Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa
File: 34352e3233342e37312e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier: M/Kzhj9kRQIZ4+EySgLp16xd7xb6EKuHDsIcsXkV1Wc=
Subject key identifier: 1B:C6:FE:F6:A5:A3:C7:18:75:80:68:CC:45:0F:52:67:7F:C2:66:6E
Certificate issuer: /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial: 2ACD6558A8B6F4F9F166A06F5B0EF243E19DF764
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa
Signing time: Wed 20 Mar 2024 19:26:17 +0000
ROA not before: Wed 20 Mar 2024 19:21:17 +0000
ROA not after: Wed 19 Mar 2025 19:26:17 +0000
asID: 267363
IP address blocks: 45.234.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:cd:65:58:a8:b6:f4:f9:f1:66:a0:6f:5b:0e:f2:43:e1:9d:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Validity
Not Before: Mar 20 19:21:17 2024 GMT
Not After : Mar 19 19:26:17 2025 GMT
Subject: CN=1BC6FEF6A5A3C718758068CC450F52677FC2666E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:de:52:5e:f2:e0:a8:f8:15:cb:91:a2:13:
b3:15:68:a3:73:d0:cc:b1:52:6d:76:71:d1:c1:96:
8a:22:dd:f0:30:2d:3f:7d:76:f6:da:80:01:37:3a:
cb:2a:ee:2e:36:11:38:a2:2c:20:2b:26:fa:ce:b7:
e2:37:c2:2c:df:4e:ae:2c:59:1a:6b:b0:d0:f0:29:
d3:06:37:ee:6c:d5:af:35:9b:d1:29:3c:32:5d:e2:
ce:1c:31:a3:1f:e7:e9:ac:77:ef:8f:b3:cb:c0:9c:
9b:2e:cd:f8:a7:72:26:b3:30:6e:5d:69:07:02:2f:
4b:68:f9:d0:08:5c:b1:59:41:94:55:46:a6:25:44:
bd:96:d8:b2:98:f9:c3:7a:a5:2b:53:4d:a7:9d:64:
cb:e1:cc:76:a0:62:ed:85:ca:87:47:fd:b0:6c:8b:
8b:7d:60:6a:43:27:01:df:b7:b6:24:68:37:92:f3:
e2:48:e6:39:59:fb:05:27:ad:2b:18:ea:41:6f:e6:
24:25:5a:4f:bb:42:09:8e:c1:a0:ea:1e:55:c9:dd:
7d:09:29:c8:a4:d6:35:67:cd:7b:18:ec:83:fb:94:
4a:77:02:25:6a:0d:60:42:5a:d2:27:db:f4:0e:7f:
d9:e8:b2:4e:3a:ad:4d:1f:ae:c4:8d:37:aa:bf:f2:
5b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:FE:F6:A5:A3:C7:18:75:80:68:CC:45:0F:52:67:7F:C2:66:6E
X509v3 Authority Key Identifier:
keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e37312e302f32342d3234203d3e20323637333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.71.0/24
Signature Algorithm: sha256WithRSAEncryption
61:8c:f7:25:18:da:94:fd:a2:44:a0:87:5a:86:67:b9:e5:77:
13:c5:6b:e5:c4:d7:52:1c:f4:61:50:39:74:ff:5c:8b:84:b2:
77:2e:a5:3e:91:ac:ff:d3:eb:95:9f:84:72:1a:aa:18:35:3b:
a4:01:37:7a:3a:72:69:d5:d8:22:64:dc:50:49:08:07:b8:bf:
1c:c2:aa:39:d9:1b:d3:67:2d:c4:1f:a5:f6:3c:ff:9b:cf:0d:
6b:d8:4a:45:2b:2f:45:d0:5b:74:05:61:e8:4a:f6:56:3f:21:
47:9f:31:f2:94:89:28:38:69:90:f5:ae:6e:1a:6d:91:f7:d8:
aa:ce:d6:5a:b3:10:c4:14:1d:a5:34:9b:71:d3:55:02:ca:f2:
df:b1:cf:4a:31:b2:b6:a5:ce:31:7f:07:7c:93:cd:88:e5:c1:
13:d3:ef:7b:c8:9d:70:21:28:4c:8b:82:c8:65:f6:89:60:b7:
57:1f:5c:a2:04:01:b3:21:e7:db:f9:8f:ef:74:4e:ef:b5:5d:
0d:b0:d7:18:b2:16:1d:90:b3:d0:39:31:73:57:e3:24:a0:7d:
6d:80:cd:8b:50:f5:72:b0:a9:17:4b:26:d7:e3:08:6d:0d:1e:
cd:d7:6e:0c:a0:e8:99:e3:b3:07:09:fd:fc:e8:5d:dc:90:37:
91:ca:29:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKs1lWKi29PnxZqBvWw7yQ+Gd92QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkFDOTg2QzM5QzY4QUFBREFBRDlGODdGNzUwRTEyM0E4
RjVBMjY1RjAeFw0yNDAzMjAxOTIxMTdaFw0yNTAzMTkxOTI2MTdaMDMxMTAvBgNV
BAMTKDFCQzZGRUY2QTVBM0M3MTg3NTgwNjhDQzQ1MEY1MjY3N0ZDMjY2NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXa95SXvLgqPgVy5GiE7MVaKNz
0MyxUm12cdHBlooi3fAwLT99dvbagAE3Ossq7i42ETiiLCArJvrOt+I3wizfTq4s
WRprsNDwKdMGN+5s1a81m9EpPDJd4s4cMaMf5+msd++Ps8vAnJsuzfinciazMG5d
aQcCL0to+dAIXLFZQZRVRqYlRL2W2LKY+cN6pStTTaedZMvhzHagYu2FyodH/bBs
i4t9YGpDJwHft7YkaDeS8+JI5jlZ+wUnrSsY6kFv5iQlWk+7QgmOwaDqHlXJ3X0J
Kcik1jVnzXsY7IP7lEp3AiVqDWBCWtIn2/QOf9nosk46rU0frsSNN6q/8lvNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUG8b+9qWjxxh1gGjMRQ9SZ3/CZm4wHwYDVR0j
BBgwFoAUKsmGw5xoqq2q2fh/dQ4SOo9aJl8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZFM1lqSHA0bXEzdGhvaGdhOWVaajJGallFQUIxYnR6dVVWbzFDZXBk
YXcvMC8yQUM5ODZDMzlDNjhBQUFEQUFEOUY4N0Y3NTBFMTIzQThGNUEyNjVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzJBQzk4NkMzOUM2OEFBQURB
QUQ5Rjg3Rjc1MEUxMjNBOEY1QTI2NUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RTNZakhwNG1xM3Rob2hnYTllWmoyRmpZRUFCMWJ0enVVVm8xQ2VwZGF3LzAv
MzQzNTJlMzIzMzM0MmUzNzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALepHMA0GCSqGSIb3DQEBCwUAA4IBAQBhjPclGNqU
/aJEoIdahme55XcTxWvlxNdSHPRhUDl0/1yLhLJ3LqU+kaz/0+uVn4RyGqoYNTuk
ATd6OnJp1dgiZNxQSQgHuL8cwqo52RvTZy3EH6X2PP+bzw1r2EpFKy9F0Ft0BWHo
SvZWPyFHnzHylIkoOGmQ9a5uGm2R99iqztZasxDEFB2lNJtx01UCyvLfsc9KMbK2
pc4xfwd8k82I5cET0+97yJ1wIShMi4LIZfaJYLdXH1yiBAGzIefb+Y/vdE7vtV0N
sNcYshYdkLPQOTFzV+MkoH1tgM2LUPVysKkXSybX4whtDR7N124MoOiZ47MHCf38
6F3ckDeRyikG
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:11 2025 by rpki-client