Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
File: 34352e3233342e34302e302f32322d3234203d3e203238363639.roa (raw, json)
Hash identifier: tcBRPq2zfWlKY/5bDOwqpB/vt07270/r6LvTH3ariuk=
Subject key identifier: 3A:B7:F7:E3:AB:5D:50:0B:F0:5D:29:EC:B3:96:BC:2D:FA:0D:98:38
Certificate issuer: /CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Certificate serial: 52CD342DE4D5BEFCC7B7AE80A72401FE2F82A8E8
Authority key identifier: B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
Signing time: Fri 03 May 2024 19:44:35 +0000
ROA not before: Fri 03 May 2024 19:39:35 +0000
ROA not after: Fri 02 May 2025 19:44:35 +0000
asID: 28669
IP address blocks: 45.234.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:cd:34:2d:e4:d5:be:fc:c7:b7:ae:80:a7:24:01:fe:2f:82:a8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3BC332C79DDB8E8367366BC7709EB87DA97619E
Validity
Not Before: May 3 19:39:35 2024 GMT
Not After : May 2 19:44:35 2025 GMT
Subject: CN=3AB7F7E3AB5D500BF05D29ECB396BC2DFA0D9838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:70:bc:b8:b9:1e:68:70:67:1e:1e:5e:66:
97:ea:69:cd:85:56:a7:bc:b2:0e:f3:f2:14:d4:f8:
35:05:d6:e5:5a:6c:0a:e3:26:5d:62:36:e8:1b:72:
55:4a:d4:ff:8c:6b:c7:4b:1e:56:b8:85:73:34:db:
91:64:10:8c:a7:9d:43:d3:24:74:63:96:23:27:91:
31:0c:4c:75:48:5e:25:92:be:c2:23:57:6e:b9:d2:
b8:ee:a0:77:89:2c:68:fe:fe:20:48:da:83:d7:7d:
15:a9:ab:e7:a9:3f:3c:c6:1e:81:ea:33:1c:75:36:
26:59:c7:ed:bb:da:b4:bd:61:ef:ef:90:05:57:65:
5b:0e:b4:89:09:d5:a4:17:4c:88:b1:22:6e:dd:ae:
70:1f:9e:6e:97:12:57:46:19:15:0a:8f:a2:74:30:
5d:8b:b5:7c:01:ac:af:a8:7f:ed:72:d0:75:30:06:
bd:7b:f4:a5:cd:72:89:45:49:29:a2:4d:16:a7:6c:
b9:3c:33:c6:87:82:1b:b0:eb:af:a1:f4:ee:f0:19:
3a:82:a4:fd:b1:1b:be:c6:3f:c2:dc:dc:a2:8d:b9:
5f:d0:7d:e4:d2:c4:27:df:52:d6:c2:c4:19:03:77:
1b:37:d5:3f:aa:b0:d9:f6:e9:2e:39:94:6c:b3:c2:
4d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B7:F7:E3:AB:5D:50:0B:F0:5D:29:EC:B3:96:BC:2D:FA:0D:98:38
X509v3 Authority Key Identifier:
keyid:B3:BC:33:2C:79:DD:B8:E8:36:73:66:BC:77:09:EB:87:DA:97:61:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3BC332C79DDB8E8367366BC7709EB87DA97619E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/34352e3233342e34302e302f32322d3234203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.40.0/22
Signature Algorithm: sha256WithRSAEncryption
43:ba:b1:8d:3e:d4:af:a9:ec:9f:3e:4f:9f:51:cb:21:90:d1:
1a:c3:00:cb:86:ec:39:20:7b:be:10:b2:f0:7f:ce:62:2e:49:
15:43:03:71:ab:d8:d8:20:2b:fb:38:0c:5c:c1:61:00:f1:01:
29:ec:80:de:47:d9:36:5f:70:46:c2:8d:e2:dc:10:60:2a:db:
f5:a0:74:c0:75:15:8b:70:a2:d9:0d:c6:db:0e:84:d1:12:d6:
23:64:e5:32:8e:4d:86:0c:56:16:06:77:1c:82:01:cf:1d:ea:
7c:1a:59:e7:25:87:d5:f5:1b:01:c1:21:f6:d4:f8:a7:b3:dc:
f1:fc:74:b7:6f:e6:24:53:ab:87:95:e0:42:65:91:27:fe:33:
b3:78:e5:5a:13:55:7a:d6:d8:63:1d:18:3d:4e:29:5f:59:10:
39:a0:ee:50:53:46:c6:a6:9d:7b:37:5b:e4:60:f4:dd:91:ce:
a1:bb:4e:07:be:b8:c2:af:85:25:7e:eb:87:60:f3:3a:10:84:
98:4b:ac:ea:18:83:87:d3:b8:bd:56:6c:65:d7:93:22:4b:c1:
49:b5:11:57:1d:44:34:07:f3:52:2f:fb:ff:bf:e4:40:fd:85:
1b:be:f1:6e:6d:d5:e0:a9:28:a6:bf:3f:1b:09:c4:51:6b:b9:
09:84:84:4c
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUUs00LeTVvvzHt66ApyQB/i+CqOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNCQzMzMkM3OUREQjhFODM2NzM2NkJDNzcwOUVCODdE
QTk3NjE5RTAeFw0yNDA1MDMxOTM5MzVaFw0yNTA1MDIxOTQ0MzVaMDMxMTAvBgNV
BAMTKDNBQjdGN0UzQUI1RDUwMEJGMDVEMjlFQ0IzOTZCQzJERkEwRDk4MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsUHC8uLkeaHBnHh5eZpfqac2F
Vqe8sg7z8hTU+DUF1uVabArjJl1iNugbclVK1P+Ma8dLHla4hXM025FkEIynnUPT
JHRjliMnkTEMTHVIXiWSvsIjV2650rjuoHeJLGj+/iBI2oPXfRWpq+epPzzGHoHq
Mxx1NiZZx+272rS9Ye/vkAVXZVsOtIkJ1aQXTIixIm7drnAfnm6XEldGGRUKj6J0
MF2LtXwBrK+of+1y0HUwBr179KXNcolFSSmiTRanbLk8M8aHghuw66+h9O7wGTqC
pP2xG77GP8Lc3KKNuV/QfeTSxCffUtbCxBkDdxs31T+qsNn26S45lGyzwk03AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUOrf346tdUAvwXSnss5a8LfoNmDgwHwYDVR0j
BBgwFoAUs7wzLHnduOg2c2a8dwnrh9qXYZ4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHI5OHZaMU5BektKS1FtSEpNQWppcG9NbVlMNmdaYjVSM2doWEdEbWNG
R04vMS9CM0JDMzMyQzc5RERCOEU4MzY3MzY2QkM3NzA5RUI4N0RBOTc2MTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQkMzMzJDNzlEREI4RTgz
NjczNjZCQzc3MDlFQjg3REE5NzYxOUUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhyOTh2WjFOQXpLSktRbUhKTUFqaXBvTW1ZTDZnWmI1UjNnaFhHRG1jRkdOLzEv
MzQzNTJlMzIzMzM0MmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzODM2
MzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3qKDANBgkqhkiG9w0BAQsFAAOCAQEAQ7qxjT7Ur6ns
nz5Pn1HLIZDRGsMAy4bsOSB7vhCy8H/OYi5JFUMDcavY2CAr+zgMXMFhAPEBKeyA
3kfZNl9wRsKN4twQYCrb9aB0wHUVi3Ci2Q3G2w6E0RLWI2TlMo5NhgxWFgZ3HIIB
zx3qfBpZ5yWH1fUbAcEh9tT4p7Pc8fx0t2/mJFOrh5XgQmWRJ/4zs3jlWhNVetbY
Yx0YPU4pX1kQOaDuUFNGxqadezdb5GD03ZHOobtOB764wq+FJX7rh2DzOhCEmEus
6hiDh9O4vVZsZdeTIkvBSbURVx1ENAfzUi/7/7/kQP2FG77xbm3V4Kkopr8/GwnE
UWu5CYSETA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org