Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323732363730.roa
File: 34352e372e3231382e302f32342d3234203d3e20323732363730.roa (raw, json)
Hash identifier: ybjLnNT58SYy+i7zNk7OZ7MskD27Vk7/R/ObLfKxj+E=
Subject key identifier: A2:2A:18:3B:7F:AB:F7:57:AB:71:80:00:D2:AB:E2:5B:14:5B:C8:F2
Certificate issuer: /CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
Certificate serial: 4F8D783AD70080630714DC1F929DA20BD2E64E58
Authority key identifier: 7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323732363730.roa
Signing time: Wed 06 Dec 2023 12:20:43 +0000
ROA not before: Wed 06 Dec 2023 12:15:43 +0000
ROA not after: Wed 04 Dec 2024 12:20:43 +0000
asID: 272670
IP address blocks: 45.7.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:8d:78:3a:d7:00:80:63:07:14:dc:1f:92:9d:a2:0b:d2:e6:4e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47
Validity
Not Before: Dec 6 12:15:43 2023 GMT
Not After : Dec 4 12:20:43 2024 GMT
Subject: CN=A22A183B7FABF757AB718000D2ABE25B145BC8F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:99:e2:c5:78:b8:18:7c:ac:d6:8e:18:fa:84:
ec:1c:6f:9a:fa:1d:58:ca:c8:de:58:97:66:29:e3:
9e:2c:3e:54:ed:a4:25:0c:ac:7d:97:96:4d:24:34:
75:78:57:f4:c9:d3:5f:9c:14:72:b9:67:09:57:a1:
7a:ed:2b:f8:1f:85:b7:cd:79:c6:de:0d:df:79:65:
74:be:c0:26:18:cc:39:43:10:06:50:10:bf:d2:f1:
a3:ab:23:b0:b4:cd:57:54:75:5d:76:6e:f6:b9:cd:
37:1a:21:9d:16:30:9d:80:20:ed:48:dc:11:07:64:
c4:db:70:d7:64:22:c7:11:7e:08:e0:6f:9e:85:c5:
22:d2:4b:7c:0e:ef:87:a4:d7:e4:ab:28:62:4f:80:
cf:e3:b7:4c:fb:07:c5:40:a3:6e:8c:92:b7:07:b3:
5d:1d:a8:08:3c:14:74:0c:65:25:f0:c9:ae:83:cf:
96:54:77:61:dc:3f:3e:b1:a9:07:ec:39:23:e1:15:
5d:f1:36:24:62:99:01:55:f0:06:81:86:d4:c2:69:
0b:b7:ac:0e:86:54:50:c1:ab:4d:3e:2b:22:e9:71:
06:53:84:c2:35:4f:77:a9:c2:2d:bb:ca:ce:77:62:
47:f8:71:4c:27:3b:a6:e5:fa:cc:51:4b:6a:b8:08:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:2A:18:3B:7F:AB:F7:57:AB:71:80:00:D2:AB:E2:5B:14:5B:C8:F2
X509v3 Authority Key Identifier:
keyid:7C:E5:72:E6:5F:3B:DC:3D:D5:78:6B:C9:63:AA:B2:E2:D1:E3:5C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CE572E65F3BDC3DD5786BC963AAB2E2D1E35C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D39YvvchBtmJzAc3N3yFAxamNdBeDonrXak4x2q8dx2V/0/34352e372e3231382e302f32342d3234203d3e20323732363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.218.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:57:2a:b3:23:21:21:1b:5f:5c:e0:e3:cd:33:5f:af:10:1b:
e7:50:1a:56:3c:ad:2c:96:69:5e:2c:46:54:2e:f0:08:ce:5c:
f9:ee:d0:e3:77:b6:8a:ba:02:88:d6:1a:05:61:da:23:1f:87:
b7:c1:96:fc:05:cb:10:b6:3f:a0:21:c9:dc:bf:a0:97:be:23:
5b:4c:95:4f:b1:4c:0f:c0:7e:68:33:f0:f4:44:ec:bf:01:65:
8a:80:87:3d:0b:c8:92:88:6a:1c:f1:9e:6e:41:c0:e1:cc:dc:
54:ad:95:87:a5:d1:bc:ea:16:3c:4a:25:d2:7a:8a:2f:9e:10:
07:ff:6b:e9:a9:c8:36:f1:45:52:6e:49:5b:67:8b:9d:cd:bc:
cb:da:76:bb:ef:4b:66:bb:a1:c2:ef:69:7e:fb:eb:b2:fa:f3:
3c:d1:2d:c3:b8:c6:b9:fc:b2:c4:05:81:d5:d1:a5:29:c8:a0:
08:25:ce:54:c0:ab:72:c9:78:01:9f:58:5c:b8:97:66:3f:21:
26:d2:4e:56:3d:9b:c5:fe:96:61:b4:15:cc:99:3f:d1:26:14:
bf:9b:eb:8e:98:6d:cb:31:b1:e2:cd:21:d4:8a:14:91:d4:3f:
c8:b5:c2:da:db:6d:fe:4a:72:3a:4a:56:d1:92:66:18:c8:60:
7b:ce:43:f0
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUT414OtcAgGMHFNwfkp2iC9LmTlgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NFNTcyRTY1RjNCREMzREQ1Nzg2QkM5NjNBQUIyRTJE
MUUzNUM0NzAeFw0yMzEyMDYxMjE1NDNaFw0yNDEyMDQxMjIwNDNaMDMxMTAvBgNV
BAMTKEEyMkExODNCN0ZBQkY3NTdBQjcxODAwMEQyQUJFMjVCMTQ1QkM4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2meLFeLgYfKzWjhj6hOwcb5r6
HVjKyN5Yl2Yp454sPlTtpCUMrH2Xlk0kNHV4V/TJ01+cFHK5ZwlXoXrtK/gfhbfN
ecbeDd95ZXS+wCYYzDlDEAZQEL/S8aOrI7C0zVdUdV12bva5zTcaIZ0WMJ2AIO1I
3BEHZMTbcNdkIscRfgjgb56FxSLSS3wO74ek1+SrKGJPgM/jt0z7B8VAo26MkrcH
s10dqAg8FHQMZSXwya6Dz5ZUd2HcPz6xqQfsOSPhFV3xNiRimQFV8AaBhtTCaQu3
rA6GVFDBq00+KyLpcQZThMI1T3epwi27ys53Ykf4cUwnO6bl+sxRS2q4CESzAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUoioYO3+r91ercYAA0qviWxRbyPIwHwYDVR0j
BBgwFoAUfOVy5l873D3VeGvJY6qy4tHjXEcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDM5WXZ2Y2hCdG1KekFjM04zeUZBeGFtTmRCZURvbnJYYWs0eDJxOGR4
MlYvMC83Q0U1NzJFNjVGM0JEQzNERDU3ODZCQzk2M0FBQjJFMkQxRTM1QzQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdDRTU3MkU2NUYzQkRDM0RE
NTc4NkJDOTYzQUFCMkUyRDFFMzVDNDcuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0QzOVl2dmNoQnRtSnpBYzNOM3lGQXhhbU5kQmVEb25yWGFrNHgycThkeDJWLzAv
MzQzNTJlMzcyZTMyMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzczMjM2
MzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAC0H2jANBgkqhkiG9w0BAQsFAAOCAQEAq1cqsyMhIRtf
XODjzTNfrxAb51AaVjytLJZpXixGVC7wCM5c+e7Q43e2iroCiNYaBWHaIx+Ht8GW
/AXLELY/oCHJ3L+gl74jW0yVT7FMD8B+aDPw9ETsvwFlioCHPQvIkohqHPGebkHA
4czcVK2Vh6XRvOoWPEol0nqKL54QB/9r6anINvFFUm5JW2eLnc28y9p2u+9LZruh
wu9pfvvrsvrzPNEtw7jGufyyxAWB1dGlKcigCCXOVMCrcsl4AZ9YXLiXZj8hJtJO
Vj2bxf6WYbQVzJk/0SYUv5vrjphtyzGx4s0h1IoUkdQ/yLXC2ttt/kpyOkpW0ZJm
GMhge85D8A==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:39 2025 by rpki-client