Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/34352e3233332e32382e302f32322d3234203d3e20323637323930.roa
File: 34352e3233332e32382e302f32322d3234203d3e20323637323930.roa (raw, json)
Hash identifier: 6+/VdjqeWzuGfq1WJ/6t9D3OXeMiZrR1czgS8wQf9tI=
Subject key identifier: 01:EF:E0:97:7C:47:FF:37:10:9D:9E:5C:63:45:B4:B9:E4:EC:E7:1E
Certificate issuer: /CN=4C90344E384710E55DBA9D811B8DB9699219721E
Certificate serial: 2F70094DBF23F1C9E7AEEA803976DF8C4781D13A
Authority key identifier: 4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/34352e3233332e32382e302f32322d3234203d3e20323637323930.roa
Signing time: Tue 27 Feb 2024 00:00:00 +0000
ROA not before: Mon 26 Feb 2024 23:55:00 +0000
ROA not after: Tue 25 Feb 2025 00:00:00 +0000
asID: 267290
IP address blocks: 45.233.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:70:09:4d:bf:23:f1:c9:e7:ae:ea:80:39:76:df:8c:47:81:d1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C90344E384710E55DBA9D811B8DB9699219721E
Validity
Not Before: Feb 26 23:55:00 2024 GMT
Not After : Feb 25 00:00:00 2025 GMT
Subject: CN=01EFE0977C47FF37109D9E5C6345B4B9E4ECE71E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:6b:97:a2:22:39:6f:53:4a:5f:ca:39:d3:
ba:ad:13:73:97:b7:d5:d5:ae:8f:6d:24:f5:8f:bf:
8a:eb:63:f7:cd:d3:1d:ef:f8:1a:80:ea:74:9e:c1:
b7:46:2c:45:27:46:89:dd:aa:2d:c4:8d:d4:fb:35:
89:af:f9:cc:23:16:96:36:52:0e:2d:91:81:3d:16:
b3:19:6b:f2:a7:2f:78:38:67:33:c7:0f:43:0b:5b:
e1:59:bc:60:e6:4b:7b:d9:ab:42:e1:04:44:82:28:
20:be:3b:5e:a9:5e:19:7a:4e:cb:78:18:73:30:18:
96:61:53:94:30:fa:c3:ab:fc:13:43:7c:c8:77:3d:
72:7b:10:6a:c1:ae:d4:cd:51:ef:99:d3:22:fa:b4:
d3:29:1e:49:27:2c:1c:15:d8:a5:42:0b:75:72:b3:
25:a2:fd:32:cb:2f:2c:11:a4:91:f7:be:d9:3c:0d:
88:a2:12:95:43:16:1c:bb:7c:a2:e2:c4:e7:9c:72:
d3:31:fd:a6:a3:d4:1d:9c:b4:f1:14:5f:87:e6:56:
98:80:2f:32:85:26:bf:07:22:8d:3b:4f:8c:ca:aa:
c0:87:2d:74:fd:a7:8c:a6:4f:0c:58:8e:be:a5:3b:
5f:10:fc:8a:c9:b2:f4:da:c8:38:d9:4e:b7:78:6d:
13:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:EF:E0:97:7C:47:FF:37:10:9D:9E:5C:63:45:B4:B9:E4:EC:E7:1E
X509v3 Authority Key Identifier:
keyid:4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/34352e3233332e32382e302f32322d3234203d3e20323637323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.28.0/22
Signature Algorithm: sha256WithRSAEncryption
46:63:f6:fd:54:9e:1d:a7:62:9e:b3:3f:e7:fb:da:11:97:e6:
e9:f5:40:08:79:76:5b:7b:69:6d:92:2d:a9:67:c2:a6:38:9e:
97:fb:f7:b5:72:0c:1e:d5:fa:89:88:1e:4e:fc:56:05:b6:0d:
c3:e2:fd:63:92:f4:8e:e7:24:bc:a1:87:d7:18:db:a9:9e:e5:
0d:db:01:77:e0:20:a5:95:bf:72:ae:db:cc:31:b0:20:7f:2a:
55:6b:e8:ae:03:c5:95:19:b0:3e:e8:7c:08:c1:9c:36:0f:c7:
4f:3e:78:c9:77:99:96:ae:72:b7:62:52:66:82:a3:83:3b:50:
be:f5:5e:e7:2c:9b:c9:11:b6:67:67:4f:8f:5c:a1:10:f2:8c:
f2:11:01:33:3b:22:69:bc:74:41:b8:2f:89:92:26:ea:38:29:
88:1e:c3:8f:45:ca:ad:44:95:dd:e3:11:b9:de:69:ec:fa:92:
03:25:cb:67:75:56:6e:b4:14:94:98:bd:28:d9:82:55:46:27:
9f:2d:ba:2f:3d:49:16:79:66:41:f1:8e:98:c7:61:e4:22:ac:
7e:ba:4c:81:27:08:64:59:c5:5d:4d:8a:aa:ab:db:ef:fa:8d:
81:36:c0:a5:83:73:8b:06:e7:fc:a3:e1:c1:70:8f:b7:4a:63:
ab:63:99:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUL3AJTb8j8cnnruqAOXbfjEeB0TowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEM5MDM0NEUzODQ3MTBFNTVEQkE5RDgxMUI4REI5Njk5
MjE5NzIxRTAeFw0yNDAyMjYyMzU1MDBaFw0yNTAyMjUwMDAwMDBaMDMxMTAvBgNV
BAMTKDAxRUZFMDk3N0M0N0ZGMzcxMDlEOUU1QzYzNDVCNEI5RTRFQ0U3MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaeWuXoiI5b1NKX8o507qtE3OX
t9XVro9tJPWPv4rrY/fN0x3v+BqA6nSewbdGLEUnRondqi3EjdT7NYmv+cwjFpY2
Ug4tkYE9FrMZa/KnL3g4ZzPHD0MLW+FZvGDmS3vZq0LhBESCKCC+O16pXhl6Tst4
GHMwGJZhU5Qw+sOr/BNDfMh3PXJ7EGrBrtTNUe+Z0yL6tNMpHkknLBwV2KVCC3Vy
syWi/TLLLywRpJH3vtk8DYiiEpVDFhy7fKLixOecctMx/aaj1B2ctPEUX4fmVpiA
LzKFJr8HIo07T4zKqsCHLXT9p4ymTwxYjr6lO18Q/IrJsvTayDjZTrd4bRNzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUAe/gl3xH/zcQnZ5cY0W0ueTs5x4wHwYDVR0j
BBgwFoAUTJA0TjhHEOVdup2BG425aZIZch4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ003dEJSQU5hOWE5WktKdDJCM0RUd3hneDk2MmhGOWZ0VUp3dWtnMjlY
UlkvMC80QzkwMzQ0RTM4NDcxMEU1NURCQTlEODExQjhEQjk2OTkyMTk3MjFFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzRDOTAzNDRFMzg0NzEwRTU1
REJBOUQ4MTFCOERCOTY5OTIxOTcyMUUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NNN3RCUkFOYTlhOVpLSnQyQjNEVHd4Z3g5NjJoRjlmdFVKd3VrZzI5WFJZLzAv
MzQzNTJlMzIzMzMzMmUzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLekcMA0GCSqGSIb3DQEBCwUAA4IBAQBGY/b9VJ4d
p2Kesz/n+9oRl+bp9UAIeXZbe2ltki2pZ8KmOJ6X+/e1cgwe1fqJiB5O/FYFtg3D
4v1jkvSO5yS8oYfXGNupnuUN2wF34CCllb9yrtvMMbAgfypVa+iuA8WVGbA+6HwI
wZw2D8dPPnjJd5mWrnK3YlJmgqODO1C+9V7nLJvJEbZnZ0+PXKEQ8ozyEQEzOyJp
vHRBuC+JkibqOCmIHsOPRcqtRJXd4xG53mns+pIDJctndVZutBSUmL0o2YJVRief
LbovPUkWeWZB8Y6Yx2HkIqx+ukyBJwhkWcVdTYqqq9vv+o2BNsClg3OLBuf8o+HB
cI+3SmOrY5l+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org