Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
File: 34352e3139312e32322e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier: t7lbryAoR00fIeQZ8Ub/KDniQOWIUIxYULYBHdo2M6A=
Subject key identifier: D0:2C:E5:70:CE:65:93:C1:ED:68:59:0C:B0:E0:2C:D6:13:E8:3B:37
Certificate issuer: /CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
Certificate serial: 4D56DC5C048D884DFB483641375A14127255EB28
Authority key identifier: 41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
Signing time: Wed 03 Apr 2024 21:52:38 +0000
ROA not before: Wed 03 Apr 2024 21:47:38 +0000
ROA not after: Wed 02 Apr 2025 21:52:38 +0000
asID: 269664
IP address blocks: 45.191.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:56:dc:5c:04:8d:88:4d:fb:48:36:41:37:5a:14:12:72:55:eb:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=413E3D4F0110DFBA923D6F53579BE8E81ABDCC05
Validity
Not Before: Apr 3 21:47:38 2024 GMT
Not After : Apr 2 21:52:38 2025 GMT
Subject: CN=D02CE570CE6593C1ED68590CB0E02CD613E83B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3f:39:b9:5c:bc:bb:50:24:5c:4a:7c:fa:3c:
fa:b9:8e:eb:17:dd:98:16:ba:87:07:8d:47:d9:b4:
32:93:45:e0:d6:bb:c5:27:7c:f5:24:f8:cb:78:e2:
6e:da:dd:30:04:66:f0:ee:b5:63:39:80:b8:ec:65:
80:cf:85:b2:f2:ad:ce:d2:b2:b3:cf:f1:07:b6:5f:
e6:7b:78:d9:71:a5:69:9f:8f:00:17:27:ac:57:4c:
4f:d7:e7:ce:13:ab:df:af:46:d4:5e:f1:69:81:81:
74:a8:d6:9c:0f:8a:a9:47:78:a4:b8:a2:99:d3:1a:
c5:e3:0a:3e:a8:e0:d2:7d:a5:9b:6e:13:06:f1:f9:
b4:e8:4b:c8:56:de:26:c9:c9:fa:50:ea:91:a9:fc:
3a:82:33:b0:63:5c:cf:50:12:ed:34:92:c5:25:d3:
4f:96:14:f4:03:85:29:14:d6:3f:88:81:ee:3e:52:
23:a6:30:ca:d2:38:04:44:3a:c4:7e:b1:80:aa:ba:
8a:53:dc:41:67:7b:7d:b8:3f:01:41:20:88:98:85:
29:68:6a:84:ce:5f:5d:04:c4:f5:0c:2b:24:39:47:
b0:7b:b8:78:2c:30:22:92:cf:b9:b0:e4:35:bd:69:
bf:c8:70:bc:7b:22:eb:a3:a4:ea:c2:a8:84:be:9e:
bc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2C:E5:70:CE:65:93:C1:ED:68:59:0C:B0:E0:2C:D6:13:E8:3B:37
X509v3 Authority Key Identifier:
keyid:41:3E:3D:4F:01:10:DF:BA:92:3D:6F:53:57:9B:E8:E8:1A:BD:CC:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/413E3D4F0110DFBA923D6F53579BE8E81ABDCC05.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/1/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.22.0/24
Signature Algorithm: sha256WithRSAEncryption
08:56:63:c3:f4:dc:70:b8:c9:0a:42:b4:23:be:c9:c4:27:74:
50:cd:66:0f:9b:18:a8:b1:b8:55:0e:a1:9f:b6:ec:d7:fa:8a:
6c:94:9c:1d:fa:2d:fa:d1:49:77:06:f6:6a:90:7f:19:e7:16:
8d:67:ee:66:e4:07:fe:c0:93:e0:de:73:02:fc:fe:2a:a4:85:
0f:42:51:0c:d7:31:51:bb:01:8b:d5:35:98:4f:92:8f:d9:ec:
24:33:b4:1f:a0:60:5c:33:2f:7e:6f:a2:fe:81:2f:a4:58:da:
04:4e:55:00:a3:79:90:83:43:66:76:5f:70:db:6b:92:ba:30:
ca:a3:82:f7:d3:4a:45:51:a2:b8:55:54:28:aa:a0:87:7d:c6:
a1:07:83:49:f0:f3:bc:ec:11:27:3f:a6:35:1c:e8:d8:13:33:
f3:f7:1b:23:04:99:70:df:8f:df:80:06:10:05:da:a6:ea:3a:
5e:94:3b:22:97:a6:d9:13:5e:9c:9e:bb:84:6d:77:85:76:22:
6a:cc:c2:f1:96:13:0e:bc:1d:48:a2:ba:33:a8:1f:b3:b6:6b:
0b:86:6b:54:d2:1a:e8:9c:0c:da:c9:31:25:89:fa:ae:96:56:
b4:ba:1c:f7:48:6a:87:b4:f6:d8:eb:99:d5:c1:75:e6:52:31:
3f:a7:6b:5f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTVbcXASNiE37SDZBN1oUEnJV6ygwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDEzRTNENEYwMTEwREZCQTkyM0Q2RjUzNTc5QkU4RTgx
QUJEQ0MwNTAeFw0yNDA0MDMyMTQ3MzhaFw0yNTA0MDIyMTUyMzhaMDMxMTAvBgNV
BAMTKEQwMkNFNTcwQ0U2NTkzQzFFRDY4NTkwQ0IwRTAyQ0Q2MTNFODNCMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTPzm5XLy7UCRcSnz6PPq5jusX
3ZgWuocHjUfZtDKTReDWu8UnfPUk+Mt44m7a3TAEZvDutWM5gLjsZYDPhbLyrc7S
srPP8Qe2X+Z7eNlxpWmfjwAXJ6xXTE/X584Tq9+vRtRe8WmBgXSo1pwPiqlHeKS4
opnTGsXjCj6o4NJ9pZtuEwbx+bToS8hW3ibJyfpQ6pGp/DqCM7BjXM9QEu00ksUl
00+WFPQDhSkU1j+Ige4+UiOmMMrSOAREOsR+sYCquopT3EFne324PwFBIIiYhSlo
aoTOX10ExPUMKyQ5R7B7uHgsMCKSz7mw5DW9ab/IcLx7IuujpOrCqIS+nrwZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0CzlcM5lk8HtaFkMsOAs1hPoOzcwHwYDVR0j
BBgwFoAUQT49TwEQ37qSPW9TV5vo6Bq9zAUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHdMWlVLN3dhVFpqQ2pTblpidndqSkdQMXlMazhpZldvaTMxSEpxajF1
NzQvMS80MTNFM0Q0RjAxMTBERkJBOTIzRDZGNTM1NzlCRThFODFBQkRDQzA1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQxM0UzRDRGMDExMERGQkE5
MjNENkY1MzU3OUJFOEU4MUFCRENDMDUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh3TFpVSzd3YVRaakNqU25aYnZ3akpHUDF5TGs4aWZXb2kzMUhKcWoxdTc0LzEv
MzQzNTJlMzEzOTMxMmUzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb8WMA0GCSqGSIb3DQEBCwUAA4IBAQAIVmPD9Nxw
uMkKQrQjvsnEJ3RQzWYPmxiosbhVDqGftuzX+opslJwd+i360Ul3BvZqkH8Z5xaN
Z+5m5Af+wJPg3nMC/P4qpIUPQlEM1zFRuwGL1TWYT5KP2ewkM7QfoGBcMy9+b6L+
gS+kWNoETlUAo3mQg0Nmdl9w22uSujDKo4L300pFUaK4VVQoqqCHfcahB4NJ8PO8
7BEnP6Y1HOjYEzPz9xsjBJlw34/fgAYQBdqm6jpelDsil6bZE16cnruEbXeFdiJq
zMLxlhMOvB1IorozqB+ztmsLhmtU0hronAzayTElifqulla0uhz3SGqHtPbY65nV
wXXmUjE/p2tf
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:44:58 2025 by rpki-client