Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa
File: 34352e3137302e37362e302f32322d3234203d3e20323638313531.roa (raw, json)
Hash identifier: 1dDW8TdtufI3ZOIbqSVh8frrLYEXUwrFozb+1X836DA=
Subject key identifier: 39:B5:CA:65:91:0A:89:0D:86:D1:84:A0:E8:00:78:B5:0E:FD:3E:E6
Certificate issuer: /CN=C34966030329C8DBC6F2555D2F5E5A98C322F8A4
Certificate serial: 3A9C34868CF6AA7602A6E9BF34A611F6C8E755F1
Authority key identifier: C3:49:66:03:03:29:C8:DB:C6:F2:55:5D:2F:5E:5A:98:C3:22:F8:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa
Signing time: Thu 02 Jan 2025 15:10:54 +0000
ROA not before: Thu 02 Jan 2025 15:05:54 +0000
ROA not after: Thu 01 Jan 2026 15:10:54 +0000
asID: 268151
IP address blocks: 45.170.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9c:34:86:8c:f6:aa:76:02:a6:e9:bf:34:a6:11:f6:c8:e7:55:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C34966030329C8DBC6F2555D2F5E5A98C322F8A4
Validity
Not Before: Jan 2 15:05:54 2025 GMT
Not After : Jan 1 15:10:54 2026 GMT
Subject: CN=39B5CA65910A890D86D184A0E80078B50EFD3EE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:01:cd:75:54:7c:3e:e7:e0:5b:fc:89:18:
ef:45:c6:5f:3e:4b:2e:c0:84:be:6f:05:57:38:41:
70:84:47:27:62:0e:fa:47:a2:0b:a9:75:74:60:ea:
ed:28:06:96:8b:8c:fa:05:e6:b6:a8:70:5f:94:9f:
a2:e0:da:e5:f3:12:02:6c:3e:22:9c:89:02:8e:0a:
85:78:c9:65:a2:5e:4d:2c:b5:98:70:53:e9:b0:41:
59:0c:20:11:b7:fe:56:88:dc:d2:53:e7:ef:1d:6c:
b0:e7:96:5c:c7:df:90:2a:bc:23:ff:4c:38:d8:f1:
82:e6:66:38:e6:84:a8:32:62:2f:e8:36:7f:bf:64:
25:2b:38:8d:e6:09:7d:f6:6a:15:36:b5:87:33:5d:
65:46:80:f3:af:d4:f6:a8:c9:dc:66:ef:16:ce:3b:
58:2a:e1:bb:33:64:70:b5:fa:82:12:57:66:46:3c:
5e:7b:91:ab:dd:76:68:45:6c:d9:a5:f7:99:02:9b:
54:57:4a:a7:e0:a5:72:e4:a9:1f:ec:e5:3e:fd:db:
5e:a8:81:54:66:9e:4d:48:b0:4a:83:20:ae:2f:4b:
72:b0:47:81:dc:9d:64:b2:0f:ad:e4:a2:47:83:3a:
bf:ac:80:09:36:83:4b:ec:d4:a1:3d:cb:3f:78:5f:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B5:CA:65:91:0A:89:0D:86:D1:84:A0:E8:00:78:B5:0E:FD:3E:E6
X509v3 Authority Key Identifier:
keyid:C3:49:66:03:03:29:C8:DB:C6:F2:55:5D:2F:5E:5A:98:C3:22:F8:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C34966030329C8DBC6F2555D2F5E5A98C322F8A4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aFH8HHroifCB5eLffJjSHs8L4DkzoTmCKwmDoXafqYm/0/34352e3137302e37362e302f32322d3234203d3e20323638313531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.76.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:a2:45:ee:e5:6d:61:81:bf:a7:c2:ae:08:65:2e:1c:b6:54:
84:92:8d:47:72:39:8b:ef:4b:59:fa:8b:90:13:66:30:a3:ab:
d8:8c:29:92:cb:db:3b:40:48:e1:32:27:03:3b:f0:36:87:67:
ae:2e:de:89:62:07:93:79:82:fc:60:2d:00:3d:c2:ae:ea:c8:
50:45:4c:c5:e7:8a:b3:bd:1a:c5:44:37:d8:b9:8c:bf:64:ad:
3c:e2:2b:e2:0a:25:f9:88:73:a0:0d:08:49:f1:60:da:64:1a:
ae:60:b7:fb:94:39:ef:76:79:62:a5:ae:2f:e3:1a:69:fd:42:
fc:c5:46:f7:2b:d1:5c:af:63:76:b2:e5:0f:b9:05:27:ea:e7:
de:46:c2:72:74:5f:87:62:37:54:4d:8c:85:8c:3a:53:cc:5b:
2e:6f:e2:3b:b5:fb:5e:83:41:ed:a7:9f:76:b0:9a:f0:f0:41:
4e:98:66:1c:12:8e:56:30:10:21:e4:02:12:08:bc:74:84:77:
72:9f:7f:c4:43:7e:f2:40:ff:f8:be:2a:f8:e6:3e:51:e1:23:
56:30:55:13:52:22:37:81:ec:23:94:eb:8e:b8:5e:6d:35:a7:
b2:07:b7:01:23:a2:10:3b:50:2d:ee:ac:73:ec:f0:e9:a7:27:
11:f0:76:1a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOpw0hoz2qnYCpum/NKYR9sjnVfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM0OTY2MDMwMzI5QzhEQkM2RjI1NTVEMkY1RTVBOThD
MzIyRjhBNDAeFw0yNTAxMDIxNTA1NTRaFw0yNjAxMDExNTEwNTRaMDMxMTAvBgNV
BAMTKDM5QjVDQTY1OTEwQTg5MEQ4NkQxODRBMEU4MDA3OEI1MEVGRDNFRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj0gHNdVR8PufgW/yJGO9Fxl8+
Sy7AhL5vBVc4QXCERydiDvpHogupdXRg6u0oBpaLjPoF5raocF+Un6Lg2uXzEgJs
PiKciQKOCoV4yWWiXk0stZhwU+mwQVkMIBG3/laI3NJT5+8dbLDnllzH35AqvCP/
TDjY8YLmZjjmhKgyYi/oNn+/ZCUrOI3mCX32ahU2tYczXWVGgPOv1Paoydxm7xbO
O1gq4bszZHC1+oISV2ZGPF57kavddmhFbNml95kCm1RXSqfgpXLkqR/s5T79216o
gVRmnk1IsEqDIK4vS3KwR4HcnWSyD63kokeDOr+sgAk2g0vs1KE9yz94X0aJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUObXKZZEKiQ2G0YSg6AB4tQ79PuYwHwYDVR0j
BBgwFoAUw0lmAwMpyNvG8lVdL15amMMi+KQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGFGSDhISHJvaWZDQjVlTGZmSmpTSHM4TDREa3pvVG1DS3dtRG9YYWZx
WW0vMC9DMzQ5NjYwMzAzMjlDOERCQzZGMjU1NUQyRjVFNUE5OEMzMjJGOEE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0MzNDk2NjAzMDMyOUM4REJD
NkYyNTU1RDJGNUU1QTk4QzMyMkY4QTQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhhRkg4SEhyb2lmQ0I1ZUxmZkpqU0hzOEw0RGt6b1RtQ0t3bURvWGFmcVltLzAv
MzQzNTJlMzEzNzMwMmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzEzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLapMMA0GCSqGSIb3DQEBCwUAA4IBAQALokXu5W1h
gb+nwq4IZS4ctlSEko1HcjmL70tZ+ouQE2Ywo6vYjCmSy9s7QEjhMicDO/A2h2eu
Lt6JYgeTeYL8YC0APcKu6shQRUzF54qzvRrFRDfYuYy/ZK084iviCiX5iHOgDQhJ
8WDaZBquYLf7lDnvdnlipa4v4xpp/UL8xUb3K9Fcr2N2suUPuQUn6ufeRsJydF+H
YjdUTYyFjDpTzFsub+I7tfteg0Htp592sJrw8EFOmGYcEo5WMBAh5AISCLx0hHdy
n3/EQ37yQP/4vir45j5R4SNWMFUTUiI3gewjlOuOuF5tNaeyB7cBI6IQO1At7qxz
7PDppycR8HYa
-----END CERTIFICATE-----
Generated at Tue Apr 8 14:59:31 2025 by rpki-client