Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32322d3332203d3e20323634333836.roa
File: 34352e362e3234302e302f32322d3332203d3e20323634333836.roa (raw, json)
Hash identifier: +AOHyHTW8IWPNHxJ/tUe7AXgXwZU8DbsRD5YLVXcSb4=
Subject key identifier: 47:61:F8:58:24:2B:F3:EC:E5:C4:EB:30:24:65:F1:A5:C0:FB:0C:4B
Certificate issuer: /CN=14AF8D7325C9E34937575EE5488F2AD3A95F048B
Certificate serial: 133D70D6FF3107C7FAE4BBCF1F63D938AF4B9591
Authority key identifier: 14:AF:8D:73:25:C9:E3:49:37:57:5E:E5:48:8F:2A:D3:A9:5F:04:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32322d3332203d3e20323634333836.roa
Signing time: Tue 09 Jan 2024 12:24:01 +0000
ROA not before: Tue 09 Jan 2024 12:19:01 +0000
ROA not after: Tue 07 Jan 2025 12:24:01 +0000
asID: 264386
IP address blocks: 45.6.240.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:3d:70:d6:ff:31:07:c7:fa:e4:bb:cf:1f:63:d9:38:af:4b:95:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14AF8D7325C9E34937575EE5488F2AD3A95F048B
Validity
Not Before: Jan 9 12:19:01 2024 GMT
Not After : Jan 7 12:24:01 2025 GMT
Subject: CN=4761F858242BF3ECE5C4EB302465F1A5C0FB0C4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:09:1e:79:83:11:22:52:b5:0d:65:62:b5:fa:
1c:1c:77:36:48:5a:be:c3:35:a6:ff:5e:de:4f:80:
ac:5d:c6:ca:96:dc:36:df:88:a7:99:21:5e:16:27:
2e:df:22:dc:17:1c:ab:0d:71:05:7a:b7:c4:84:14:
29:ca:dc:40:6a:78:a3:0b:2c:5f:f3:26:cc:42:97:
c5:89:02:d6:f4:d1:7a:2e:9e:8b:28:5b:3f:05:c6:
50:06:93:3d:ec:e9:db:4b:1c:92:5b:44:59:fc:33:
65:2a:8e:d9:0f:0c:20:6c:77:4f:38:b7:31:35:a0:
5d:01:2a:b4:ad:bc:2d:e9:01:d4:29:8d:6c:b3:db:
d4:b6:ff:05:4c:90:53:8e:f9:38:3f:46:a0:d4:ae:
1e:71:98:05:0e:70:40:92:04:2f:29:5d:42:65:8e:
ab:d8:7e:4c:00:4f:41:de:5a:1d:d7:e1:8f:1e:0c:
bd:a6:9d:ff:4c:0f:8d:ff:53:2a:b3:f8:e4:6b:c2:
e3:45:6f:82:7c:ca:f9:89:0d:6e:f4:ae:1d:6f:c9:
ac:9c:2c:ba:17:dc:0f:9c:69:16:4a:7d:d1:60:f2:
74:f5:59:f4:c5:f8:92:bd:27:d8:9b:e3:e8:65:50:
84:1f:88:e9:c8:c4:34:3e:c6:49:4d:a8:02:58:df:
18:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:61:F8:58:24:2B:F3:EC:E5:C4:EB:30:24:65:F1:A5:C0:FB:0C:4B
X509v3 Authority Key Identifier:
keyid:14:AF:8D:73:25:C9:E3:49:37:57:5E:E5:48:8F:2A:D3:A9:5F:04:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/14AF8D7325C9E34937575EE5488F2AD3A95F048B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DC2HkqRBtZQPFqnGrMFkDZLB52U1wyDk8hDzeAenLzjb/0/34352e362e3234302e302f32322d3332203d3e20323634333836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.240.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:b8:82:6e:ee:55:0f:d2:4c:f3:4b:c6:56:35:95:b0:14:7f:
b0:9d:c3:e9:fc:82:0b:3e:19:6d:64:86:56:36:13:40:17:94:
7d:48:cf:ff:12:51:fb:1e:50:28:76:b6:88:8c:0a:a8:f9:78:
b9:04:a8:1d:8c:27:80:c9:eb:bc:f7:7d:cc:58:d6:6d:a6:46:
43:fc:be:5c:58:1b:71:54:7a:cb:73:a2:29:22:40:38:9e:79:
a3:bf:a4:59:b4:94:9f:fd:09:b6:94:e8:69:aa:82:8e:0d:f1:
ad:08:7f:80:ea:5e:52:30:59:52:59:ee:5f:b2:8b:71:d9:9e:
f8:37:40:e5:3c:b2:d8:93:15:09:2b:95:96:3a:25:07:50:0b:
04:c8:c0:4b:cd:a4:44:15:33:d2:c2:8f:a5:47:b0:fe:9e:04:
ff:4c:4c:e6:47:81:80:f0:72:16:55:c2:50:49:cd:00:11:09:
46:bc:4d:9d:05:d2:8d:95:66:7a:26:bd:66:c5:0c:ca:3c:83:
7e:8f:79:ae:12:f4:1d:51:ff:bb:f8:21:e0:0e:49:96:d6:fd:
2e:b1:0d:36:7a:e0:8d:71:f5:30:ea:13:d0:b8:1a:e9:c2:e3:
79:eb:fb:b1:11:90:ea:49:5a:a7:a0:ef:5e:a5:34:fa:c4:60:
af:32:e0:f1
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEz1w1v8xB8f65LvPH2PZOK9LlZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTRBRjhENzMyNUM5RTM0OTM3NTc1RUU1NDg4RjJBRDNB
OTVGMDQ4QjAeFw0yNDAxMDkxMjE5MDFaFw0yNTAxMDcxMjI0MDFaMDMxMTAvBgNV
BAMTKDQ3NjFGODU4MjQyQkYzRUNFNUM0RUIzMDI0NjVGMUE1QzBGQjBDNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcCR55gxEiUrUNZWK1+hwcdzZI
Wr7DNab/Xt5PgKxdxsqW3DbfiKeZIV4WJy7fItwXHKsNcQV6t8SEFCnK3EBqeKML
LF/zJsxCl8WJAtb00XounosoWz8FxlAGkz3s6dtLHJJbRFn8M2UqjtkPDCBsd084
tzE1oF0BKrStvC3pAdQpjWyz29S2/wVMkFOO+Tg/RqDUrh5xmAUOcECSBC8pXUJl
jqvYfkwAT0HeWh3X4Y8eDL2mnf9MD43/Uyqz+ORrwuNFb4J8yvmJDW70rh1vyayc
LLoX3A+caRZKfdFg8nT1WfTF+JK9J9ib4+hlUIQfiOnIxDQ+xklNqAJY3xhjAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUR2H4WCQr8+zlxOswJGXxpcD7DEswHwYDVR0j
BBgwFoAUFK+NcyXJ40k3V17lSI8q06lfBIswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vREMySGtxUkJ0WlFQRnFuR3JNRmtEWkxCNTJVMXd5RGs4aER6ZUFlbkx6
amIvMC8xNEFGOEQ3MzI1QzlFMzQ5Mzc1NzVFRTU0ODhGMkFEM0E5NUYwNDhCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzE0QUY4RDczMjVDOUUzNDkz
NzU3NUVFNTQ4OEYyQUQzQTk1RjA0OEIuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RDMkhrcVJCdFpRUEZxbkdyTUZrRFpMQjUyVTF3eURrOGhEemVBZW5MempiLzAv
MzQzNTJlMzYyZTMyMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNDMz
MzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi0G8DANBgkqhkiG9w0BAQsFAAOCAQEAHLiCbu5VD9JM
80vGVjWVsBR/sJ3D6fyCCz4ZbWSGVjYTQBeUfUjP/xJR+x5QKHa2iIwKqPl4uQSo
HYwngMnrvPd9zFjWbaZGQ/y+XFgbcVR6y3OiKSJAOJ55o7+kWbSUn/0JtpToaaqC
jg3xrQh/gOpeUjBZUlnuX7KLcdme+DdA5Tyy2JMVCSuVljolB1ALBMjAS82kRBUz
0sKPpUew/p4E/0xM5keBgPByFlXCUEnNABEJRrxNnQXSjZVmeia9ZsUMyjyDfo95
rhL0HVH/u/gh4A5Jltb9LrENNnrgjXH1MOoT0Lga6cLjeev7sRGQ6klap6DvXqU0
+sRgrzLg8Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:42 2025 by rpki-client