Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32342d3234203d3e20323638303438.roa
File: 34352e3136382e33322e302f32342d3234203d3e20323638303438.roa (raw, json)
Hash identifier: XA6tFw6tjfbqHBsEcLDJANyQBcx199UFvBcFmktC4xI=
Subject key identifier: 2B:67:14:6C:2A:22:11:A5:2F:A6:3B:60:41:D0:98:D5:6D:88:35:C0
Certificate issuer: /CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Certificate serial: 696D4D22B9FEB97408D3EE693A512F9392FC457C
Authority key identifier: 31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32342d3234203d3e20323638303438.roa
Signing time: Mon 24 Apr 2023 23:55:13 +0000
ROA not before: Mon 24 Apr 2023 23:50:13 +0000
ROA not after: Mon 22 Apr 2024 23:55:13 +0000
asID: 268048
IP address blocks: 45.168.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:6d:4d:22:b9:fe:b9:74:08:d3:ee:69:3a:51:2f:93:92:fc:45:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Validity
Not Before: Apr 24 23:50:13 2023 GMT
Not After : Apr 22 23:55:13 2024 GMT
Subject: CN=2B67146C2A2211A52FA63B6041D098D56D8835C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:5d:f5:a3:1e:a1:6d:76:40:fb:a0:20:21:
c5:a1:51:e6:b5:f2:e5:c0:3e:82:39:d1:bb:c8:eb:
5b:3b:fd:77:b0:1d:46:cd:a6:f2:04:01:b7:41:d6:
ad:f9:b0:fe:85:42:6a:8c:e4:82:54:21:4a:7c:ac:
5f:f2:63:de:c1:5d:27:47:c5:f5:7c:e7:bb:8b:00:
5e:23:92:60:12:62:97:f9:04:f5:5a:7f:0e:0a:4b:
8b:c1:44:d5:0b:7a:a8:0f:7e:5c:5f:0d:90:52:63:
3d:e4:3b:83:79:99:59:10:a5:83:5c:95:e0:02:5f:
b6:12:fe:a5:9a:9c:ce:e6:6f:22:11:c4:c8:0f:8e:
3e:9c:84:a3:8f:1a:d8:d8:f6:ed:6b:53:31:88:5e:
9c:40:dc:21:9f:12:81:0c:36:65:44:d4:97:eb:77:
b1:d0:d8:a3:89:43:77:a2:7a:51:e9:a4:da:f8:e2:
f7:ad:b1:bf:8f:c0:6f:5d:cb:87:a9:e0:fe:79:b7:
65:8a:7b:db:88:11:36:d5:82:df:95:3e:a1:88:c6:
de:48:68:5b:84:ad:ac:07:6b:01:04:f3:3b:15:28:
29:69:9d:67:da:28:8c:c9:61:92:e2:9e:70:42:47:
a7:da:a4:95:4c:ec:c1:b8:05:5a:ae:03:ba:ac:4e:
35:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:67:14:6C:2A:22:11:A5:2F:A6:3B:60:41:D0:98:D5:6D:88:35:C0
X509v3 Authority Key Identifier:
keyid:31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32342d3234203d3e20323638303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.32.0/24
Signature Algorithm: sha256WithRSAEncryption
82:96:b2:5f:59:48:e7:d9:24:f2:77:6f:17:87:ce:d6:79:94:
11:98:2b:5f:d8:0c:13:83:6b:97:bd:d8:74:48:1c:8d:c4:ca:
f4:e0:cd:7a:e1:9f:d1:38:2b:84:0c:5a:39:04:30:02:44:fa:
15:20:56:5d:54:a3:58:c9:fb:4e:6d:3e:a7:9b:dc:e0:a4:05:
74:1a:d0:0f:d8:7d:aa:aa:0e:db:3b:d4:d5:a2:cc:38:fc:28:
e7:d6:c6:a5:f9:8d:41:b5:a6:79:fa:d2:c0:1e:7b:e5:24:1c:
0f:b1:4a:8a:84:42:43:11:62:59:06:9e:b2:e2:1b:9c:bf:ea:
42:23:5c:fa:81:25:85:2a:66:68:49:12:cd:0b:1c:65:de:de:
82:dd:39:61:21:ba:19:07:bc:ff:b0:e6:eb:5a:75:78:ad:03:
35:db:8d:fb:db:6e:ae:c6:b0:bd:4c:a7:6b:6f:35:d1:09:1d:
89:99:5a:e6:d5:b8:25:84:56:d9:ec:30:ae:29:ed:0b:49:2d:
1b:9f:be:d2:dd:c0:64:5a:4b:22:10:b6:8c:88:88:4c:9e:c5:
24:0d:14:8d:26:80:fe:e1:ce:80:da:e8:a4:ce:c0:28:42:37:
d2:ca:4b:09:20:15:ad:3a:0f:a1:bf:90:3f:7c:eb:2f:94:69:
0e:bd:ac:d8
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaW1NIrn+uXQI0+5pOlEvk5L8RXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFCRDg5NkI4M0Q5QTc3NjEyQzJCMDc0OTUxREZFN0Mz
RTVGODVGMTAeFw0yMzA0MjQyMzUwMTNaFw0yNDA0MjIyMzU1MTNaMDMxMTAvBgNV
BAMTKDJCNjcxNDZDMkEyMjExQTUyRkE2M0I2MDQxRDA5OEQ1NkQ4ODM1QzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwWF31ox6hbXZA+6AgIcWhUea1
8uXAPoI50bvI61s7/XewHUbNpvIEAbdB1q35sP6FQmqM5IJUIUp8rF/yY97BXSdH
xfV857uLAF4jkmASYpf5BPVafw4KS4vBRNULeqgPflxfDZBSYz3kO4N5mVkQpYNc
leACX7YS/qWanM7mbyIRxMgPjj6chKOPGtjY9u1rUzGIXpxA3CGfEoEMNmVE1Jfr
d7HQ2KOJQ3eielHppNr44vetsb+PwG9dy4ep4P55t2WKe9uIETbVgt+VPqGIxt5I
aFuErawHawEE8zsVKClpnWfaKIzJYZLinnBCR6fapJVM7MG4BVquA7qsTjVXAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUK2cUbCoiEaUvpjtgQdCY1W2INcAwHwYDVR0j
BBgwFoAUMb2Ja4PZp3YSwrB0lR3+fD5fhfEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOGpEVDVVeWFOSGRUVlpleUd5SmNRTU5rRG9MRnZwUVk5UnJTN0dZaFZ6
MW4vMC8zMUJEODk2QjgzRDlBNzc2MTJDMkIwNzQ5NTFERkU3QzNFNUY4NUYxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMxQkQ4OTZCODNEOUE3NzYx
MkMyQjA3NDk1MURGRTdDM0U1Rjg1RjEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhqRFQ1VXlhTkhkVFZaZXlHeUpjUU1Oa0RvTEZ2cFFZOVJyUzdHWWhWejFuLzAv
MzQzNTJlMzEzNjM4MmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzNDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALaggMA0GCSqGSIb3DQEBCwUAA4IBAQCClrJfWUjn
2STyd28Xh87WeZQRmCtf2AwTg2uXvdh0SByNxMr04M164Z/ROCuEDFo5BDACRPoV
IFZdVKNYyftObT6nm9zgpAV0GtAP2H2qqg7bO9TVosw4/Cjn1sal+Y1BtaZ5+tLA
HnvlJBwPsUqKhEJDEWJZBp6y4hucv+pCI1z6gSWFKmZoSRLNCxxl3t6C3TlhIboZ
B7z/sObrWnV4rQM12437226uxrC9TKdrbzXRCR2JmVrm1bglhFbZ7DCuKe0LSS0b
n77S3cBkWksiELaMiIhMnsUkDRSNJoD+4c6A2uikzsAoQjfSyksJIBWtOg+hv5A/
fOsvlGkOvazY
-----END CERTIFICATE-----
Generated at Tue Apr 22 05:40:13 2025 by rpki-client