Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e372e302f32342d3234203d3e20323632353039.roa
File: 3137372e36372e372e302f32342d3234203d3e20323632353039.roa (raw, json)
Hash identifier: Fl2M8Csq+addx8HTgogL9bfqRQneTWrxrfrmwia+Vfo=
Subject key identifier: 3C:B7:84:EE:AB:E1:D1:F3:07:3E:E8:DA:0B:47:D7:93:D8:74:FE:CA
Certificate issuer: /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial: 71ED9452F2E8AF0E12A1AB1D671BB095A4D86A37
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e372e302f32342d3234203d3e20323632353039.roa
Signing time: Mon 23 Jan 2023 22:16:18 +0000
ROA not before: Mon 23 Jan 2023 22:11:18 +0000
ROA not after: Mon 22 Jan 2024 22:16:18 +0000
asID: 262509
IP address blocks: 177.67.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:ed:94:52:f2:e8:af:0e:12:a1:ab:1d:67:1b:b0:95:a4:d8:6a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
Validity
Not Before: Jan 23 22:11:18 2023 GMT
Not After : Jan 22 22:16:18 2024 GMT
Subject: CN=3CB784EEABE1D1F3073EE8DA0B47D793D874FECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:a9:7a:6c:6c:bf:b2:e0:e5:6f:44:c4:39:
d0:28:b7:ab:ad:2e:31:12:c3:f2:10:77:c2:95:10:
3f:eb:a1:35:04:93:72:66:b5:5c:34:41:2f:98:1b:
79:a8:5e:da:05:45:bd:39:60:96:45:43:31:38:b3:
e7:ca:25:0c:ee:f2:ee:95:9b:04:e4:86:bd:17:d5:
4f:82:e8:59:72:3e:16:9a:1b:e4:aa:a7:9a:1f:f8:
3c:75:7b:c7:5f:2c:d2:ee:6f:77:a4:49:6e:5a:21:
19:7f:a9:51:7e:ad:c6:c3:a3:bd:af:5b:55:84:d4:
57:83:b2:22:b0:9e:a3:91:11:91:98:17:55:06:a1:
98:7b:f6:d2:a7:f8:d5:b6:bf:46:a3:51:f5:3e:47:
57:7e:a8:63:2c:0f:74:ec:fe:d9:3a:1a:68:37:0b:
ca:66:c0:5d:6e:99:fe:c2:82:22:1e:81:69:b0:d4:
f0:09:6c:39:21:44:76:23:a2:30:58:75:69:ad:95:
29:33:bf:c0:28:8d:ad:e1:81:d1:6f:b7:33:72:05:
8d:72:db:17:21:08:3b:54:1b:72:8f:59:3f:d6:84:
25:fe:89:d3:74:d0:b6:66:9e:a8:0e:7e:8b:1f:57:
9e:09:c2:01:fb:73:48:d0:f9:ce:bb:f0:29:74:98:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B7:84:EE:AB:E1:D1:F3:07:3E:E8:DA:0B:47:D7:93:D8:74:FE:CA
X509v3 Authority Key Identifier:
keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3137372e36372e372e302f32342d3234203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.67.7.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ff:a6:1a:55:55:96:0a:ec:f9:ba:0a:96:08:b4:0e:df:97:
19:64:e9:c1:b5:dc:d3:d0:16:12:74:1d:e0:a4:fd:11:67:49:
e8:f3:88:17:53:d0:72:2a:25:dd:ba:97:67:dd:cf:10:47:46:
80:87:13:85:64:b0:2f:09:d0:b0:4e:af:b9:b2:ab:03:42:53:
04:84:ed:ab:fb:bb:a5:82:ed:1e:ef:9d:26:84:5f:16:89:8b:
7e:c1:66:69:ee:c7:b4:d0:99:f6:da:e6:12:a3:89:58:ce:55:
74:b7:af:90:30:be:da:f8:71:27:af:ca:8e:c7:21:b9:25:03:
f8:9b:5d:49:17:d1:ac:98:09:4a:fa:8f:ca:e6:d4:80:2c:11:
b7:64:1c:51:97:1d:2e:45:16:9d:ab:84:8a:f1:0d:d5:a8:e9:
27:d7:a1:d0:06:aa:dc:f7:43:c9:60:c2:a6:27:ba:65:19:88:
f8:83:97:ef:49:21:7e:bf:8e:a1:e7:a4:6c:63:71:c7:4a:d7:
df:46:a8:fc:30:da:17:f1:c2:b7:f8:c6:12:5c:95:fc:3b:3e:
ab:d0:4c:01:34:56:41:88:02:5e:c7:f1:27:61:e4:d9:af:32:
6c:e1:34:3a:9c:31:a3:3f:9c:b5:8f:ad:4a:27:68:d0:b7:46:
1a:df:0f:b9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUce2UUvLorw4SoasdZxuwlaTYajcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzRDRTg1MzUzN0QyMDUzM0Q0NTdDRDBFQTdCRDQ3RDAx
MzQ0Qzg3MDAeFw0yMzAxMjMyMjExMThaFw0yNDAxMjIyMjE2MThaMDMxMTAvBgNV
BAMTKDNDQjc4NEVFQUJFMUQxRjMwNzNFRThEQTBCNDdENzkzRDg3NEZFQ0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuiKl6bGy/suDlb0TEOdAot6ut
LjESw/IQd8KVED/roTUEk3JmtVw0QS+YG3moXtoFRb05YJZFQzE4s+fKJQzu8u6V
mwTkhr0X1U+C6FlyPhaaG+Sqp5of+Dx1e8dfLNLub3ekSW5aIRl/qVF+rcbDo72v
W1WE1FeDsiKwnqOREZGYF1UGoZh79tKn+NW2v0ajUfU+R1d+qGMsD3Ts/tk6Gmg3
C8pmwF1umf7CgiIegWmw1PAJbDkhRHYjojBYdWmtlSkzv8Aoja3hgdFvtzNyBY1y
2xchCDtUG3KPWT/WhCX+idN00LZmnqgOfosfV54JwgH7c0jQ+c678Cl0mPnPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUPLeE7qvh0fMHPujaC0fXk9h0/sowHwYDVR0j
BBgwFoAUNM6FNTfSBTPUV80Op71H0BNEyHAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQmFCWkthajNLVVdORTFwOGZob3lDTHNwbjJYOXB3TVU3UGtTMmNpQW9u
UHYvMS8zNENFODUzNTM3RDIwNTMzRDQ1N0NEMEVBN0JENDdEMDEzNDRDODcwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzM0Q0U4NTM1MzdEMjA1MzNE
NDU3Q0QwRUE3QkQ0N0QwMTM0NEM4NzAuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JhQlpLYWozS1VXTkUxcDhmaG95Q0xzcG4yWDlwd01VN1BrUzJjaUFvblB2LzEv
MzEzNzM3MmUzNjM3MmUzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzMjM1
MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEALFDBzANBgkqhkiG9w0BAQsFAAOCAQEAg/+mGlVVlgrs
+boKlgi0Dt+XGWTpwbXc09AWEnQd4KT9EWdJ6POIF1PQciol3bqXZ93PEEdGgIcT
hWSwLwnQsE6vubKrA0JTBITtq/u7pYLtHu+dJoRfFomLfsFmae7HtNCZ9trmEqOJ
WM5VdLevkDC+2vhxJ6/KjschuSUD+JtdSRfRrJgJSvqPyubUgCwRt2QcUZcdLkUW
nauEivEN1ajpJ9eh0Aaq3PdDyWDCpie6ZRmI+IOX70khfr+OoeekbGNxx0rX30ao
/DDaF/HCt/jGElyV/Ds+q9BMATRWQYgCXsfxJ2Hk2a8ybOE0Opwxoz+ctY+tSido
0LdGGt8PuQ==
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:07 2025 by rpki-client