Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233362e302f32342d3234203d3e20323637313736.roa
File: 34352e3233302e3233362e302f32342d3234203d3e20323637313736.roa (raw, json)
Hash identifier: DlB4NdpzpQ6UWgKbdaLgdHkQoRQ5/D4MQOvYF718Wdo=
Subject key identifier: A3:5A:47:FD:D7:D1:72:13:75:7C:0E:78:0C:6F:B8:29:66:2F:7A:F0
Certificate issuer: /CN=5EA554640E24C8A21AF8DE1A497FDC6F9592F374
Certificate serial: 3ED38B6A64F744BD8D91CA45AAA6174C9565B15A
Authority key identifier: 5E:A5:54:64:0E:24:C8:A2:1A:F8:DE:1A:49:7F:DC:6F:95:92:F3:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233362e302f32342d3234203d3e20323637313736.roa
Signing time: Fri 13 Oct 2023 19:57:03 +0000
ROA not before: Fri 13 Oct 2023 19:52:03 +0000
ROA not after: Fri 11 Oct 2024 19:57:03 +0000
asID: 267176
IP address blocks: 45.230.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:d3:8b:6a:64:f7:44:bd:8d:91:ca:45:aa:a6:17:4c:95:65:b1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EA554640E24C8A21AF8DE1A497FDC6F9592F374
Validity
Not Before: Oct 13 19:52:03 2023 GMT
Not After : Oct 11 19:57:03 2024 GMT
Subject: CN=A35A47FDD7D17213757C0E780C6FB829662F7AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:91:fa:4a:e3:ab:a4:b5:ed:ae:48:8a:ee:
76:53:9f:4b:27:81:40:8f:73:9d:a8:45:ea:ae:58:
53:bf:b1:33:cd:aa:2e:31:6a:09:12:f9:07:4c:19:
99:f9:25:20:63:b0:ee:bf:27:05:84:0e:db:2c:60:
17:5d:b9:11:1c:d7:2a:96:bb:0e:0c:82:1c:2f:07:
cd:7a:5c:87:d9:8b:df:31:f5:bd:24:72:14:3e:e6:
34:49:21:c5:19:f6:ca:2a:41:b8:8e:23:17:f5:63:
af:99:37:4e:fb:36:05:0e:3f:63:15:e6:63:e9:0b:
a8:c9:9a:2e:c1:63:36:dc:ff:aa:62:e4:30:3b:a5:
c7:4e:b7:13:39:15:1c:98:73:8a:ae:4a:9c:35:75:
4f:c5:b2:de:50:00:af:7a:d7:02:92:7b:36:fd:78:
c5:79:5b:98:74:e0:92:b7:81:53:96:df:79:06:77:
18:8b:be:f1:b1:17:2c:4a:72:25:a4:ea:e3:9c:56:
67:18:2a:f1:c0:2a:3c:15:ac:73:d9:98:8b:fa:60:
6f:75:e0:80:78:38:89:03:b4:1b:d9:e1:1e:42:4d:
e8:c7:84:65:f0:84:9f:90:fd:62:67:93:eb:6e:6a:
34:0d:e8:45:fe:6b:92:6c:ec:61:d0:e7:9f:1f:78:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5A:47:FD:D7:D1:72:13:75:7C:0E:78:0C:6F:B8:29:66:2F:7A:F0
X509v3 Authority Key Identifier:
keyid:5E:A5:54:64:0E:24:C8:A2:1A:F8:DE:1A:49:7F:DC:6F:95:92:F3:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233362e302f32342d3234203d3e20323637313736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.236.0/24
Signature Algorithm: sha256WithRSAEncryption
42:4d:f3:5c:d9:fe:e4:c0:fd:c3:d6:9f:17:ad:f9:1c:b3:3a:
a0:fc:91:79:bd:47:86:e4:85:a1:e0:4e:52:94:01:51:e7:17:
77:dc:90:a4:41:73:15:5c:1f:9d:6f:14:bb:b6:2a:14:42:b0:
49:ff:9f:54:fb:b0:7b:57:b1:d4:a4:ba:40:aa:5b:79:83:a4:
75:03:09:28:41:fc:01:0d:fd:f8:d7:6b:a5:3d:1d:92:65:e1:
8f:6f:13:cc:eb:b8:06:a4:bd:a1:b2:ea:d1:20:2d:f0:d6:7c:
3e:7a:51:fd:2b:10:6c:47:3a:ca:87:c9:9a:0d:49:43:d6:61:
c6:0d:e4:16:34:be:66:e6:98:4c:6a:94:94:5c:42:c6:79:fa:
00:aa:47:2f:26:be:3b:2e:39:04:ad:c2:05:31:39:2c:a4:0e:
b2:ff:23:f7:eb:ce:d3:e8:7c:9b:60:0c:54:00:90:51:08:72:
1f:67:2a:73:95:4b:24:45:c2:08:58:e4:57:0d:ff:3e:63:94:
f2:46:4c:f2:47:d6:24:1b:10:74:52:0a:22:d6:14:a4:7e:6f:
ce:df:ca:f7:b9:68:09:25:c1:d8:9d:78:35:39:36:2a:66:12:
e7:f4:04:f9:41:52:04:72:82:bc:ae:e1:ff:65:c8:e0:f5:d2:
fa:ab:fb:6e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUPtOLamT3RL2NkcpFqqYXTJVlsVowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUVBNTU0NjQwRTI0QzhBMjFBRjhERTFBNDk3RkRDNkY5
NTkyRjM3NDAeFw0yMzEwMTMxOTUyMDNaFw0yNDEwMTExOTU3MDNaMDMxMTAvBgNV
BAMTKEEzNUE0N0ZERDdEMTcyMTM3NTdDMEU3ODBDNkZCODI5NjYyRjdBRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLT5H6SuOrpLXtrkiK7nZTn0sn
gUCPc52oRequWFO/sTPNqi4xagkS+QdMGZn5JSBjsO6/JwWEDtssYBdduREc1yqW
uw4MghwvB816XIfZi98x9b0kchQ+5jRJIcUZ9soqQbiOIxf1Y6+ZN077NgUOP2MV
5mPpC6jJmi7BYzbc/6pi5DA7pcdOtxM5FRyYc4quSpw1dU/Fst5QAK961wKSezb9
eMV5W5h04JK3gVOW33kGdxiLvvGxFyxKciWk6uOcVmcYKvHAKjwVrHPZmIv6YG91
4IB4OIkDtBvZ4R5CTejHhGXwhJ+Q/WJnk+tuajQN6EX+a5Js7GHQ558feBgzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUo1pH/dfRchN1fA54DG+4KWYvevAwHwYDVR0j
BBgwFoAUXqVUZA4kyKIa+N4aSX/cb5WS83QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnIxcmMzTnJhNzN1cDFqUjY4TXFhZDFDNEZHWFl6blFESm94dmcyazNp
NWMvMC81RUE1NTQ2NDBFMjRDOEEyMUFGOERFMUE0OTdGREM2Rjk1OTJGMzc0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVFQTU1NDY0MEUyNEM4QTIx
QUY4REUxQTQ5N0ZEQzZGOTU5MkYzNzQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JyMXJjM05yYTczdXAxalI2OE1xYWQxQzRGR1hZem5RREpveHZnMmszaTVjLzAv
MzQzNTJlMzIzMzMwMmUzMjMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzczMTM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt5uwwDQYJKoZIhvcNAQELBQADggEBAEJN81zZ
/uTA/cPWnxet+RyzOqD8kXm9R4bkhaHgTlKUAVHnF3fckKRBcxVcH51vFLu2KhRC
sEn/n1T7sHtXsdSkukCqW3mDpHUDCShB/AEN/fjXa6U9HZJl4Y9vE8zruAakvaGy
6tEgLfDWfD56Uf0rEGxHOsqHyZoNSUPWYcYN5BY0vmbmmExqlJRcQsZ5+gCqRy8m
vjsuOQStwgUxOSykDrL/I/frztPofJtgDFQAkFEIch9nKnOVSyRFwghY5FcN/z5j
lPJGTPJH1iQbEHRSCiLWFKR+b87fyve5aAklwdideDU5NipmEuf0BPlBUgRygryu
4f9lyOD10vqr+24=
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:39:06 2025 by rpki-client