Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa
File: 34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa (raw, json)
Hash identifier: FoRlwB5Es7LO/YDxwAH1y2hac3GN75+/XaJEk2OG/zQ=
Subject key identifier: 8E:E2:9E:41:FD:76:6F:2C:DE:D9:AF:39:2F:92:4A:A2:6D:C3:51:17
Certificate issuer: /CN=D8C211ABAD958D5A26D33AF78B82405676017796
Certificate serial: 765EBA83308C652380543C146E4E988587A1C742
Authority key identifier: D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa
Signing time: Mon 23 Dec 2024 03:55:51 +0000
ROA not before: Mon 23 Dec 2024 03:50:51 +0000
ROA not after: Mon 22 Dec 2025 03:55:51 +0000
asID: 268707
IP address blocks: 45.169.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:5e:ba:83:30:8c:65:23:80:54:3c:14:6e:4e:98:85:87:a1:c7:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8C211ABAD958D5A26D33AF78B82405676017796
Validity
Not Before: Dec 23 03:50:51 2024 GMT
Not After : Dec 22 03:55:51 2025 GMT
Subject: CN=8EE29E41FD766F2CDED9AF392F924AA26DC35117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:af:1b:ac:b1:56:d5:08:4d:3b:b7:fe:bb:
b6:d8:1d:a9:81:2f:b3:f8:35:96:b9:c5:e9:cf:d7:
55:82:cc:78:70:61:be:18:26:93:b4:1e:b5:0b:a0:
74:80:f0:7c:71:38:8f:a1:c6:cb:91:7a:d2:ad:d2:
68:6f:70:94:db:36:bb:5b:23:d2:17:ce:78:8f:cb:
8b:6d:73:f6:40:fe:f3:ee:1f:a6:b5:a5:5d:6e:4d:
c5:55:30:19:cd:bd:8e:bb:5a:b1:8b:6c:c4:a2:e8:
0b:c1:6d:c6:8b:15:37:b5:7f:ea:c0:63:cb:33:79:
b3:77:c0:0b:94:f5:29:9b:04:0e:01:f2:4e:f2:7c:
49:06:57:16:0e:f7:b1:03:33:fe:5c:45:7c:64:3c:
fa:5d:cb:4d:ec:2b:2e:a2:a8:19:12:a6:e8:e8:1b:
0b:c7:6e:fd:1a:47:da:f3:0f:01:76:9b:b3:ee:ca:
94:18:71:1b:42:e9:33:47:e0:bb:d7:fd:ef:da:b2:
c5:c0:42:41:95:77:70:02:f2:44:06:8f:f7:6b:50:
aa:37:67:ad:ef:ab:21:0a:f6:59:c7:79:00:21:7b:
4c:b3:bc:bc:2a:02:48:df:08:c1:fc:b4:47:ca:96:
06:cf:77:da:a5:8e:b9:4f:83:82:9c:ff:6a:8b:23:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E2:9E:41:FD:76:6F:2C:DE:D9:AF:39:2F:92:4A:A2:6D:C3:51:17
X509v3 Authority Key Identifier:
keyid:D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/D8C211ABAD958D5A26D33AF78B82405676017796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3234203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:47:23:78:dd:fa:39:cf:21:f3:9d:57:9f:6a:3b:6f:54:e7:
5e:42:ff:60:f5:18:20:90:41:73:09:e0:74:c7:b2:d1:a1:53:
cc:be:83:e5:f7:73:b0:fc:8f:76:95:66:ac:03:e5:cb:6a:84:
db:b8:53:59:7c:1a:43:19:10:27:19:7c:94:eb:c6:aa:7d:b1:
89:50:de:f0:fa:ad:0b:08:af:7a:c2:a9:99:81:a1:a1:6d:9b:
5e:6f:1d:71:99:fe:7e:48:c1:37:54:ab:78:f7:67:45:d0:d0:
0c:36:27:da:f8:bc:97:d1:e1:8b:57:cc:3a:95:9c:2a:ca:44:
5d:a5:69:ec:55:b8:e2:f1:09:16:d0:c1:7e:32:ad:6d:f5:b5:
0a:5d:b3:b0:13:01:b3:9b:d8:25:ad:a9:ff:e9:c7:ae:43:28:
7b:99:bf:02:23:07:77:40:9d:f9:e3:7e:f8:2a:56:d6:66:b0:
97:60:38:9b:0e:a0:0d:28:4b:fe:3f:88:7b:7a:6f:86:28:0b:
1b:87:68:22:17:46:6a:4d:12:2c:b8:25:c1:71:27:90:3a:6a:
e5:da:1d:cf:e3:6d:31:aa:12:89:bd:a6:0b:ae:7c:6f:6e:ee:
6a:01:98:5c:a4:ff:34:8a:4e:ff:ce:da:36:db:a6:94:30:ba:
40:8d:9e:b8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdl66gzCMZSOAVDwUbk6YhYehx0IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDhDMjExQUJBRDk1OEQ1QTI2RDMzQUY3OEI4MjQwNTY3
NjAxNzc5NjAeFw0yNDEyMjMwMzUwNTFaFw0yNTEyMjIwMzU1NTFaMDMxMTAvBgNV
BAMTKDhFRTI5RTQxRkQ3NjZGMkNERUQ5QUYzOTJGOTI0QUEyNkRDMzUxMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRdq8brLFW1QhNO7f+u7bYHamB
L7P4NZa5xenP11WCzHhwYb4YJpO0HrULoHSA8HxxOI+hxsuRetKt0mhvcJTbNrtb
I9IXzniPy4ttc/ZA/vPuH6a1pV1uTcVVMBnNvY67WrGLbMSi6AvBbcaLFTe1f+rA
Y8szebN3wAuU9SmbBA4B8k7yfEkGVxYO97EDM/5cRXxkPPpdy03sKy6iqBkSpujo
GwvHbv0aR9rzDwF2m7PuypQYcRtC6TNH4LvX/e/assXAQkGVd3AC8kQGj/drUKo3
Z63vqyEK9lnHeQAhe0yzvLwqAkjfCMH8tEfKlgbPd9qljrlPg4Kc/2qLIy5/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjuKeQf12byze2a85L5JKom3DURcwHwYDVR0j
BBgwFoAU2MIRq62VjVom0zr3i4JAVnYBd5YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC9EOEMyMTFBQkFEOTU4RDVBMjZEMzNBRjc4QjgyNDA1Njc2MDE3Nzk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q4QzIxMUFCQUQ5NThENUEy
NkQzM0FGNzhCODI0MDU2NzYwMTc3OTYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzQzNTJlMzEzNjM5MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzNzMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqaEwDQYJKoZIhvcNAQELBQADggEBABtHI3jd
+jnPIfOdV59qO29U515C/2D1GCCQQXMJ4HTHstGhU8y+g+X3c7D8j3aVZqwD5ctq
hNu4U1l8GkMZECcZfJTrxqp9sYlQ3vD6rQsIr3rCqZmBoaFtm15vHXGZ/n5IwTdU
q3j3Z0XQ0Aw2J9r4vJfR4YtXzDqVnCrKRF2laexVuOLxCRbQwX4yrW31tQpds7AT
AbOb2CWtqf/px65DKHuZvwIjB3dAnfnjfvgqVtZmsJdgOJsOoA0oS/4/iHt6b4Yo
CxuHaCIXRmpNEiy4JcFxJ5A6auXaHc/jbTGqEom9pguufG9u7moBmFyk/zSKTv/O
2jbbppQwukCNnrg=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:18:00 2025 by rpki-client