b:
bf:c2:60:ac:a3:5f:e4:bb:e6:67:f8:bf:7e:70:ca:07:19:79:
19:7e:01:bb:c5:a2:89:46:78:ad:38:c4:69:c6:b9:2d:70:91:
f2:aa:27:01:06:c4:36:04:30:6e:e1:d1:7a:3d:7a:cb:85:e0:
5e:13:79:a4:e4:5a:c1:ca:40:9d:67:2a:76:ee:ef:4f:b6:7e:
89:7d:7a:df:07:1c:ed:93:c0:86:44:1e:d2:62:4e:09:7d:f8:
d1:2b:f5:7a:31:5d:0a:c4:be:dc:b7:78:e3:3b:eb:7c:09:2e:
be:db:04:ca:71:84:88:d0:a6:66:9d:fd:f5:99:8d:e6:dd:3f:
66:d9:13:1a:35:00:a5:c2:d7:3e:43:7a:c5:24:9c:0d:32:a2:
68:24:d7:4f:de:c6:ca:d9:0b:ea:3a:04:0e:d7:a7:50:43:6c:
db:bd:eb:b8:2d:05:03:9a:02:21:c3:3d:b1:f3:b4:4f:40:e0:
11:39:5e:c8:50:b3:8b:d4:f4:e0:3e:73:c2:26:e2:e0:f5:77:
a5:38:36:4b:84:4e:88:4c:96:1f:56:ab:a6:d8:fe:f1:6c:cb:
d8:4f:49:82:df:ec:68:9f:cf:d7:3f:50:3c:08:62:56:1e:53:
04:eb:71:cc
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgIUOSPxSFh0hKJR2osJqNxw9an1DoUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGODdCRjc2QkI2OUQ1Mzg3NUU4QzFFMUQyRTVGODgy
NTNEMzAyNTAeFw0yNDAzMTIyMTEyMjdaFw0yNTAzMTEyMTE3MjdaMDMxMTAvBgNV
BAMTKDc5QUE4QUMzQzc0NDA0QjAwOTUzQjM3RTgyQkQ0MTM0QkVEMTA2MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvNuDRyKaN6Rx/rWG+HLQDGwUB
CTcS/fB97+efbhDqZ1Y5On7iY74/1bkSvfLAg9GGxK1tcTWlfpGcYBBMTANABdmq
wkH/QcUJNuGjE8HU2G+Wsqw3U0s3uJQLQGftoAAv17I0fjUP1hb+F6JtDkl6yY27
sWAK2fw9CkryuG0oNJ8qp9KO74CvwBuXgWb5wMVq7/3rObwrPncknMl3vReqHHmV
jFffuFiaiyUZFEWQU5kBvUYQH12jBj28hzb9MrAD9yEWrAzNQXFUpGDELQ7LD3e5
5d1JE6nnUbi67D1nThNwZk3psE0/wp+GOBH4rtTbYr2+8/Ljaqap+OCcYUjpAgMB
AAGjggJJMIICRTAdBgNVHQ4EFgQUeaqKw8dEBLAJU7N+gr1BNL7RBg4wHwYDVR0j
BBgwFoAUvfh792u2nVOHXoweHS5fiCU9MCUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODRjUEI2S2t4Y1I5WFpvaUw4cGhvM2FZcEoxZHVyS0VzR0hEanBIYnRH
N2MvMC9CREY4N0JGNzZCQjY5RDUzODc1RThDMUUxRDJFNUY4ODI1M0QzMDI1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JERjg3QkY3NkJCNjlENTM4
NzVFOEMxRTFEMkU1Rjg4MjUzRDMwMjUuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg0Y1BCNktreGNSOVhab2lMOHBobzNhWXBKMWR1cktFc0dIRGpwSGJ0RzdjLzAv
MzQzNTJlMzcyZTMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3MzMzODM4
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQCLQcAMA0GCSqGSIb3DQEBCwUAA4IBAQDAmmkjatm9KggVusPD
UTcSQ4u/wmCso1/ku+Zn+L9+cMoHGXkZfgG7xaKJRnitOMRpxrktcJHyqicBBsQ2
BDBu4dF6PXrLheBeE3mk5FrBykCdZyp27u9Ptn6JfXrfBxztk8CGRB7SYk4JffjR
K/V6MV0KxL7ct3jjO+t8CS6+2wTKcYSI0KZmnf31mY3m3T9m2RMaNQClwtc+Q3rF
JJwNMqJoJNdP3sbK2QvqOgQO16dQQ2zbveu4LQUDmgIhwz2x87RPQOAROV7IULOL
1PTgPnPCJuLg9XelODZLhE6ITJYfVqum2P7xbMvYT0mC3+xon8/XP1A8CGJWHlME
63HM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org