Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31342e302f32332d3233203d3e20323638333436.roa
File: 34352e3233392e31342e302f32332d3233203d3e20323638333436.roa (raw, json)
Hash identifier: CQrbWyLtx+bF6QPqXUzSSqYzn1TLX2aiJ8sjIIxdWsc=
Subject key identifier: AF:36:B1:99:57:A8:6E:E0:DE:33:57:07:F3:64:87:7E:2F:9B:73:93
Certificate issuer: /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial: 1FC3327567BA7C8328BD9844F70B71D8626FFFF1
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31342e302f32332d3233203d3e20323638333436.roa
Signing time: Mon 22 May 2023 19:23:59 +0000
ROA not before: Mon 22 May 2023 19:18:59 +0000
ROA not after: Mon 20 May 2024 19:23:59 +0000
asID: 268346
IP address blocks: 45.239.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:c3:32:75:67:ba:7c:83:28:bd:98:44:f7:0b:71:d8:62:6f:ff:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Validity
Not Before: May 22 19:18:59 2023 GMT
Not After : May 20 19:23:59 2024 GMT
Subject: CN=AF36B19957A86EE0DE335707F364877E2F9B7393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2e:84:46:94:8d:e9:b2:f5:47:12:8f:7d:d9:
6b:59:f6:23:1b:f8:1d:46:e7:0c:8b:4c:a0:4b:14:
f2:be:e7:dc:90:da:33:f5:a8:44:ae:53:cb:0a:47:
cb:b9:82:6f:4d:f5:8a:22:c9:0f:c2:5f:9a:f9:bb:
11:7c:47:0b:ba:29:46:9a:77:b1:bb:43:09:84:e5:
b1:6b:17:ef:17:42:11:36:e9:fe:7b:a5:25:8c:92:
9e:26:c0:86:f7:61:6f:95:f0:fc:d6:bf:85:5c:6a:
6d:22:e7:a3:c9:af:be:23:3e:69:14:66:49:fd:1e:
db:98:2a:d4:e0:1b:d0:27:cc:94:6a:6e:2b:af:64:
b4:bb:38:18:ce:81:ec:15:61:d8:99:82:ff:35:c2:
66:56:a4:94:97:de:25:37:cb:5f:c7:00:48:ba:ae:
82:b7:ab:8a:a6:91:c1:1e:a1:c3:34:53:58:d3:c1:
80:ff:1b:2c:04:39:99:f4:13:cf:70:d9:1a:3d:38:
b1:7f:01:0d:5a:d9:bc:e1:fc:e1:e1:2c:42:38:6e:
d9:c8:6e:b2:c7:69:53:b0:15:59:3f:55:4e:52:62:
84:86:ec:1e:98:08:c1:b3:29:b6:02:d3:e6:76:e4:
9d:fd:30:0b:ce:d1:fd:68:55:3b:01:de:fa:d0:77:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:36:B1:99:57:A8:6E:E0:DE:33:57:07:F3:64:87:7E:2F:9B:73:93
X509v3 Authority Key Identifier:
keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/34352e3233392e31342e302f32332d3233203d3e20323638333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.14.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:1c:5d:81:e1:6c:32:92:97:c4:dc:1d:03:6b:c1:82:fe:a1:
7f:f8:94:52:99:ec:85:f1:8a:29:58:e1:02:4d:3a:dd:96:1d:
63:04:29:cc:50:01:f5:9d:78:18:49:ab:59:e7:35:a4:05:e9:
39:0e:ff:7e:71:7f:c5:f4:c4:70:dd:22:6e:91:e6:19:86:cb:
b0:bd:0c:df:d5:c1:73:8a:d6:82:ac:dc:4a:28:e4:5c:8b:93:
e9:1e:f8:5a:cc:4f:f2:99:49:49:44:57:35:16:62:a1:c6:e8:
81:d8:1b:98:8b:0f:4d:70:d0:d7:37:b0:ff:f4:84:54:3f:ec:
85:e0:41:14:52:c1:53:17:d5:f9:92:dc:4b:bf:db:1e:04:94:
6e:52:ac:fc:b2:80:e9:fb:11:89:5e:fa:06:5c:c1:7c:64:e5:
b3:62:9a:94:cd:9a:43:9a:ea:7d:19:55:c1:5f:e8:ed:2b:93:
46:ba:a6:46:ab:e7:6f:d8:dc:02:95:cf:f0:63:72:11:c4:1a:
22:3a:76:51:ab:ed:26:c9:2d:49:fb:15:d9:9e:fd:d0:15:85:
35:4f:96:35:29:e4:ff:6f:82:68:b5:4b:4d:16:9e:56:27:a6:
02:cc:b1:e7:3f:65:72:a7:24:30:23:61:44:04:e7:f9:0e:b8:
6d:99:22:69
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUH8MydWe6fIMovZhE9wtx2GJv//EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE0MjkwRkM5MTMwNEI1QkY4MDk5MUJFQkEwNkY5MThD
NEZBRjVBRjAeFw0yMzA1MjIxOTE4NTlaFw0yNDA1MjAxOTIzNTlaMDMxMTAvBgNV
BAMTKEFGMzZCMTk5NTdBODZFRTBERTMzNTcwN0YzNjQ4NzdFMkY5QjczOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSLoRGlI3psvVHEo992WtZ9iMb
+B1G5wyLTKBLFPK+59yQ2jP1qESuU8sKR8u5gm9N9YoiyQ/CX5r5uxF8Rwu6KUaa
d7G7QwmE5bFrF+8XQhE26f57pSWMkp4mwIb3YW+V8PzWv4Vcam0i56PJr74jPmkU
Zkn9HtuYKtTgG9AnzJRqbiuvZLS7OBjOgewVYdiZgv81wmZWpJSX3iU3y1/HAEi6
roK3q4qmkcEeocM0U1jTwYD/GywEOZn0E89w2Ro9OLF/AQ1a2bzh/OHhLEI4btnI
brLHaVOwFVk/VU5SYoSG7B6YCMGzKbYC0+Z25J39MAvO0f1oVTsB3vrQd1UZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUrzaxmVeobuDeM1cH82SHfi+bc5MwHwYDVR0j
BBgwFoAUCkKQ/JEwS1v4CZG+ugb5GMT69a8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDE3WjlMR2hEd1pyam5VTFMyZUs4TExDVnN3bXM1am1nWXNENkg2ZUJM
WmgvMC8wQTQyOTBGQzkxMzA0QjVCRjgwOTkxQkVCQTA2RjkxOEM0RkFGNUFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzBBNDI5MEZDOTEzMDRCNUJG
ODA5OTFCRUJBMDZGOTE4QzRGQUY1QUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QxN1o5TEdoRHdacmpuVUxTMmVLOExMQ1Zzd21zNWptZ1lzRDZINmVCTFpoLzAv
MzQzNTJlMzIzMzM5MmUzMTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzMzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLe8OMA0GCSqGSIb3DQEBCwUAA4IBAQB+HF2B4Wwy
kpfE3B0Da8GC/qF/+JRSmeyF8YopWOECTTrdlh1jBCnMUAH1nXgYSatZ5zWkBek5
Dv9+cX/F9MRw3SJukeYZhsuwvQzf1cFzitaCrNxKKORci5PpHvhazE/ymUlJRFc1
FmKhxuiB2BuYiw9NcNDXN7D/9IRUP+yF4EEUUsFTF9X5ktxLv9seBJRuUqz8soDp
+xGJXvoGXMF8ZOWzYpqUzZpDmup9GVXBX+jtK5NGuqZGq+dv2NwClc/wY3IRxBoi
OnZRq+0myS1J+xXZnv3QFYU1T5Y1KeT/b4JotUtNFp5WJ6YCzLHnP2VypyQwI2FE
BOf5DrhtmSJp
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:04 2025 by rpki-client