Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32332d3234203d3e20323637333336.roa
File: 34352e3233342e31362e302f32332d3234203d3e20323637333336.roa (raw, json)
Hash identifier: WINXWVYuJ23p/mxbUAfwOqWNeStooRVaQ2fqhNU+ltQ=
Subject key identifier: 36:A9:96:67:25:BB:26:FE:D9:4B:2F:84:7E:2D:58:02:A6:70:29:A6
Certificate issuer: /CN=108C048048A7574A82BE3D8E849203BD34D76390
Certificate serial: 5E2C944A2476C915A46E5511B8CA1E02EDDEAA61
Authority key identifier: 10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32332d3234203d3e20323637333336.roa
Signing time: Fri 24 Feb 2023 13:32:14 +0000
ROA not before: Fri 24 Feb 2023 13:27:14 +0000
ROA not after: Fri 23 Feb 2024 13:32:14 +0000
asID: 267336
IP address blocks: 45.234.16.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:2c:94:4a:24:76:c9:15:a4:6e:55:11:b8:ca:1e:02:ed:de:aa:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=108C048048A7574A82BE3D8E849203BD34D76390
Validity
Not Before: Feb 24 13:27:14 2023 GMT
Not After : Feb 23 13:32:14 2024 GMT
Subject: CN=36A9966725BB26FED94B2F847E2D5802A67029A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:07:77:3e:cd:79:73:4a:de:49:2d:dd:d9:
fa:63:db:5b:98:ea:1b:9b:99:d8:8a:5d:81:f2:4a:
ec:c4:55:d0:aa:cf:6d:3d:aa:dc:7d:5d:c0:6e:89:
29:31:ea:eb:cf:ef:b4:7c:54:97:79:11:08:8e:c9:
17:da:92:f1:ac:fc:c5:74:8d:80:16:7d:34:0c:b7:
b4:ec:0c:37:4b:a1:09:ec:86:d0:69:30:31:b9:e1:
2b:6f:2e:98:a3:56:52:76:9b:62:ec:d6:22:29:06:
d1:0f:c3:e1:a3:01:b7:23:11:e6:c1:37:e0:04:55:
31:2a:a1:80:20:17:dc:8e:c8:9a:20:05:c3:f0:ce:
ec:e5:fd:a5:9b:5c:fa:64:fa:65:f4:ed:ea:d9:6b:
2d:fa:33:82:01:f9:19:75:1a:a4:d6:c8:62:f7:ef:
ed:02:cf:07:fa:ad:ca:dd:4e:57:81:11:c4:7f:a6:
fc:e0:3f:c8:03:20:aa:38:79:e7:33:8c:56:d3:80:
c0:af:1f:d9:ca:26:1f:30:2f:85:16:07:b0:37:a7:
61:f0:d6:d0:7a:91:06:94:f2:82:b4:fc:d9:91:9a:
9b:69:4e:93:cd:4c:5d:19:b3:f0:01:70:e4:cd:f7:
38:a8:5d:7f:0b:27:23:b8:c0:14:f5:23:38:b2:36:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A9:96:67:25:BB:26:FE:D9:4B:2F:84:7E:2D:58:02:A6:70:29:A6
X509v3 Authority Key Identifier:
keyid:10:8C:04:80:48:A7:57:4A:82:BE:3D:8E:84:92:03:BD:34:D7:63:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/108C048048A7574A82BE3D8E849203BD34D76390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/108C048048A7574A82BE3D8E849203BD34D76390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E71vLuB3byW8Gn2Cb4pJiRu6wMQVPEpf35mEC953HjuL/0/34352e3233342e31362e302f32332d3234203d3e20323637333336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.16.0/23
Signature Algorithm: sha256WithRSAEncryption
23:5b:97:ad:bf:57:ef:ed:f2:f1:55:d1:10:4e:58:d2:bc:16:
1a:8b:8b:d0:2f:8e:a8:4f:15:58:33:55:d9:b5:5f:cd:ea:67:
fb:8f:1c:9a:a4:df:df:c1:39:5f:60:8a:e6:4c:1b:31:c8:8e:
32:84:16:d1:ce:9a:8e:6b:d7:c6:da:b3:13:b3:56:e9:a7:75:
c4:e5:6a:a9:07:81:26:c1:61:76:e0:9f:55:a5:c9:12:0f:d6:
3e:09:eb:71:1f:ef:36:76:34:c8:77:67:a7:eb:cc:a9:cd:a8:
ba:6d:37:96:da:3e:2b:bb:d8:e9:93:ad:6c:99:e0:0b:41:af:
cc:62:2c:aa:a1:c2:8f:b8:44:c8:b6:e0:28:c2:e0:fd:c0:c9:
cf:cb:eb:f5:08:bb:0a:42:80:2a:37:0a:82:80:80:17:86:1a:
9f:2e:14:4e:a3:ff:a3:cd:a7:ac:e0:a5:f7:4c:22:96:22:95:
50:d6:8c:ca:ab:68:98:31:df:44:7f:13:7c:b0:3d:c3:fe:e1:
28:3c:07:99:c4:b5:1e:c2:d3:c9:29:97:45:51:21:f6:fb:6e:
e6:e8:d5:06:e7:35:f9:4a:76:34:24:3b:47:75:a3:58:f9:14:
21:2c:fa:bb:81:62:4e:f9:ba:35:fb:5b:a0:90:e9:03:3f:0c:
db:97:4d:be
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXiyUSiR2yRWkblURuMoeAu3eqmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTA4QzA0ODA0OEE3NTc0QTgyQkUzRDhFODQ5MjAzQkQz
NEQ3NjM5MDAeFw0yMzAyMjQxMzI3MTRaFw0yNDAyMjMxMzMyMTRaMDMxMTAvBgNV
BAMTKDM2QTk5NjY3MjVCQjI2RkVEOTRCMkY4NDdFMkQ1ODAyQTY3MDI5QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqwAd3Ps15c0reSS3d2fpj21uY
6hubmdiKXYHySuzEVdCqz209qtx9XcBuiSkx6uvP77R8VJd5EQiOyRfakvGs/MV0
jYAWfTQMt7TsDDdLoQnshtBpMDG54StvLpijVlJ2m2Ls1iIpBtEPw+GjAbcjEebB
N+AEVTEqoYAgF9yOyJogBcPwzuzl/aWbXPpk+mX07erZay36M4IB+Rl1GqTWyGL3
7+0Czwf6rcrdTleBEcR/pvzgP8gDIKo4eeczjFbTgMCvH9nKJh8wL4UWB7A3p2Hw
1tB6kQaU8oK0/NmRmptpTpPNTF0Zs/ABcOTN9zioXX8LJyO4wBT1IziyNl+9AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUNqmWZyW7Jv7ZSy+Efi1YAqZwKaYwHwYDVR0j
BBgwFoAUEIwEgEinV0qCvj2OhJIDvTTXY5AwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRTcxdkx1QjNieVc4R24yQ2I0cEppUnU2d01RVlBFcGYzNW1FQzk1M0hq
dUwvMC8xMDhDMDQ4MDQ4QTc1NzRBODJCRTNEOEU4NDkyMDNCRDM0RDc2MzkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzEwOEMwNDgwNDhBNzU3NEE4
MkJFM0Q4RTg0OTIwM0JEMzRENzYzOTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0U3MXZMdUIzYnlXOEduMkNiNHBKaVJ1NndNUVZQRXBmMzVtRUM5NTNIanVMLzAv
MzQzNTJlMzIzMzM0MmUzMTM2MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeoQMA0GCSqGSIb3DQEBCwUAA4IBAQAjW5etv1fv
7fLxVdEQTljSvBYai4vQL46oTxVYM1XZtV/N6mf7jxyapN/fwTlfYIrmTBsxyI4y
hBbRzpqOa9fG2rMTs1bpp3XE5WqpB4EmwWF24J9VpckSD9Y+CetxH+82djTId2en
68ypzai6bTeW2j4ru9jpk61smeALQa/MYiyqocKPuETItuAowuD9wMnPy+v1CLsK
QoAqNwqCgIAXhhqfLhROo/+jzaes4KX3TCKWIpVQ1ozKq2iYMd9EfxN8sD3D/uEo
PAeZxLUewtPJKZdFUSH2+27m6NUG5zX5SnY0JDtHdaNY+RQhLPq7gWJO+bo1+1ug
kOkDPwzbl02+
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:53 2025 by rpki-client