Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230382e302f32322d3232203d3e20323638323134.roa
File: 34352e3233352e3230382e302f32322d3232203d3e20323638323134.roa (raw, json)
Hash identifier: UgklveztkTfByxTfJNhOFXlos95jGY8g+yXI82Ba5vs=
Subject key identifier: 8C:01:B6:3C:0E:0A:3D:A2:A3:AF:10:41:52:7F:D1:73:59:B1:B3:2E
Certificate issuer: /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial: 3CD05BC0C29E899AC725B7ADE34BB08E5EE817D0
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230382e302f32322d3232203d3e20323638323134.roa
Signing time: Wed 22 May 2024 20:30:18 +0000
ROA not before: Wed 22 May 2024 20:25:18 +0000
ROA not after: Wed 21 May 2025 20:30:18 +0000
asID: 268214
IP address blocks: 45.235.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:d0:5b:c0:c2:9e:89:9a:c7:25:b7:ad:e3:4b:b0:8e:5e:e8:17:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Validity
Not Before: May 22 20:25:18 2024 GMT
Not After : May 21 20:30:18 2025 GMT
Subject: CN=8C01B63C0E0A3DA2A3AF1041527FD17359B1B32E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:20:dc:8b:56:7f:a4:67:95:e1:9c:c4:d4:3b:
81:a2:1d:82:99:ea:99:d9:90:b4:e6:6b:f4:cd:97:
31:a3:e9:ef:3b:e0:ac:f1:f5:7f:6c:82:3c:ab:9f:
d5:da:03:24:02:25:ca:06:49:bd:ff:f7:66:0a:94:
58:b2:69:12:88:cb:69:19:3d:8a:98:d5:48:a5:c1:
94:eb:5a:b1:b3:0f:72:b5:14:44:01:25:ef:25:d0:
7f:bb:35:6b:02:48:e7:f0:7d:ee:04:65:7d:43:c5:
85:80:d1:6a:28:f8:21:8d:64:63:4d:58:62:97:27:
f5:84:25:be:76:1a:ff:36:f9:5e:f4:6f:4b:7f:b5:
db:84:6b:4b:e3:b5:d0:25:15:60:2f:85:db:6c:8c:
cd:63:fc:7a:1b:70:89:c2:c2:1e:75:1f:d5:a8:46:
fa:bc:04:17:77:47:60:83:1a:68:57:9b:cd:5b:b3:
2e:64:48:98:7f:b6:d1:d1:7e:32:bc:37:80:66:ec:
ce:8a:83:49:f4:a5:52:71:fe:06:63:9c:62:68:38:
b1:d2:8b:3c:4a:a7:91:02:a7:fe:b7:80:9c:0d:53:
e2:79:cd:95:b5:8f:29:61:17:97:86:cf:86:bc:54:
9b:e8:0a:fb:5c:5b:c0:0a:6e:41:f7:35:5b:63:54:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:01:B6:3C:0E:0A:3D:A2:A3:AF:10:41:52:7F:D1:73:59:B1:B3:2E
X509v3 Authority Key Identifier:
keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230382e302f32322d3232203d3e20323638323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.208.0/22
Signature Algorithm: sha256WithRSAEncryption
94:5a:e8:59:b5:14:c5:88:27:bd:12:42:c1:25:5b:3c:40:06:
b8:a5:7b:f9:0d:bc:88:48:24:45:fd:10:6e:dc:3d:99:d6:28:
2c:d5:e1:e3:9d:98:09:e9:03:94:d7:62:65:3e:1f:d5:7b:cb:
e0:66:55:bf:bd:07:d5:d1:74:69:57:cd:fa:8c:8d:b2:be:a4:
a2:e8:a0:98:7a:94:2d:de:39:07:bb:84:80:c9:2e:c0:65:4e:
b1:50:26:74:3a:5f:6f:fe:48:f4:96:62:51:ae:76:3f:4a:de:
5e:cb:7e:36:e7:f4:a9:93:91:40:03:60:03:96:37:00:19:66:
fc:55:28:bb:48:1e:f7:4c:35:f2:4e:93:e0:b8:22:a5:ad:d8:
a4:cd:7f:bc:13:20:fd:3f:71:2e:25:5e:4f:a1:f5:8e:04:37:
f6:0d:df:94:7c:a4:cc:a0:42:09:93:78:32:b4:13:24:fa:ba:
58:fd:5b:df:df:6f:1a:01:a6:e0:54:68:97:6f:d4:84:a9:e7:
86:6a:21:29:14:40:9a:8f:b6:9f:2c:32:77:98:95:e8:be:e8:
5d:70:ef:6d:38:39:9b:67:18:f4:30:bb:e3:7b:7f:5e:f6:7f:
1a:d9:c8:f4:d5:14:29:9b:f4:a8:7f:8f:76:59:89:2e:9e:ae:
40:d9:49:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPNBbwMKeiZrHJbet40uwjl7oF9AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjIzN0VBNkQzNzQ4N0VCREEzQ0ZBNEUwRjFGNTk1N0M5
ODdGRUEyRjAeFw0yNDA1MjIyMDI1MThaFw0yNTA1MjEyMDMwMThaMDMxMTAvBgNV
BAMTKDhDMDFCNjNDMEUwQTNEQTJBM0FGMTA0MTUyN0ZEMTczNTlCMUIzMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoINyLVn+kZ5XhnMTUO4GiHYKZ
6pnZkLTma/TNlzGj6e874Kzx9X9sgjyrn9XaAyQCJcoGSb3/92YKlFiyaRKIy2kZ
PYqY1UilwZTrWrGzD3K1FEQBJe8l0H+7NWsCSOfwfe4EZX1DxYWA0Woo+CGNZGNN
WGKXJ/WEJb52Gv82+V70b0t/tduEa0vjtdAlFWAvhdtsjM1j/HobcInCwh51H9Wo
Rvq8BBd3R2CDGmhXm81bsy5kSJh/ttHRfjK8N4Bm7M6Kg0n0pVJx/gZjnGJoOLHS
izxKp5ECp/63gJwNU+J5zZW1jylhF5eGz4a8VJvoCvtcW8AKbkH3NVtjVIBzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjAG2PA4KPaKjrxBBUn/Rc1mxsy4wHwYDVR0j
BBgwFoAUIjfqbTdIfr2jz6Tg8fWVfJh/6i8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZEMlh3cDl5cTVQZEZFQVdrMlVXQ3dXRFRrUlc3VnBUR1kzclJTd3pI
bVUvMC8yMjM3RUE2RDM3NDg3RUJEQTNDRkE0RTBGMUY1OTU3Qzk4N0ZFQTJGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyMzdFQTZEMzc0ODdFQkRB
M0NGQTRFMEYxRjU5NTdDOTg3RkVBMkYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2RDJYd3A5eXE1UGRGRUFXazJVV0N3V0RUa1JXN1ZwVEdZM3JSU3d6SG1VLzAv
MzQzNTJlMzIzMzM1MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzgzMjMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt69AwDQYJKoZIhvcNAQELBQADggEBAJRa6Fm1
FMWIJ70SQsElWzxABrile/kNvIhIJEX9EG7cPZnWKCzV4eOdmAnpA5TXYmU+H9V7
y+BmVb+9B9XRdGlXzfqMjbK+pKLooJh6lC3eOQe7hIDJLsBlTrFQJnQ6X2/+SPSW
YlGudj9K3l7Lfjbn9KmTkUADYAOWNwAZZvxVKLtIHvdMNfJOk+C4IqWt2KTNf7wT
IP0/cS4lXk+h9Y4EN/YN35R8pMygQgmTeDK0EyT6ulj9W9/fbxoBpuBUaJdv1ISp
54ZqISkUQJqPtp8sMneYlei+6F1w7204OZtnGPQwu+N7f172fxrZyPTVFCmb9Kh/
j3ZZiS6erkDZSU4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:46:07 2025 by rpki-client