Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
File: 34352e3137352e37362e302f32322d3232203d3e20323638383930.roa (raw, json)
Hash identifier: fM/aVzK5wiQxB70SuZWap19iMJdXbx/MIDvhsHx+ndc=
Subject key identifier: 44:7C:EA:71:1C:54:59:40:9D:A8:1B:DD:22:AD:CC:6E:C1:1C:2A:C6
Certificate issuer: /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial: 735315BD35A9DAFF6C7AC298A5F0DA6689DAC791
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
Signing time: Tue 09 Apr 2024 19:49:52 +0000
ROA not before: Tue 09 Apr 2024 19:44:52 +0000
ROA not after: Tue 08 Apr 2025 19:49:52 +0000
asID: 268890
IP address blocks: 45.175.76.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:53:15:bd:35:a9:da:ff:6c:7a:c2:98:a5:f0:da:66:89:da:c7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Validity
Not Before: Apr 9 19:44:52 2024 GMT
Not After : Apr 8 19:49:52 2025 GMT
Subject: CN=447CEA711C5459409DA81BDD22ADCC6EC11C2AC6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:8d:d1:96:12:f3:8d:d8:80:47:76:9a:d0:
dc:8f:e5:bf:fc:36:51:88:71:ea:34:9a:31:77:e5:
d7:65:0a:f2:1e:c0:af:a7:9a:39:b5:02:fa:24:ba:
fb:d9:c9:0c:98:b9:75:9e:04:12:7c:b6:1a:7b:07:
1b:38:e2:5b:92:d2:93:23:35:93:46:a6:83:3a:e9:
a8:7a:42:bc:c0:aa:48:80:f6:3d:46:92:7c:71:4f:
b4:91:bc:2d:47:6d:79:b8:d7:cb:8f:b3:75:13:19:
0d:31:93:01:23:75:cf:b4:ba:f1:64:2c:7d:6f:98:
1b:35:69:62:76:19:c5:ff:94:07:37:d7:fa:45:ca:
b1:20:09:a6:39:ed:bb:a8:7f:b1:6d:df:52:47:a9:
ab:3c:31:3e:84:9e:90:3c:a8:b5:06:8d:92:5c:6a:
bb:9c:79:b0:d8:9a:78:c7:92:a8:15:84:50:3c:ea:
04:86:ad:05:a6:0a:74:9d:75:e0:74:b1:85:eb:04:
a7:9a:ac:a7:8a:c5:e2:34:54:c3:19:9f:86:9f:42:
5d:51:9c:90:87:21:ac:af:8c:6f:31:b0:00:2f:53:
28:bc:74:29:d9:f1:5e:2b:e9:c5:de:7d:84:fc:cc:
99:d2:22:53:12:67:ac:88:8f:0a:f4:7c:bf:78:0e:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:7C:EA:71:1C:54:59:40:9D:A8:1B:DD:22:AD:CC:6E:C1:1C:2A:C6
X509v3 Authority Key Identifier:
keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32322d3232203d3e20323638383930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.76.0/22
Signature Algorithm: sha256WithRSAEncryption
83:96:c7:f7:df:35:e3:30:e5:ec:66:7d:73:c4:0f:43:bf:33:
2a:fb:a2:3c:6d:52:03:07:3c:5f:b2:ed:27:4e:db:30:9c:e0:
4c:5a:2f:32:2b:a2:4f:26:f3:8a:66:ca:16:96:50:05:a1:d9:
2c:24:75:47:29:19:ac:00:de:9f:aa:bc:2f:f6:eb:ed:1b:a6:
bc:26:18:b4:e8:c1:97:68:61:16:23:22:17:5b:f0:48:0f:d9:
0e:c8:11:99:23:03:96:9e:b9:c0:cc:27:f6:ae:20:13:43:d2:
fa:3d:35:a2:91:41:17:ab:fd:ce:f6:d9:40:49:62:28:c5:9b:
e5:29:64:f6:0a:f2:dc:af:17:99:99:84:bc:f0:9f:f1:fa:bc:
a9:9b:47:64:e5:e7:23:b1:e5:79:9a:24:26:b5:cd:1a:be:0c:
f2:d4:86:a7:81:60:71:f2:f4:f9:c0:5e:1e:89:b2:c5:6d:58:
a6:be:23:43:fb:9a:b1:5a:a8:4c:f3:c8:08:20:5d:b9:30:35:
64:e7:0c:83:c1:79:50:f1:cc:64:ef:e8:11:68:05:c9:c0:8f:
72:ac:18:5f:fd:78:98:15:92:ae:c3:36:41:9d:ad:9a:ba:0e:
45:10:cb:08:2e:3a:9d:d4:01:36:f3:20:73:82:ce:f2:53:08:
30:6b:a0:24
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUc1MVvTWp2v9sesKYpfDaZonax5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjdEMDdCRkRCQTA0MEE2NDAwNkVGNDRERTZGNzE3NkI4
MUUxQUU1NjAeFw0yNDA0MDkxOTQ0NTJaFw0yNTA0MDgxOTQ5NTJaMDMxMTAvBgNV
BAMTKDQ0N0NFQTcxMUM1NDU5NDA5REE4MUJERDIyQURDQzZFQzExQzJBQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPcI3RlhLzjdiAR3aa0NyP5b/8
NlGIceo0mjF35ddlCvIewK+nmjm1AvokuvvZyQyYuXWeBBJ8thp7Bxs44luS0pMj
NZNGpoM66ah6QrzAqkiA9j1GknxxT7SRvC1HbXm418uPs3UTGQ0xkwEjdc+0uvFk
LH1vmBs1aWJ2GcX/lAc31/pFyrEgCaY57buof7Ft31JHqas8MT6EnpA8qLUGjZJc
arucebDYmnjHkqgVhFA86gSGrQWmCnSddeB0sYXrBKearKeKxeI0VMMZn4afQl1R
nJCHIayvjG8xsAAvUyi8dCnZ8V4r6cXefYT8zJnSIlMSZ6yIjwr0fL94DnzjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURHzqcRxUWUCdqBvdIq3MbsEcKsYwHwYDVR0j
BBgwFoAUZ9B7/boECmQAbvRN5vcXa4HhrlYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3JmVm9KNWg2TDJDc0FXcWFZdDUzOEVXOHN5SlFVN2RQb0tWZW9tcGI0
REcvMS82N0QwN0JGREJBMDQwQTY0MDA2RUY0NERFNkY3MTc2QjgxRTFBRTU2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY3RDA3QkZEQkEwNDBBNjQw
MDZFRjQ0REU2RjcxNzZCODFFMUFFNTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NyZlZvSjVoNkwyQ3NBV3FhWXQ1MzhFVzhzeUpRVTdkUG9LVmVvbXBiNERHLzEv
MzQzNTJlMzEzNzM1MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzgzOTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa9MMA0GCSqGSIb3DQEBCwUAA4IBAQCDlsf33zXj
MOXsZn1zxA9DvzMq+6I8bVIDBzxfsu0nTtswnOBMWi8yK6JPJvOKZsoWllAFodks
JHVHKRmsAN6fqrwv9uvtG6a8Jhi06MGXaGEWIyIXW/BID9kOyBGZIwOWnrnAzCf2
riATQ9L6PTWikUEXq/3O9tlASWIoxZvlKWT2CvLcrxeZmYS88J/x+rypm0dk5ecj
seV5miQmtc0avgzy1IangWBx8vT5wF4eibLFbVimviND+5qxWqhM88gIIF25MDVk
5wyDwXlQ8cxk7+gRaAXJwI9yrBhf/XiYFZKuwzZBna2aug5FEMsILjqd1AE28yBz
gs7yUwgwa6Ak
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:32 2025 by rpki-client