Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
File: 34352e3233342e342e302f32322d3332203d3e20323637333531.roa (raw, json)
Hash identifier: M32jL/Yj8i4kxg29Cg3Vbz5l07J2Yn+7IWJLnW4GXvY=
Subject key identifier: F0:1B:0A:FE:DE:BB:7E:CE:A8:FE:EE:BA:A5:16:EA:00:ED:5E:97:B2
Certificate issuer: /CN=D0949575FA1C238E3C94468378E941047564BCDE
Certificate serial: 6F8751232F6047487C56CC96F52019247E83BBBA
Authority key identifier: D0:94:95:75:FA:1C:23:8E:3C:94:46:83:78:E9:41:04:75:64:BC:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0949575FA1C238E3C94468378E941047564BCDE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
Signing time: Tue 07 Jan 2025 00:49:38 +0000
ROA not before: Tue 07 Jan 2025 00:44:38 +0000
ROA not after: Tue 06 Jan 2026 00:49:38 +0000
asID: 267351
IP address blocks: 45.234.4.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:87:51:23:2f:60:47:48:7c:56:cc:96:f5:20:19:24:7e:83:bb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0949575FA1C238E3C94468378E941047564BCDE
Validity
Not Before: Jan 7 00:44:38 2025 GMT
Not After : Jan 6 00:49:38 2026 GMT
Subject: CN=F01B0AFEDEBB7ECEA8FEEEBAA516EA00ED5E97B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f3:e0:8b:10:52:da:93:cb:6f:10:64:aa:8c:
ee:68:6d:e9:85:8a:35:13:39:f2:ee:48:99:9f:73:
20:d0:9f:09:05:e5:ed:3e:5e:04:40:10:3f:b0:b9:
e9:33:42:33:32:4a:d8:46:fe:ea:af:76:a5:63:bb:
cd:b3:fa:8d:aa:0e:1d:f9:38:56:85:d3:9b:8e:f5:
51:55:34:d7:71:f1:61:e3:47:59:0f:bd:b6:e2:52:
0e:9b:dc:5c:2f:32:18:9e:55:28:d0:21:2b:06:f8:
92:e7:cf:ae:f1:71:7d:19:96:ad:cf:37:bd:70:06:
cc:6e:64:89:2f:b1:35:0e:2e:59:a7:4e:38:2f:22:
94:f5:63:ac:4c:5f:fe:94:d9:ae:e4:1e:39:b5:db:
91:73:20:96:08:b6:51:cb:7a:97:94:ce:17:d5:9f:
ef:12:97:d4:01:24:e0:48:99:72:17:e4:d0:fc:a7:
a5:ce:3a:73:a4:38:c0:2a:4f:b4:73:cd:47:61:7e:
67:18:72:da:e1:5a:bd:da:c7:e0:db:c9:ab:90:af:
69:43:ae:e6:14:53:27:be:e7:78:60:35:0d:b5:3f:
93:f1:0d:b4:5b:74:12:d0:c7:e6:c8:fb:dd:57:7f:
5c:9c:05:b9:5a:a3:09:ab:c2:f3:56:b1:6d:ac:88:
d2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:0A:FE:DE:BB:7E:CE:A8:FE:EE:BA:A5:16:EA:00:ED:5E:97:B2
X509v3 Authority Key Identifier:
keyid:D0:94:95:75:FA:1C:23:8E:3C:94:46:83:78:E9:41:04:75:64:BC:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/D0949575FA1C238E3C94468378E941047564BCDE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0949575FA1C238E3C94468378E941047564BCDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3332203d3e20323637333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.4.0/22
Signature Algorithm: sha256WithRSAEncryption
24:6b:8a:e1:c3:a6:7b:1e:88:01:a6:7b:84:18:12:e7:e3:2f:
50:9e:7c:82:d5:11:c0:4e:79:4e:84:83:cf:0e:7f:22:cb:64:
d2:32:c0:ec:b9:6a:59:9f:d1:d9:4c:f7:34:5f:a6:fa:6a:f2:
0d:0c:d5:27:16:8b:44:b2:ca:e5:8e:35:d6:1d:ab:59:d3:b7:
8b:f2:f5:e1:7e:2d:d3:00:ab:c9:d9:61:30:15:2c:16:15:10:
de:d0:a4:8c:15:0a:ab:f5:58:22:62:b7:58:4f:43:a6:56:23:
9b:2f:71:98:98:e7:ed:d9:12:33:2f:52:45:4a:be:75:96:9e:
b3:4e:c4:a0:68:35:1b:8e:03:bb:d8:4f:26:45:61:3d:0f:93:
7b:f7:ef:1d:e2:9d:4f:fc:9c:d2:db:f4:be:ba:2a:4b:e0:b8:
7b:25:1e:ba:3d:5d:b7:4b:25:d5:f8:92:d8:7e:ea:67:2b:45:
82:46:0d:94:47:6f:62:9b:51:cc:07:df:c7:e4:dc:ff:0a:56:
23:cc:2d:50:59:22:2f:16:da:c1:db:e8:c4:c8:10:9a:90:60:
b4:35:5e:7f:d4:47:6e:9b:69:4f:74:a6:3a:b6:93:8d:59:f6:
24:e1:df:06:c8:91:25:f5:6d:a2:9e:f8:2c:96:54:78:9d:d4:
23:73:11:b9
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUb4dRIy9gR0h8VsyW9SAZJH6Du7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDA5NDk1NzVGQTFDMjM4RTNDOTQ0NjgzNzhFOTQxMDQ3
NTY0QkNERTAeFw0yNTAxMDcwMDQ0MzhaFw0yNjAxMDYwMDQ5MzhaMDMxMTAvBgNV
BAMTKEYwMUIwQUZFREVCQjdFQ0VBOEZFRUVCQUE1MTZFQTAwRUQ1RTk3QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw8+CLEFLak8tvEGSqjO5obemF
ijUTOfLuSJmfcyDQnwkF5e0+XgRAED+wuekzQjMySthG/uqvdqVju82z+o2qDh35
OFaF05uO9VFVNNdx8WHjR1kPvbbiUg6b3FwvMhieVSjQISsG+JLnz67xcX0Zlq3P
N71wBsxuZIkvsTUOLlmnTjgvIpT1Y6xMX/6U2a7kHjm125FzIJYItlHLepeUzhfV
n+8Sl9QBJOBImXIX5ND8p6XOOnOkOMAqT7RzzUdhfmcYctrhWr3ax+DbyauQr2lD
ruYUUye+53hgNQ21P5PxDbRbdBLQx+bI+91Xf1ycBblaowmrwvNWsW2siNKPAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU8BsK/t67fs6o/u66pRbqAO1el7IwHwYDVR0j
BBgwFoAU0JSVdfocI448lEaDeOlBBHVkvN4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhF
dUQvMC9EMDk0OTU3NUZBMUMyMzhFM0M5NDQ2ODM3OEU5NDEwNDc1NjRCQ0RFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QwOTQ5NTc1RkExQzIzOEUz
Qzk0NDY4Mzc4RTk0MTA0NzU2NEJDREUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1TmlmdHNVYnVwMXVUWThqamtzQVFnVXJQejExY25oUzNFODc1Y1VoRXVELzAv
MzQzNTJlMzIzMzM0MmUzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzMz
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3qBDANBgkqhkiG9w0BAQsFAAOCAQEAJGuK4cOmex6I
AaZ7hBgS5+MvUJ58gtURwE55ToSDzw5/Istk0jLA7LlqWZ/R2Uz3NF+m+mryDQzV
JxaLRLLK5Y411h2rWdO3i/L14X4t0wCrydlhMBUsFhUQ3tCkjBUKq/VYImK3WE9D
plYjmy9xmJjn7dkSMy9SRUq+dZaes07EoGg1G44Du9hPJkVhPQ+Te/fvHeKdT/yc
0tv0vroqS+C4eyUeuj1dt0sl1fiS2H7qZytFgkYNlEdvYptRzAffx+Tc/wpWI8wt
UFkiLxbawdvoxMgQmpBgtDVef9RHbptpT3SmOraTjVn2JOHfBsiRJfVtop74LJZU
eJ3UI3MRuQ==
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:33:06 2025 by rpki-client