Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
File: 34352e3137352e38302e302f32322d3234203d3e203533303830.roa (raw, json)
Hash identifier: +hSiujXc9CZJl7tbUZ+nfdyc0dgVYDEWAJjE2Lfm38Q=
Subject key identifier: 89:FB:71:2C:1A:6C:E5:AF:15:63:D3:29:02:0A:C7:59:AF:8A:45:23
Certificate issuer: /CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Certificate serial: 69F7D78DA36461D330D1CB7D9F8C26BBE53CF689
Authority key identifier: F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
Signing time: Tue 23 Jul 2024 11:55:43 +0000
ROA not before: Tue 23 Jul 2024 11:50:43 +0000
ROA not after: Tue 22 Jul 2025 11:55:43 +0000
asID: 53080
IP address blocks: 45.175.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:f7:d7:8d:a3:64:61:d3:30:d1:cb:7d:9f:8c:26:bb:e5:3c:f6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE
Validity
Not Before: Jul 23 11:50:43 2024 GMT
Not After : Jul 22 11:55:43 2025 GMT
Subject: CN=89FB712C1A6CE5AF1563D329020AC759AF8A4523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:a2:0e:04:92:11:ee:17:43:4e:2e:36:33:
fa:b4:0b:a8:14:af:86:19:41:5f:e5:9b:74:44:e4:
b4:8e:f0:70:5f:c4:f1:70:1f:d4:0c:ca:ed:ed:63:
d2:db:ed:02:2b:11:c3:62:2d:ab:cd:62:b9:4c:5b:
08:b7:32:7a:39:60:c6:05:cc:95:f4:21:74:fd:57:
b0:4f:44:91:97:57:33:ce:41:db:ca:01:5f:40:08:
cd:41:8e:8f:3f:ed:d6:c1:dd:b6:76:fe:c0:7a:7c:
70:31:e0:51:0f:8f:3b:c8:a3:96:ff:99:c6:ec:cb:
67:b9:39:de:14:23:75:68:c2:4b:c3:f4:13:a2:72:
0a:0d:58:89:a2:a5:57:f9:ba:65:d7:77:c5:84:73:
db:e7:a4:0d:66:86:a7:23:51:e2:0b:18:df:27:b8:
54:de:e3:50:b7:e3:11:a5:5a:62:ee:8a:96:94:f3:
66:b0:ac:cd:5c:59:fd:76:1f:cf:75:71:52:1e:16:
59:3d:eb:fe:ec:8f:67:22:fe:e1:c7:a0:a4:f3:94:
64:dd:21:b0:34:cf:4d:a3:d7:85:3d:83:9f:4a:a9:
96:33:1b:50:98:9a:c0:40:df:15:74:33:d7:16:ab:
a3:e0:e5:e6:18:7f:11:01:11:84:4d:fe:86:e5:79:
82:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:FB:71:2C:1A:6C:E5:AF:15:63:D3:29:02:0A:C7:59:AF:8A:45:23
X509v3 Authority Key Identifier:
keyid:F4:CC:BF:55:AA:1D:25:CB:A2:0B:D8:CE:85:D9:CD:6D:00:08:CA:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4CCBF55AA1D25CBA20BD8CE85D9CD6D0008CAFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/2/34352e3137352e38302e302f32322d3234203d3e203533303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.80.0/22
Signature Algorithm: sha256WithRSAEncryption
60:4b:02:7c:7a:3e:ea:f4:87:e7:82:f4:c1:94:94:22:39:8d:
64:df:35:02:92:13:fa:0f:e7:a4:21:a2:bb:86:07:52:30:53:
eb:ce:3a:6b:a7:05:1d:76:d0:59:03:be:f2:4a:65:80:af:6d:
13:0b:53:9a:c8:20:4b:37:ac:19:40:37:cf:e7:f6:64:37:e6:
a2:6c:3c:62:53:b0:3a:c6:43:1f:a5:27:ec:7c:5e:10:a3:46:
c3:63:42:39:ad:cb:11:31:0b:3e:27:1f:3a:40:42:26:81:fd:
67:dd:48:b8:7c:94:ae:ff:40:a3:e7:2d:37:31:28:3d:c3:4f:
6b:59:9b:02:7a:98:1d:f2:3d:b9:85:90:50:1d:d1:b2:10:46:
89:0f:df:27:c6:b5:40:df:c7:cb:14:d6:fb:e3:55:b6:4a:26:
90:70:0e:4c:23:d2:47:aa:7d:62:0a:c0:66:30:06:0b:57:28:
ef:af:55:57:d3:26:d6:25:84:49:14:25:8b:cc:03:88:d3:7c:
94:9a:7e:c8:cc:db:b2:93:be:6c:50:9d:c5:8b:3d:e1:1a:3c:
87:44:43:36:4a:61:fe:7c:79:3a:0a:10:ad:63:99:c0:41:35:
f1:ad:c1:10:ae:9b:10:8b:9a:2c:48:51:cd:46:7f:2f:f9:2e:
c2:eb:ac:92
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUaffXjaNkYdMw0ct9n4wmu+U89okwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDQ0JGNTVBQTFEMjVDQkEyMEJEOENFODVEOUNENkQw
MDA4Q0FGRTAeFw0yNDA3MjMxMTUwNDNaFw0yNTA3MjIxMTU1NDNaMDMxMTAvBgNV
BAMTKDg5RkI3MTJDMUE2Q0U1QUYxNTYzRDMyOTAyMEFDNzU5QUY4QTQ1MjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhWKIOBJIR7hdDTi42M/q0C6gU
r4YZQV/lm3RE5LSO8HBfxPFwH9QMyu3tY9Lb7QIrEcNiLavNYrlMWwi3Mno5YMYF
zJX0IXT9V7BPRJGXVzPOQdvKAV9ACM1Bjo8/7dbB3bZ2/sB6fHAx4FEPjzvIo5b/
mcbsy2e5Od4UI3VowkvD9BOicgoNWImipVf5umXXd8WEc9vnpA1mhqcjUeILGN8n
uFTe41C34xGlWmLuipaU82awrM1cWf12H891cVIeFlk96/7sj2ci/uHHoKTzlGTd
IbA0z02j14U9g59KqZYzG1CYmsBA3xV0M9cWq6Pg5eYYfxEBEYRN/obleYJfAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiftxLBps5a8VY9MpAgrHWa+KRSMwHwYDVR0j
BBgwFoAU9My/VaodJcuiC9jOhdnNbQAIyv4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQk43cUp4bW83ZUdDMWozNThROFJCM25YQ0pYMzJFWU00Qng0Q2E2Qkt5
cFUvMi9GNENDQkY1NUFBMUQyNUNCQTIwQkQ4Q0U4NUQ5Q0Q2RDAwMDhDQUZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0Q0NCRjU1QUExRDI1Q0JB
MjBCRDhDRTg1RDlDRDZEMDAwOENBRkUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JON3FKeG1vN2VHQzFqMzU4UThSQjNuWENKWDMyRVlNNEJ4NENhNkJLeXBVLzIv
MzQzNTJlMzEzNzM1MmUzODMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzMzMw
MzgzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2vUDANBgkqhkiG9w0BAQsFAAOCAQEAYEsCfHo+6vSH
54L0wZSUIjmNZN81ApIT+g/npCGiu4YHUjBT6846a6cFHXbQWQO+8kplgK9tEwtT
msggSzesGUA3z+f2ZDfmomw8YlOwOsZDH6Un7HxeEKNGw2NCOa3LETELPicfOkBC
JoH9Z91IuHyUrv9Ao+ctNzEoPcNPa1mbAnqYHfI9uYWQUB3RshBGiQ/fJ8a1QN/H
yxTW++NVtkomkHAOTCPSR6p9YgrAZjAGC1co769VV9Mm1iWESRQli8wDiNN8lJp+
yMzbspO+bFCdxYs94Ro8h0RDNkph/nx5OgoQrWOZwEE18a3BEK6bEIuaLEhRzUZ/
L/kuwuuskg==
-----END CERTIFICATE-----
Generated at Thu Oct 31 16:45:31 2024 by rpki-client on console-ams.rpki-client.org