Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
File: 34352e3136302e32342e302f32322d3332203d3e20323638333938.roa (raw, json)
Hash identifier: ModPs1Dvz2kctzhvsJaDD+i9dF3ko7sXK6DvaKMGFoU=
Subject key identifier: E2:53:F8:F2:F8:2C:29:FF:6F:F3:7A:7B:70:2C:6C:4D:CA:7B:D9:5B
Certificate issuer: /CN=DB89E1AE22F7E5B46B524F3DE0084929870FEA3F
Certificate serial: 1A416C03105D9A83ADE1E9895145BCDB802901B0
Authority key identifier: DB:89:E1:AE:22:F7:E5:B4:6B:52:4F:3D:E0:08:49:29:87:0F:EA:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
Signing time: Wed 10 Apr 2024 16:32:46 +0000
ROA not before: Wed 10 Apr 2024 16:27:46 +0000
ROA not after: Wed 09 Apr 2025 16:32:46 +0000
asID: 268398
IP address blocks: 45.160.24.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:41:6c:03:10:5d:9a:83:ad:e1:e9:89:51:45:bc:db:80:29:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB89E1AE22F7E5B46B524F3DE0084929870FEA3F
Validity
Not Before: Apr 10 16:27:46 2024 GMT
Not After : Apr 9 16:32:46 2025 GMT
Subject: CN=E253F8F2F82C29FF6FF37A7B702C6C4DCA7BD95B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c3:86:b5:8f:00:5d:76:b9:8f:4e:87:05:7c:
30:66:d7:52:09:f2:bb:14:82:b3:fc:93:61:d2:31:
09:1a:03:95:e3:04:c5:c3:58:0d:42:b1:a3:56:74:
25:70:b4:41:ca:08:8a:df:d8:47:85:83:c4:bd:9b:
f2:24:b9:4d:56:36:8d:38:4d:c8:10:bb:df:9e:3d:
ac:d5:fa:01:46:75:01:94:5e:50:1b:bd:b4:c2:c7:
64:61:c4:83:ff:ad:8b:45:67:38:0d:0e:59:a7:2d:
ff:07:fa:6b:a3:ee:c8:ac:a4:db:43:61:71:6f:94:
14:f5:f2:7e:f7:a9:08:7e:50:04:73:0c:4e:56:15:
a4:66:57:8a:19:5a:9a:63:af:c7:0b:38:5b:cc:56:
3e:eb:fd:c8:84:ee:7b:f8:30:6b:5c:63:8b:32:48:
30:4e:5a:52:20:97:0f:20:e3:44:19:dd:58:65:7b:
26:79:f7:14:2f:5a:24:11:e0:3a:92:08:26:a0:5b:
49:fb:ea:91:78:5a:41:6e:4e:c1:43:7b:8c:b1:23:
5f:9a:89:cb:01:9b:b5:18:7f:bb:27:b0:e6:7f:51:
68:fa:28:90:64:0a:f3:c0:76:48:8f:74:66:a7:08:
71:fa:8c:5e:33:f8:a5:57:ce:26:54:95:0d:a2:97:
a3:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:F8:F2:F8:2C:29:FF:6F:F3:7A:7B:70:2C:6C:4D:CA:7B:D9:5B
X509v3 Authority Key Identifier:
keyid:DB:89:E1:AE:22:F7:E5:B4:6B:52:4F:3D:E0:08:49:29:87:0F:EA:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/34352e3136302e32342e302f32322d3332203d3e20323638333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.160.24.0/22
Signature Algorithm: sha256WithRSAEncryption
53:a0:c4:cf:9d:5a:ee:f4:46:10:d1:29:99:d7:9d:95:d5:d9:
a8:63:e3:45:44:b9:da:b2:ea:0d:ac:d2:22:d7:96:05:58:22:
b0:49:7d:ba:c5:cc:e2:32:34:df:b7:6f:df:42:31:6e:84:a8:
de:be:ba:90:10:7f:fc:d8:6a:85:a3:96:1f:9b:fc:9b:fc:32:
f8:9b:c1:1a:d0:f0:b8:23:eb:63:ba:d9:f5:19:db:54:d6:43:
ba:e5:6b:9c:c7:b9:3c:c0:dc:e5:c6:5a:f1:7a:ae:7b:a9:ca:
88:ff:05:cc:8a:71:4b:cb:f4:de:28:ff:6a:e4:1a:0e:05:ba:
f2:20:0b:65:ad:16:ab:99:d2:48:a0:68:b0:6b:6c:a7:b0:da:
32:61:8e:a2:f2:7b:f4:ed:a7:61:97:e1:6e:82:29:2a:b5:0b:
10:36:bb:38:b0:1b:ed:f0:c2:96:93:6a:8f:22:d5:1e:da:ba:
6c:dd:f5:54:d7:3d:c4:ce:3b:74:61:72:37:2f:f3:c8:b7:ab:
f4:0d:6d:df:1f:e6:d3:9e:24:26:48:cd:49:18:f9:09:b0:86:
15:a8:db:d1:55:94:d6:15:19:7f:51:4e:d0:66:ba:a4:54:b9:
7c:6b:70:98:74:91:07:c3:ec:96:23:88:67:f5:e4:a4:71:ee:
bc:78:95:9e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGkFsAxBdmoOt4emJUUW824ApAbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI4OUUxQUUyMkY3RTVCNDZCNTI0RjNERTAwODQ5Mjk4
NzBGRUEzRjAeFw0yNDA0MTAxNjI3NDZaFw0yNTA0MDkxNjMyNDZaMDMxMTAvBgNV
BAMTKEUyNTNGOEYyRjgyQzI5RkY2RkYzN0E3QjcwMkM2QzREQ0E3QkQ5NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2w4a1jwBddrmPTocFfDBm11IJ
8rsUgrP8k2HSMQkaA5XjBMXDWA1CsaNWdCVwtEHKCIrf2EeFg8S9m/IkuU1WNo04
TcgQu9+ePazV+gFGdQGUXlAbvbTCx2RhxIP/rYtFZzgNDlmnLf8H+muj7sispNtD
YXFvlBT18n73qQh+UARzDE5WFaRmV4oZWppjr8cLOFvMVj7r/ciE7nv4MGtcY4sy
SDBOWlIglw8g40QZ3VhleyZ59xQvWiQR4DqSCCagW0n76pF4WkFuTsFDe4yxI1+a
icsBm7UYf7snsOZ/UWj6KJBkCvPAdkiPdGanCHH6jF4z+KVXziZUlQ2il6MDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4lP48vgsKf9v83p7cCxsTcp72VswHwYDVR0j
BBgwFoAU24nhriL35bRrUk894AhJKYcP6j8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUFSdTNYS3c3YUhuNGNDNlJyVmVKZjJBUWhTRWRNaGNiaHVwODJrNzNG
SlkvMS9EQjg5RTFBRTIyRjdFNUI0NkI1MjRGM0RFMDA4NDkyOTg3MEZFQTNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RCODlFMUFFMjJGN0U1QjQ2
QjUyNEYzREUwMDg0OTI5ODcwRkVBM0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FBUnUzWEt3N2FIbjRjQzZSclZlSmYyQVFoU0VkTWhjYmh1cDgyazczRkpZLzEv
MzQzNTJlMzEzNjMwMmUzMjM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzMzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLaAYMA0GCSqGSIb3DQEBCwUAA4IBAQBToMTPnVru
9EYQ0SmZ152V1dmoY+NFRLnasuoNrNIi15YFWCKwSX26xcziMjTft2/fQjFuhKje
vrqQEH/82GqFo5Yfm/yb/DL4m8Ea0PC4I+tjutn1GdtU1kO65Wucx7k8wNzlxlrx
eq57qcqI/wXMinFLy/TeKP9q5BoOBbryIAtlrRarmdJIoGiwa2ynsNoyYY6i8nv0
7adhl+FugikqtQsQNrs4sBvt8MKWk2qPItUe2rps3fVU1z3Ezjt0YXI3L/PIt6v0
DW3fH+bTniQmSM1JGPkJsIYVqNvRVZTWFRl/UU7QZrqkVLl8a3CYdJEHw+yWI4hn
9eSkce68eJWe
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:54 2024 by rpki-client on console-fra.rpki-client.org