Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa
File: 34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa (raw, json)
Hash identifier: F0MykZvF0S5nwAFCNGjCrYKK8N74DaLReONjzVpISvU=
Subject key identifier: 8F:24:C2:48:47:87:62:BE:2F:A8:84:11:C4:87:95:DD:4C:F8:1E:F8
Certificate issuer: /CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Certificate serial: 15BC872A693F6999F37589ED37CD96E5482C026C
Authority key identifier: EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa
Signing time: Thu 31 Oct 2024 14:03:03 +0000
ROA not before: Thu 31 Oct 2024 13:58:03 +0000
ROA not after: Thu 30 Oct 2025 14:03:03 +0000
asID: 268033
IP address blocks: 45.166.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:bc:87:2a:69:3f:69:99:f3:75:89:ed:37:cd:96:e5:48:2c:02:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB84E09364662EDCA9ADD7153DBD782F05779B3C
Validity
Not Before: Oct 31 13:58:03 2024 GMT
Not After : Oct 30 14:03:03 2025 GMT
Subject: CN=8F24C248478762BE2FA88411C48795DD4CF81EF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e4:0d:ce:9a:22:6d:cb:d4:2c:98:fa:f4:30:
e6:09:8c:d4:e6:6c:0c:0c:ed:52:10:26:4e:48:2f:
b9:5f:eb:83:31:e1:e6:23:70:5a:34:d7:da:81:b4:
63:af:0f:83:0d:98:52:a6:63:b1:04:cb:bf:9b:46:
27:bc:a1:d1:7f:46:f2:8e:8d:77:3a:d1:a9:69:22:
39:55:ba:99:8f:e2:f0:f3:f3:6d:8a:c1:3c:99:14:
48:65:c2:9d:ce:af:88:e6:4b:01:7f:a4:59:7e:a4:
79:36:c2:9e:de:59:7b:c2:dc:cb:aa:d2:84:f6:12:
71:f5:e8:83:2c:0d:26:13:f6:29:fb:8e:95:2d:04:
26:5e:3e:8e:79:13:f2:33:f5:1f:eb:99:c3:c0:64:
a0:d4:bc:44:5f:8d:2c:9c:81:76:ad:92:3f:a4:1d:
4a:89:46:9b:d4:fa:12:f6:a9:17:b7:67:69:46:a5:
02:0f:a4:86:37:d1:b4:6e:06:6b:0f:f5:82:37:14:
62:78:42:d7:71:37:a9:a2:c1:1c:d1:4c:03:b0:af:
c3:68:af:8d:35:aa:8d:b1:84:96:12:5d:bf:58:75:
e8:39:a2:bc:94:41:73:25:9c:d5:75:ff:76:ce:4a:
f8:99:e2:bb:55:98:d8:51:b3:9a:9d:1b:88:b7:06:
34:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:C2:48:47:87:62:BE:2F:A8:84:11:C4:87:95:DD:4C:F8:1E:F8
X509v3 Authority Key Identifier:
keyid:EB:84:E0:93:64:66:2E:DC:A9:AD:D7:15:3D:BD:78:2F:05:77:9B:3C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/EB84E09364662EDCA9ADD7153DBD782F05779B3C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB84E09364662EDCA9ADD7153DBD782F05779B3C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AF4qNkXUkn4GnmKUdnHfJWgEHutgcgwAdXANf59Pq6j2/0/34352e3136362e3230332e302f32342d3234203d3e20323638303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.203.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:49:df:d1:8f:75:67:cd:8b:02:57:9c:e7:56:4d:e1:f1:88:
18:76:fe:1f:cc:c7:b9:a8:dd:93:35:6e:c2:3e:c5:53:19:87:
dc:94:64:1f:cf:01:2c:43:f3:8b:e5:72:71:b7:3f:14:8a:36:
a7:1f:32:1f:76:3d:ef:fe:93:c7:ba:e5:c8:0e:c0:15:07:96:
59:bc:f9:ab:6e:9d:e4:45:3a:8a:5f:12:ff:89:4d:32:c4:1e:
81:31:47:75:42:37:e3:b3:0b:9a:cc:6f:69:65:75:ce:00:8c:
0c:0d:f0:f1:9f:ca:10:f9:04:3d:37:41:05:14:7f:7d:f7:6d:
8b:cb:34:38:a8:ce:d7:19:9a:74:d3:37:13:a5:5d:c7:1a:8d:
85:d2:67:6e:d9:20:28:31:a1:0a:ab:77:05:74:67:c0:d8:71:
bf:61:32:84:9a:d8:c7:aa:85:62:da:8a:79:9e:49:72:50:40:
d3:2f:3a:b7:83:32:d5:45:46:54:be:81:82:52:90:0e:7c:10:
30:7e:d0:86:37:e6:92:89:ff:61:c8:e9:fe:a6:8e:bf:ce:30:
89:17:85:14:5a:17:8d:47:dc:34:eb:c1:0d:30:36:47:6e:7f:
92:a5:e7:e5:74:f2:c1:6b:7f:69:b9:56:0e:b4:7b:61:ad:d2:
c5:3c:af:8d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFbyHKmk/aZnzdYntN82W5UgsAmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI4NEUwOTM2NDY2MkVEQ0E5QURENzE1M0RCRDc4MkYw
NTc3OUIzQzAeFw0yNDEwMzExMzU4MDNaFw0yNTEwMzAxNDAzMDNaMDMxMTAvBgNV
BAMTKDhGMjRDMjQ4NDc4NzYyQkUyRkE4ODQxMUM0ODc5NURENENGODFFRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU5A3OmiJty9QsmPr0MOYJjNTm
bAwM7VIQJk5IL7lf64Mx4eYjcFo019qBtGOvD4MNmFKmY7EEy7+bRie8odF/RvKO
jXc60alpIjlVupmP4vDz822KwTyZFEhlwp3Or4jmSwF/pFl+pHk2wp7eWXvC3Muq
0oT2EnH16IMsDSYT9in7jpUtBCZePo55E/Iz9R/rmcPAZKDUvERfjSycgXatkj+k
HUqJRpvU+hL2qRe3Z2lGpQIPpIY30bRuBmsP9YI3FGJ4QtdxN6miwRzRTAOwr8No
r401qo2xhJYSXb9Ydeg5oryUQXMlnNV1/3bOSviZ4rtVmNhRs5qdG4i3BjT1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjyTCSEeHYr4vqIQRxIeV3Uz4HvgwHwYDVR0j
BBgwFoAU64Tgk2RmLtyprdcVPb14LwV3mzwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUY0cU5rWFVrbjRHbm1LVWRuSGZKV2dFSHV0Z2Nnd0FkWEFOZjU5UHE2
ajIvMC9FQjg0RTA5MzY0NjYyRURDQTlBREQ3MTUzREJENzgyRjA1Nzc5QjNDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VCODRFMDkzNjQ2NjJFRENB
OUFERDcxNTNEQkQ3ODJGMDU3NzlCM0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FGNHFOa1hVa240R25tS1VkbkhmSldnRUh1dGdjZ3dBZFhBTmY1OVBxNmoyLzAv
MzQzNTJlMzEzNjM2MmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtpsswDQYJKoZIhvcNAQELBQADggEBAJtJ39GP
dWfNiwJXnOdWTeHxiBh2/h/Mx7mo3ZM1bsI+xVMZh9yUZB/PASxD84vlcnG3PxSK
NqcfMh92Pe/+k8e65cgOwBUHllm8+atuneRFOopfEv+JTTLEHoExR3VCN+OzC5rM
b2lldc4AjAwN8PGfyhD5BD03QQUUf333bYvLNDioztcZmnTTNxOlXccajYXSZ27Z
ICgxoQqrdwV0Z8DYcb9hMoSa2MeqhWLainmeSXJQQNMvOreDMtVFRlS+gYJSkA58
EDB+0IY35pKJ/2HI6f6mjr/OMIkXhRRaF41H3DTrwQ0wNkduf5Kl5+V08sFrf2m5
Vg60e2Gt0sU8r40=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:15:59 2025 by rpki-client