Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32322d3232203d3e20323637333339.roa
File: 34352e3233332e3230382e302f32322d3232203d3e20323637333339.roa (raw, json)
Hash identifier: lTOYthw27EImg7es37FzN3eTvNP7lfraO6yoQJeQ2l4=
Subject key identifier: 26:FB:42:28:95:39:6E:FD:5A:98:A5:F5:FB:67:C6:89:EE:B1:52:EE
Certificate issuer: /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial: D48A084657E54117571047315A4F80F639EE5A
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32322d3232203d3e20323637333339.roa
Signing time: Sun 09 Jul 2023 04:08:21 +0000
ROA not before: Sun 09 Jul 2023 04:03:21 +0000
ROA not after: Sun 07 Jul 2024 04:08:21 +0000
asID: 267339
IP address blocks: 45.233.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d4:8a:08:46:57:e5:41:17:57:10:47:31:5a:4f:80:f6:39:ee:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
Validity
Not Before: Jul 9 04:03:21 2023 GMT
Not After : Jul 7 04:08:21 2024 GMT
Subject: CN=26FB422895396EFD5A98A5F5FB67C689EEB152EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1f:d8:3b:af:eb:ae:4b:98:28:f6:30:3f:5f:
fc:15:f1:9a:d0:eb:de:28:26:26:aa:95:99:23:b2:
45:75:6b:cc:d7:1b:cd:52:37:88:f5:26:73:a8:69:
fc:74:e7:c1:af:77:87:9f:c8:a2:2f:b7:09:c9:90:
88:a4:ed:71:af:05:1e:08:e2:43:c5:dd:e2:b7:91:
e8:6e:e0:b4:b6:e7:2a:56:4a:4c:5f:6e:62:31:e0:
df:91:de:e2:6f:9b:c0:01:6f:e9:17:0c:e9:93:fb:
08:ba:3b:22:52:ef:2f:ea:da:29:20:a1:ba:f9:87:
3f:56:8e:d4:9b:72:bd:37:b8:36:09:ff:fc:a5:93:
9c:9e:2c:ed:23:08:a2:e1:da:fd:d9:cf:e2:00:e5:
b2:3c:a7:99:0c:aa:cc:da:ad:ed:cf:1f:01:a6:2d:
ed:66:4c:f5:92:e7:00:08:16:74:22:ad:86:9d:bc:
dd:a5:64:c6:e6:05:9a:5d:4f:0c:0b:a4:8a:45:c7:
4f:40:b7:4d:c9:5c:4e:37:83:88:a2:9a:26:60:da:
82:5e:4f:d9:26:71:9e:88:06:14:24:98:59:33:37:
3c:bc:cd:37:4e:0b:52:90:43:85:f4:37:57:20:38:
fa:fa:0f:c2:8a:ac:f4:d9:32:e9:ff:5e:11:0b:15:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FB:42:28:95:39:6E:FD:5A:98:A5:F5:FB:67:C6:89:EE:B1:52:EE
X509v3 Authority Key Identifier:
keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/34352e3233332e3230382e302f32322d3232203d3e20323637333339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.208.0/22
Signature Algorithm: sha256WithRSAEncryption
72:e7:fa:28:00:89:38:93:ee:22:37:a8:b1:86:34:fc:df:c0:
94:24:29:85:c9:54:53:7c:4e:a5:a3:25:d9:a5:56:38:14:e4:
0f:d7:39:af:af:5b:29:da:8f:96:a9:83:09:6d:53:b0:ef:1f:
33:a1:80:7d:c0:85:24:ba:ab:36:2c:bb:16:8b:ae:21:7d:12:
71:69:47:29:4b:11:55:9c:a2:9e:a0:77:07:a1:78:b1:18:af:
14:ad:aa:f0:fb:4c:45:47:aa:8c:d5:87:fa:06:ff:57:80:8e:
b5:6b:8d:c2:9d:da:7f:51:52:e4:a0:0f:14:12:b4:11:a6:37:
64:56:24:bf:8c:e5:fd:5b:ca:90:a4:ef:2c:85:dd:9e:27:13:
2b:6c:d8:22:ed:e8:bc:3f:b1:f9:79:56:77:34:56:8b:43:16:
3f:ad:57:38:7e:fa:58:fc:5a:ee:2a:19:6c:69:65:24:c5:c3:
f7:64:f5:21:05:03:60:ba:ab:5f:47:a9:db:71:5f:ea:8d:43:
9b:98:28:a5:af:9b:e9:5a:eb:6e:67:b5:0a:f1:53:cb:dc:2e:
92:a0:66:5d:1c:80:f9:ba:39:6a:ab:58:26:10:39:11:e4:1c:
b6:69:49:89:66:0a:6c:23:da:c4:44:eb:33:ff:46:0f:77:b6:
5f:50:6d:3a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUANSKCEZX5UEXVxBHMVpPgPY57lowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5MDg3RTU1ODQ2Mjc0NDc3QUIwRTQ1OTdGRDc1NERC
MDUwOTIwMzAeFw0yMzA3MDkwNDAzMjFaFw0yNDA3MDcwNDA4MjFaMDMxMTAvBgNV
BAMTKDI2RkI0MjI4OTUzOTZFRkQ1QTk4QTVGNUZCNjdDNjg5RUVCMTUyRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjH9g7r+uuS5go9jA/X/wV8ZrQ
694oJiaqlZkjskV1a8zXG81SN4j1JnOoafx058Gvd4efyKIvtwnJkIik7XGvBR4I
4kPF3eK3kehu4LS25ypWSkxfbmIx4N+R3uJvm8ABb+kXDOmT+wi6OyJS7y/q2ikg
obr5hz9WjtSbcr03uDYJ//ylk5yeLO0jCKLh2v3Zz+IA5bI8p5kMqszare3PHwGm
Le1mTPWS5wAIFnQirYadvN2lZMbmBZpdTwwLpIpFx09At03JXE43g4iimiZg2oJe
T9kmcZ6IBhQkmFkzNzy8zTdOC1KQQ4X0N1cgOPr6D8KKrPTZMun/XhELFUX1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUJvtCKJU5bv1amKX1+2fGie6xUu4wHwYDVR0j
BBgwFoAUoJCH5VhGJ0R3qw5Fl/11TbBQkgMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQW9CYndxeFg5MURleGgxVFRxeng5WDlab0ZDNFQ1VEw0OGIycVJTcm9E
WVcvMC9BMDkwODdFNTU4NDYyNzQ0NzdBQjBFNDU5N0ZENzU0REIwNTA5MjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0EwOTA4N0U1NTg0NjI3NDQ3
N0FCMEU0NTk3RkQ3NTREQjA1MDkyMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FvQmJ3cXhYOTFEZXhoMVRUcXp4OVg5Wm9GQzRUNVRMNDhiMnFSU3JvRFlXLzAv
MzQzNTJlMzIzMzMzMmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzczMzMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt6dAwDQYJKoZIhvcNAQELBQADggEBAHLn+igA
iTiT7iI3qLGGNPzfwJQkKYXJVFN8TqWjJdmlVjgU5A/XOa+vWynaj5apgwltU7Dv
HzOhgH3AhSS6qzYsuxaLriF9EnFpRylLEVWcop6gdweheLEYrxStqvD7TEVHqozV
h/oG/1eAjrVrjcKd2n9RUuSgDxQStBGmN2RWJL+M5f1bypCk7yyF3Z4nEyts2CLt
6Lw/sfl5Vnc0VotDFj+tVzh++lj8Wu4qGWxpZSTFw/dk9SEFA2C6q19HqdtxX+qN
Q5uYKKWvm+la625ntQrxU8vcLpKgZl0cgPm6OWqrWCYQORHkHLZpSYlmCmwj2sRE
6zP/Rg93tl9QbTo=
-----END CERTIFICATE-----
Generated at Tue Apr 22 12:35:58 2025 by rpki-client