Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134372e302f32342d3234203d3e20323638313937.roa
File: 34352e3233352e3134372e302f32342d3234203d3e20323638313937.roa (raw, json)
Hash identifier: ENQsP+mIGTTneK+d33jmmD0MCCJgpGx3ctxrvRVpGIo=
Subject key identifier: 40:A8:1D:15:55:90:0D:33:5B:6F:CA:E8:29:BD:EA:6B:B3:89:D3:2F
Certificate issuer: /CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Certificate serial: 1B7692AE33619C124D6A08792BB21056B1E00D57
Authority key identifier: BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134372e302f32342d3234203d3e20323638313937.roa
Signing time: Mon 02 Dec 2024 22:55:56 +0000
ROA not before: Mon 02 Dec 2024 22:50:56 +0000
ROA not after: Mon 01 Dec 2025 22:55:56 +0000
asID: 268197
IP address blocks: 45.235.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:76:92:ae:33:61:9c:12:4d:6a:08:79:2b:b2:10:56:b1:e0:0d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDFF256F0AD0E81FD186456828CFF572637DF2E5
Validity
Not Before: Dec 2 22:50:56 2024 GMT
Not After : Dec 1 22:55:56 2025 GMT
Subject: CN=40A81D1555900D335B6FCAE829BDEA6BB389D32F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:ee:10:30:de:9d:4a:d6:76:43:60:44:3a:
ad:e8:04:93:4c:54:34:65:4e:2d:17:16:d4:0c:b7:
a6:da:f5:60:92:59:2f:93:6e:c7:4f:26:a8:46:4c:
52:c3:c2:f5:e8:6c:03:43:10:94:da:92:9a:aa:b9:
10:af:bd:00:ef:8c:c5:14:4a:6a:35:d4:58:ba:d9:
1b:56:f8:fe:5c:f1:ae:76:40:9e:92:6a:f5:28:9a:
5e:7f:04:83:59:67:df:5a:2d:19:64:07:c1:2d:d3:
3b:c7:81:dc:8c:b5:b1:a3:a0:63:dd:05:d5:c5:83:
8c:bf:ed:b5:ee:70:b9:9b:da:b5:3e:a0:44:bd:bf:
65:74:dd:1f:cd:dc:0e:52:a9:0a:d7:0a:1d:b6:5c:
2b:a5:57:64:dc:f0:fe:59:68:9e:a8:67:c0:e3:d2:
2b:ef:cb:f5:2e:fb:d5:37:8b:62:78:1c:81:c2:ce:
45:8c:46:73:d7:60:58:87:5a:fb:42:0b:3f:27:48:
15:14:b1:69:c8:83:7d:81:39:db:d9:15:7f:31:d4:
cc:b0:e1:46:e8:de:bf:69:c1:b5:4c:67:3b:5c:9f:
5c:73:13:cf:34:4a:41:57:ff:a1:18:9c:ed:49:26:
fc:4d:2f:53:fd:65:23:ad:db:00:89:00:be:3b:23:
55:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:1D:15:55:90:0D:33:5B:6F:CA:E8:29:BD:EA:6B:B3:89:D3:2F
X509v3 Authority Key Identifier:
keyid:BD:FF:25:6F:0A:D0:E8:1F:D1:86:45:68:28:CF:F5:72:63:7D:F2:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/BDFF256F0AD0E81FD186456828CFF572637DF2E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDFF256F0AD0E81FD186456828CFF572637DF2E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BP2oeZsCbfzfMmga5fx4TfSV1RAwAkTHUPfoermJ62n6/0/34352e3233352e3134372e302f32342d3234203d3e20323638313937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.147.0/24
Signature Algorithm: sha256WithRSAEncryption
65:15:14:6d:f3:39:48:c3:d0:36:3d:d2:4a:8b:d1:0d:7f:11:
3a:23:2c:e1:d7:4c:e8:af:b8:58:5d:32:ae:76:91:18:42:8c:
32:b4:f0:4c:1b:3c:69:ad:77:23:9d:dc:74:2d:b3:48:c1:cd:
22:ee:02:32:fc:bd:3d:26:3c:6c:52:e4:cb:ab:5b:b9:fa:4b:
2d:4f:50:62:33:56:3d:b3:37:df:f4:58:0b:2c:6d:8c:e5:eb:
35:d7:66:83:6c:d6:c5:59:67:bd:d1:4e:be:5f:5b:7d:65:ac:
d0:1d:29:88:05:62:9e:3b:2e:17:97:3b:1d:e9:a9:52:9a:1c:
05:ff:4a:f1:c8:cb:47:38:ad:83:56:21:58:f5:e3:ad:b5:bb:
aa:b8:fc:e7:9e:00:1a:1a:b3:3f:c8:55:db:12:76:89:a9:5d:
1f:dd:4a:1a:4e:b8:fc:2b:07:fe:46:75:64:d2:d5:97:85:d4:
27:05:f6:9e:1b:9d:60:32:59:a0:e9:84:a6:25:8c:fd:48:07:
0e:49:2d:5b:b8:66:c4:24:d3:90:28:6a:c9:98:31:c5:24:4e:
3d:56:7b:2e:9a:84:bb:20:50:f4:b3:c7:d2:eb:50:fa:e6:30:
f9:cc:3e:7e:b2:c0:46:4a:82:e3:0c:e5:56:58:15:27:7d:f1:
7c:f8:59:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUG3aSrjNhnBJNagh5K7IQVrHgDVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGRjI1NkYwQUQwRTgxRkQxODY0NTY4MjhDRkY1NzI2
MzdERjJFNTAeFw0yNDEyMDIyMjUwNTZaFw0yNTEyMDEyMjU1NTZaMDMxMTAvBgNV
BAMTKDQwQTgxRDE1NTU5MDBEMzM1QjZGQ0FFODI5QkRFQTZCQjM4OUQzMkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyuO4QMN6dStZ2Q2BEOq3oBJNM
VDRlTi0XFtQMt6ba9WCSWS+TbsdPJqhGTFLDwvXobANDEJTakpqquRCvvQDvjMUU
Smo11Fi62RtW+P5c8a52QJ6SavUoml5/BINZZ99aLRlkB8Et0zvHgdyMtbGjoGPd
BdXFg4y/7bXucLmb2rU+oES9v2V03R/N3A5SqQrXCh22XCulV2Tc8P5ZaJ6oZ8Dj
0ivvy/Uu+9U3i2J4HIHCzkWMRnPXYFiHWvtCCz8nSBUUsWnIg32BOdvZFX8x1Myw
4Ubo3r9pwbVMZztcn1xzE880SkFX/6EYnO1JJvxNL1P9ZSOt2wCJAL47I1UtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUQKgdFVWQDTNbb8roKb3qa7OJ0y8wHwYDVR0j
BBgwFoAUvf8lbwrQ6B/RhkVoKM/1cmN98uUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQlAyb2Vac0NiZnpmTW1nYTVmeDRUZlNWMVJBd0FrVEhVUGZvZXJtSjYy
bjYvMC9CREZGMjU2RjBBRDBFODFGRDE4NjQ1NjgyOENGRjU3MjYzN0RGMkU1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERkYyNTZGMEFEMEU4MUZE
MTg2NDU2ODI4Q0ZGNTcyNjM3REYyRTUuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JQMm9lWnNDYmZ6Zk1tZ2E1Zng0VGZTVjFSQXdBa1RIVVBmb2VybUo2Mm42LzAv
MzQzNTJlMzIzMzM1MmUzMTM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt65MwDQYJKoZIhvcNAQELBQADggEBAGUVFG3z
OUjD0DY90kqL0Q1/ETojLOHXTOivuFhdMq52kRhCjDK08EwbPGmtdyOd3HQts0jB
zSLuAjL8vT0mPGxS5MurW7n6Sy1PUGIzVj2zN9/0WAssbYzl6zXXZoNs1sVZZ73R
Tr5fW31lrNAdKYgFYp47LheXOx3pqVKaHAX/SvHIy0c4rYNWIVj14621u6q4/Oee
ABoasz/IVdsSdompXR/dShpOuPwrB/5GdWTS1ZeF1CcF9p4bnWAyWaDphKYljP1I
Bw5JLVu4ZsQk05AoasmYMcUkTj1Wey6ahLsgUPSzx9LrUPrmMPnMPn6ywEZKguMM
5VZYFSd98Xz4WV8=
-----END CERTIFICATE-----
Generated at Wed Apr 16 08:36:03 2025 by rpki-client