Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
File: 34352e37312e36382e302f32322d3234203d3e20323637363031.roa (raw, json)
Hash identifier: GXiHMMDcQbihBMlPhfxDhq7YAi8icXAr3FWLZCYu6sc=
Subject key identifier: 4C:24:FE:B4:BB:4B:03:17:1C:A1:6D:10:4F:CB:38:98:93:07:C8:36
Certificate issuer: /CN=5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6
Certificate serial: 3DF634D2D05163307BDE8EDEBAA702ADC017C518
Authority key identifier: 5C:BF:35:44:CC:CB:CB:D0:AC:AC:E1:3E:02:40:47:99:B3:EF:8F:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
Signing time: Wed 18 Oct 2023 17:18:58 +0000
ROA not before: Wed 18 Oct 2023 17:13:58 +0000
ROA not after: Wed 16 Oct 2024 17:18:58 +0000
asID: 267601
IP address blocks: 45.71.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f6:34:d2:d0:51:63:30:7b:de:8e:de:ba:a7:02:ad:c0:17:c5:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6
Validity
Not Before: Oct 18 17:13:58 2023 GMT
Not After : Oct 16 17:18:58 2024 GMT
Subject: CN=4C24FEB4BB4B03171CA16D104FCB38989307C836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:5c:0d:fc:64:8e:1c:0e:a8:d5:8a:2d:7d:
0d:22:3d:a1:94:79:5b:57:b8:4b:df:e8:7e:f4:f3:
29:96:bd:21:ed:85:58:f8:cf:ac:ca:83:11:91:6e:
de:25:c7:e7:41:1b:a5:06:07:02:a7:41:bc:c5:78:
77:17:ae:28:bd:44:cc:78:cd:dd:2c:94:b0:22:0a:
e2:9d:84:51:47:9c:a1:7f:33:9d:35:17:6c:2c:42:
e8:f6:a9:2a:47:b4:c4:2e:48:e5:0a:fc:85:b4:b5:
1f:c5:a9:27:c4:53:b4:e7:7b:39:94:72:88:85:a5:
c4:90:50:29:5d:2a:bc:d3:dd:b8:73:00:4a:70:56:
01:a1:9a:4f:e9:94:f5:3b:c3:9c:26:21:30:26:6a:
21:3d:07:e3:db:66:8c:bf:af:2c:b4:b7:82:e0:13:
c6:cf:69:df:49:5d:fc:f5:74:18:3a:47:a7:ee:45:
6a:b8:d2:19:9a:51:81:b0:d6:2b:72:1d:7c:fb:6f:
3f:fd:03:49:c0:fa:e4:3e:6e:f8:66:48:e8:e9:49:
65:b6:21:d1:90:c5:f7:e3:af:56:c9:79:72:32:1b:
04:b3:cc:30:d3:bc:e6:70:a0:dc:37:10:71:f3:77:
ca:d6:e0:ed:11:bf:68:f3:7b:91:72:62:1b:c4:bd:
ed:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:24:FE:B4:BB:4B:03:17:1C:A1:6D:10:4F:CB:38:98:93:07:C8:36
X509v3 Authority Key Identifier:
keyid:5C:BF:35:44:CC:CB:CB:D0:AC:AC:E1:3E:02:40:47:99:B3:EF:8F:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/0/5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CBF3544CCCBCBD0ACACE13E02404799B3EF8FF6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EQhFYczXWdSGT6rw14cKyabwXPwDus8P72nMZrUhyABr/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.68.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:72:2a:46:51:28:62:bb:91:7f:5b:fe:fc:6f:aa:5b:bf:16:
69:a0:84:c2:f6:1f:3a:2d:d0:a4:b9:99:7f:9c:d9:1e:a8:06:
be:60:55:6a:a8:d7:4d:5a:03:e3:42:65:ee:fc:0f:b0:20:ae:
00:b3:dd:f7:6c:0c:b4:52:21:02:8b:6f:49:5d:0f:10:b4:a7:
f6:6a:e5:03:d7:71:17:63:ca:38:ce:8f:d1:be:89:51:4b:ab:
05:3c:8e:f2:cf:87:ed:16:c9:ef:89:33:88:c3:ee:ac:9b:0c:
f3:e6:07:ad:7c:ca:86:3c:7a:9e:5b:1c:74:ae:1b:68:90:4e:
58:50:33:e9:40:03:e8:c9:f0:d0:0e:0e:4e:b0:7e:d5:ca:8d:
03:90:99:ef:d2:52:81:5a:0f:2b:d3:27:fa:8d:75:c6:d7:6f:
f5:3d:27:ee:3f:a7:12:a7:ad:73:d9:d7:cc:b1:ca:47:ef:b4:
74:cf:4b:38:72:5c:6b:b8:1a:26:c0:fd:8f:ca:6f:0c:e1:93:
f1:b3:34:e2:8c:c5:7e:b4:04:18:f5:07:10:ff:fb:bb:73:e6:
a5:5b:18:b5:8e:ed:3d:cb:f6:6b:65:f3:a5:e1:c8:4a:18:cd:
48:8c:ef:e7:63:0b:8c:02:64:33:4d:a6:ae:77:98:eb:48:5e:
96:f5:9d:e6
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPfY00tBRYzB73o7euqcCrcAXxRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNCRjM1NDRDQ0NCQ0JEMEFDQUNFMTNFMDI0MDQ3OTlC
M0VGOEZGNjAeFw0yMzEwMTgxNzEzNThaFw0yNDEwMTYxNzE4NThaMDMxMTAvBgNV
BAMTKDRDMjRGRUI0QkI0QjAzMTcxQ0ExNkQxMDRGQ0IzODk4OTMwN0M4MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG91wN/GSOHA6o1YotfQ0iPaGU
eVtXuEvf6H708ymWvSHthVj4z6zKgxGRbt4lx+dBG6UGBwKnQbzFeHcXrii9RMx4
zd0slLAiCuKdhFFHnKF/M501F2wsQuj2qSpHtMQuSOUK/IW0tR/FqSfEU7TnezmU
coiFpcSQUCldKrzT3bhzAEpwVgGhmk/plPU7w5wmITAmaiE9B+PbZoy/ryy0t4Lg
E8bPad9JXfz1dBg6R6fuRWq40hmaUYGw1ityHXz7bz/9A0nA+uQ+bvhmSOjpSWW2
IdGQxffjr1bJeXIyGwSzzDDTvOZwoNw3EHHzd8rW4O0Rv2jze5FyYhvEve2DAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUTCT+tLtLAxccoW0QT8s4mJMHyDYwHwYDVR0j
BBgwFoAUXL81RMzLy9CsrOE+AkBHmbPvj/YwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRVFoRlljelhXZFNHVDZydzE0Y0t5YWJ3WFB3RHVzOFA3Mm5NWnJVaHlB
QnIvMC81Q0JGMzU0NENDQ0JDQkQwQUNBQ0UxM0UwMjQwNDc5OUIzRUY4RkY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVDQkYzNTQ0Q0NDQkNCRDBB
Q0FDRTEzRTAyNDA0Nzk5QjNFRjhGRjYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VRaEZZY3pYV2RTR1Q2cncxNGNLeWFid1hQd0R1czhQNzJuTVpyVWh5QUJyLzAv
MzQzNTJlMzczMTJlMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM2
MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1HRDANBgkqhkiG9w0BAQsFAAOCAQEAnnIqRlEoYruR
f1v+/G+qW78WaaCEwvYfOi3QpLmZf5zZHqgGvmBVaqjXTVoD40Jl7vwPsCCuALPd
92wMtFIhAotvSV0PELSn9mrlA9dxF2PKOM6P0b6JUUurBTyO8s+H7RbJ74kziMPu
rJsM8+YHrXzKhjx6nlscdK4baJBOWFAz6UAD6Mnw0A4OTrB+1cqNA5CZ79JSgVoP
K9Mn+o11xtdv9T0n7j+nEqetc9nXzLHKR++0dM9LOHJca7gaJsD9j8pvDOGT8bM0
4ozFfrQEGPUHEP/7u3PmpVsYtY7tPcv2a2XzpeHIShjNSIzv52MLjAJkM02mrneY
60helvWd5g==
-----END CERTIFICATE-----
Generated at Tue Apr 22 16:14:49 2025 by rpki-client