Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa
File: 34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa (raw, json)
Hash identifier: 9foA7Jln457xkpbO7vYTZBDdjbLvq88O1Y1Z1q48lkk=
Subject key identifier: 8D:46:F0:43:91:35:99:0B:83:84:07:80:E0:94:AF:E1:63:2E:4C:F8
Certificate issuer: /CN=D8C211ABAD958D5A26D33AF78B82405676017796
Certificate serial: 46DBA1103675833599193CF61E492EE62413D7F7
Authority key identifier: D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa
Signing time: Mon 23 Dec 2024 03:55:45 +0000
ROA not before: Mon 23 Dec 2024 03:50:45 +0000
ROA not after: Mon 22 Dec 2025 03:55:45 +0000
asID: 268707
IP address blocks: 45.169.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:db:a1:10:36:75:83:35:99:19:3c:f6:1e:49:2e:e6:24:13:d7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8C211ABAD958D5A26D33AF78B82405676017796
Validity
Not Before: Dec 23 03:50:45 2024 GMT
Not After : Dec 22 03:55:45 2025 GMT
Subject: CN=8D46F0439135990B83840780E094AFE1632E4CF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:30:0c:20:b9:18:bb:ee:0c:be:50:b0:bf:
9f:a2:43:2e:49:bb:5b:17:93:b4:55:58:cf:57:22:
96:d7:2c:10:06:15:7f:8d:a4:33:b9:99:71:09:9a:
5c:74:4e:5e:df:97:56:ae:1c:24:39:23:84:b6:1b:
28:8d:a1:12:f5:dc:b3:81:38:87:e6:84:85:e8:b5:
96:32:29:a4:b3:0f:09:24:90:69:0d:3f:92:58:31:
9b:cb:f5:5b:bd:1e:99:20:a7:91:cc:2f:51:80:25:
2a:5c:75:22:aa:63:c6:10:3b:36:a3:d2:cd:5f:ac:
b0:b8:11:39:f5:47:c5:47:57:66:33:bc:2d:20:70:
26:f7:62:d8:38:46:46:a3:7d:7e:84:b1:d2:75:d7:
87:78:cb:97:c4:3b:b9:7f:7c:ee:58:46:9d:4a:8a:
c6:4a:9a:7e:69:0c:07:e6:95:00:cd:55:15:36:f4:
50:3e:06:36:55:f1:91:e5:66:4f:20:7b:b2:3b:67:
59:9f:e5:40:02:b5:26:1d:d6:b3:a9:12:04:62:a4:
cd:5e:01:4d:b7:2e:70:56:d2:33:e8:b2:af:25:c2:
01:20:ae:ea:06:12:e3:b9:52:40:b0:e2:e4:65:53:
a6:31:12:9f:f4:e2:c8:0c:40:59:6b:6b:75:69:48:
00:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:46:F0:43:91:35:99:0B:83:84:07:80:E0:94:AF:E1:63:2E:4C:F8
X509v3 Authority Key Identifier:
keyid:D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/D8C211ABAD958D5A26D33AF78B82405676017796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136302e302f32342d3234203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.160.0/24
Signature Algorithm: sha256WithRSAEncryption
89:5b:72:e8:bb:af:8c:d2:b1:c4:d7:b1:46:3d:57:49:98:f2:
6f:7f:8b:9d:7a:ac:6c:f7:c0:42:7e:e2:b7:a3:c3:db:73:7c:
e3:8b:a9:2a:7b:73:3f:a9:4f:34:a5:a8:79:03:c5:75:20:73:
a1:bd:25:72:cf:9b:5e:ab:14:cb:a5:04:41:55:a9:10:a9:59:
89:90:87:2c:eb:44:cb:f4:1d:b3:8d:ca:00:57:15:7d:6b:f6:
bb:a2:23:02:cf:e8:44:c1:87:b2:59:7f:8d:0a:34:6b:48:aa:
78:5f:82:20:25:61:53:92:f2:8b:c0:e3:36:4f:50:54:58:5f:
e3:9c:dc:60:20:c1:87:9b:e3:06:15:a2:1b:96:02:07:5e:dc:
0c:11:48:3a:3e:a4:e9:c2:72:52:97:80:b3:3a:75:80:a5:8a:
0b:6a:c5:dc:39:e9:7d:9f:67:d0:49:42:21:03:ff:25:45:40:
cf:06:6c:c4:63:06:05:a1:19:fc:b8:98:0a:62:31:00:6c:dc:
a8:28:57:a7:3c:05:25:68:e3:7d:55:63:22:3a:a7:40:0a:73:
47:ed:d4:45:db:e7:bb:b3:72:e6:96:59:f8:e4:85:19:44:76:
b5:7f:e3:7b:8c:45:8e:e6:af:0a:9b:6a:a3:6e:a1:21:98:00:
e3:5f:dc:cb
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURtuhEDZ1gzWZGTz2Hkku5iQT1/cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhDMjExQUJBRDk1OEQ1QTI2RDMzQUY3OEI4MjQwNTY3
NjAxNzc5NjAeFw0yNDEyMjMwMzUwNDVaFw0yNTEyMjIwMzU1NDVaMDMxMTAvBgNV
BAMTKDhENDZGMDQzOTEzNTk5MEI4Mzg0MDc4MEUwOTRBRkUxNjMyRTRDRjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JTAMILkYu+4MvlCwv5+iQy5J
u1sXk7RVWM9XIpbXLBAGFX+NpDO5mXEJmlx0Tl7fl1auHCQ5I4S2GyiNoRL13LOB
OIfmhIXotZYyKaSzDwkkkGkNP5JYMZvL9Vu9Hpkgp5HML1GAJSpcdSKqY8YQOzaj
0s1frLC4ETn1R8VHV2YzvC0gcCb3Ytg4RkajfX6EsdJ114d4y5fEO7l/fO5YRp1K
isZKmn5pDAfmlQDNVRU29FA+BjZV8ZHlZk8ge7I7Z1mf5UACtSYd1rOpEgRipM1e
AU23LnBW0jPosq8lwgEgruoGEuO5UkCw4uRlU6YxEp/04sgMQFlra3VpSAA1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjUbwQ5E1mQuDhAeA4JSv4WMuTPgwHwYDVR0j
BBgwFoAU2MIRq62VjVom0zr3i4JAVnYBd5YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC9EOEMyMTFBQkFEOTU4RDVBMjZEMzNBRjc4QjgyNDA1Njc2MDE3Nzk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QzIxMUFCQUQ5NThENUEy
NkQzM0FGNzhCODI0MDU2NzYwMTc3OTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzQzNTJlMzEzNjM5MmUzMTM2MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqaAwDQYJKoZIhvcNAQELBQADggEBAIlbcui7
r4zSscTXsUY9V0mY8m9/i516rGz3wEJ+4rejw9tzfOOLqSp7cz+pTzSlqHkDxXUg
c6G9JXLPm16rFMulBEFVqRCpWYmQhyzrRMv0HbONygBXFX1r9ruiIwLP6ETBh7JZ
f40KNGtIqnhfgiAlYVOS8ovA4zZPUFRYX+Oc3GAgwYeb4wYVohuWAgde3AwRSDo+
pOnCclKXgLM6dYCligtqxdw56X2fZ9BJQiED/yVFQM8GbMRjBgWhGfy4mApiMQBs
3KgoV6c8BSVo431VYyI6p0AKc0ft1EXb57uzcuaWWfjkhRlEdrV/43uMRY7mrwqb
aqNuoSGYAONf3Ms=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:18:53 2025 by rpki-client