Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BYMU7yLFwDS6uAehGrakw31dwV6pZ1hmos3gDM61NNjz/0/34352e37312e3233322e302f32332d3233203d3e20323637363332.roa
File: 34352e37312e3233322e302f32332d3233203d3e20323637363332.roa (raw, json)
Hash identifier: 9HHYoRrN7YWINPqYJU3kKHbcZ+4aWO8fS0I7jqm3yoU=
Subject key identifier: D2:CF:ED:47:33:86:96:0E:28:06:CA:5F:B4:64:C1:A5:AD:E2:57:89
Certificate issuer: /CN=B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3
Certificate serial: 3A762D81623C29472852A5CFE4AF712C1057F46F
Authority key identifier: B6:EC:6D:95:D5:4B:56:87:21:43:B9:FC:71:CE:9D:4A:63:08:F7:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BYMU7yLFwDS6uAehGrakw31dwV6pZ1hmos3gDM61NNjz/0/34352e37312e3233322e302f32332d3233203d3e20323637363332.roa
Signing time: Wed 21 Jun 2023 13:58:45 +0000
ROA not before: Wed 21 Jun 2023 13:53:45 +0000
ROA not after: Wed 19 Jun 2024 13:58:45 +0000
asID: 267632
IP address blocks: 45.71.232.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:76:2d:81:62:3c:29:47:28:52:a5:cf:e4:af:71:2c:10:57:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3
Validity
Not Before: Jun 21 13:53:45 2023 GMT
Not After : Jun 19 13:58:45 2024 GMT
Subject: CN=D2CFED473386960E2806CA5FB464C1A5ADE25789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2a:5e:a5:36:f1:54:ea:a1:12:d7:48:29:f0:
c4:b1:88:6a:c3:97:1a:ea:cc:95:4d:5f:57:fc:7a:
75:6f:6f:9d:a2:46:8f:b7:c9:2e:d9:69:e9:f6:54:
81:68:75:d7:da:cc:80:a0:48:8f:7e:ff:4e:1b:7b:
1b:a3:aa:06:fa:17:c0:a6:db:0f:81:bb:ab:55:d7:
ed:95:98:9c:97:69:cc:b8:f5:01:49:65:72:ac:da:
ff:8a:a1:c0:f2:a3:97:33:19:77:e6:b1:57:2d:c4:
7e:b2:61:f9:18:ea:38:f7:69:c5:ef:41:d5:e1:96:
0d:a8:4b:f1:bd:af:05:10:b2:37:90:93:6f:93:53:
e1:97:04:16:36:a5:f7:60:65:87:f8:4f:b7:01:6a:
f3:e9:27:a5:8d:5f:2c:75:ba:e8:e5:9a:89:40:36:
cb:7c:72:6d:11:f9:e9:14:3b:cc:27:fd:fe:ba:1e:
31:82:20:67:1a:aa:57:1f:a5:38:44:8f:f8:94:4c:
02:55:ae:ad:cc:1f:65:f8:fd:82:0f:5b:ba:da:da:
ba:4a:18:9f:28:45:9f:d9:62:4a:a0:64:56:db:f8:
06:ab:95:e2:b0:3a:91:f8:17:48:6a:71:9f:26:ad:
6a:29:69:b9:6a:f5:85:04:fa:24:76:a8:6c:29:ec:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:CF:ED:47:33:86:96:0E:28:06:CA:5F:B4:64:C1:A5:AD:E2:57:89
X509v3 Authority Key Identifier:
keyid:B6:EC:6D:95:D5:4B:56:87:21:43:B9:FC:71:CE:9D:4A:63:08:F7:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BYMU7yLFwDS6uAehGrakw31dwV6pZ1hmos3gDM61NNjz/0/B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B6EC6D95D54B56872143B9FC71CE9D4A6308F7F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYMU7yLFwDS6uAehGrakw31dwV6pZ1hmos3gDM61NNjz/0/34352e37312e3233322e302f32332d3233203d3e20323637363332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.232.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:74:7d:4d:28:8b:4c:b4:2f:49:0e:15:fa:94:7a:56:a4:5d:
c2:1b:5f:8d:28:63:e7:a0:5a:6b:66:2a:c8:e3:9a:5c:12:85:
94:8f:c7:ed:42:56:8d:b6:20:6d:3a:90:f4:ba:db:64:3b:3b:
54:c7:f9:58:ec:55:04:1b:d0:c9:79:8f:8e:4c:d8:45:e3:a5:
b1:3c:20:9b:e2:b5:04:09:69:92:7d:36:e6:b1:be:2b:9f:18:
fa:d7:73:d6:ee:c5:27:33:50:62:7a:3f:69:4e:81:12:68:72:
91:e1:76:2b:f1:6f:74:84:61:eb:ec:1a:ff:07:bc:84:5a:e7:
16:56:6c:b2:ab:0f:2c:76:70:14:03:ea:7d:fa:e8:7c:a9:2b:
54:95:c3:8b:f3:4c:d5:54:d2:cc:12:a8:10:53:bd:84:f3:4b:
6e:90:e9:5e:38:da:cb:f1:06:59:3c:50:5c:06:06:e6:73:6a:
52:42:66:2f:ee:5a:a6:f8:70:5b:dd:1e:5a:ee:9d:19:13:c3:
0a:36:6b:4c:2d:8b:ae:40:08:88:0c:f9:4e:cb:af:eb:c3:84:
30:8f:68:b8:0e:3e:17:0b:7e:11:29:49:11:a1:4a:55:64:b4:
b0:81:33:09:1f:f5:40:4b:6d:09:0a:83:4b:97:87:c3:1a:b0:
c5:5b:bf:02
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOnYtgWI8KUcoUqXP5K9xLBBX9G8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZFQzZEOTVENTRCNTY4NzIxNDNCOUZDNzFDRTlENEE2
MzA4RjdGMzAeFw0yMzA2MjExMzUzNDVaFw0yNDA2MTkxMzU4NDVaMDMxMTAvBgNV
BAMTKEQyQ0ZFRDQ3MzM4Njk2MEUyODA2Q0E1RkI0NjRDMUE1QURFMjU3ODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKl6lNvFU6qES10gp8MSxiGrD
lxrqzJVNX1f8enVvb52iRo+3yS7Zaen2VIFoddfazICgSI9+/04bexujqgb6F8Cm
2w+Bu6tV1+2VmJyXacy49QFJZXKs2v+KocDyo5czGXfmsVctxH6yYfkY6jj3acXv
QdXhlg2oS/G9rwUQsjeQk2+TU+GXBBY2pfdgZYf4T7cBavPpJ6WNXyx1uujlmolA
Nst8cm0R+ekUO8wn/f66HjGCIGcaqlcfpThEj/iUTAJVrq3MH2X4/YIPW7ra2rpK
GJ8oRZ/ZYkqgZFbb+AarleKwOpH4F0hqcZ8mrWopablq9YUE+iR2qGwp7HTpAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0s/tRzOGlg4oBspftGTBpa3iV4kwHwYDVR0j
BBgwFoAUtuxtldVLVochQ7n8cc6dSmMI9/MwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQllNVTd5TEZ3RFM2dUFlaEdyYWt3MzFkd1Y2cFoxaG1vczNnRE02MU5O
anovMC9CNkVDNkQ5NUQ1NEI1Njg3MjE0M0I5RkM3MUNFOUQ0QTYzMDhGN0YzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0I2RUM2RDk1RDU0QjU2ODcy
MTQzQjlGQzcxQ0U5RDRBNjMwOEY3RjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JZTVU3eUxGd0RTNnVBZWhHcmFrdzMxZHdWNnBaMWhtb3MzZ0RNNjFOTmp6LzAv
MzQzNTJlMzczMTJlMzIzMzMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzYzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLUfoMA0GCSqGSIb3DQEBCwUAA4IBAQAcdH1NKItM
tC9JDhX6lHpWpF3CG1+NKGPnoFprZirI45pcEoWUj8ftQlaNtiBtOpD0uttkOztU
x/lY7FUEG9DJeY+OTNhF46WxPCCb4rUECWmSfTbmsb4rnxj613PW7sUnM1Biej9p
ToESaHKR4XYr8W90hGHr7Br/B7yEWucWVmyyqw8sdnAUA+p9+uh8qStUlcOL80zV
VNLMEqgQU72E80tukOleONrL8QZZPFBcBgbmc2pSQmYv7lqm+HBb3R5a7p0ZE8MK
NmtMLYuuQAiIDPlOy6/rw4Qwj2i4Dj4XC34RKUkRoUpVZLSwgTMJH/VAS20JCoNL
l4fDGrDFW78C
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:01 2025 by rpki-client