Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa
File: 34352e3136372e36382e302f32332d3233203d3e20323637393932.roa (raw, json)
Hash identifier: 4AG67FMcfoU55pwwnWLN181kT5638GnqZaKzie6agic=
Subject key identifier: 4A:EE:B8:37:FD:06:21:B0:95:4C:79:A9:62:70:31:43:3D:81:D8:64
Certificate issuer: /CN=85221691CDF08706BEE1A2A092778521C8204123
Certificate serial: 77501DEF50822335BEE0EA78C6EE85D6BDCA61A7
Authority key identifier: 85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa
Signing time: Mon 22 Apr 2024 13:25:45 +0000
ROA not before: Mon 22 Apr 2024 13:20:45 +0000
ROA not after: Mon 21 Apr 2025 13:25:45 +0000
asID: 267992
IP address blocks: 45.167.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:50:1d:ef:50:82:23:35:be:e0:ea:78:c6:ee:85:d6:bd:ca:61:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85221691CDF08706BEE1A2A092778521C8204123
Validity
Not Before: Apr 22 13:20:45 2024 GMT
Not After : Apr 21 13:25:45 2025 GMT
Subject: CN=4AEEB837FD0621B0954C79A9627031433D81D864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:07:7d:4f:83:64:e5:ee:20:e1:03:e1:73:
82:21:7b:65:28:46:dd:da:43:c9:0b:28:39:0e:3e:
c2:7c:cc:9c:02:c7:d0:b2:8f:9f:91:de:ea:4c:a3:
6e:b6:bc:c7:bc:8c:ee:ca:1e:73:c0:7a:8e:5a:2d:
aa:08:f7:5d:34:79:0e:3a:dd:d2:85:ce:c5:9b:08:
f9:94:8a:6b:a0:db:1a:06:b4:98:32:61:ba:bc:f6:
ee:47:ea:77:72:dd:2b:4a:24:be:1d:2c:74:ff:78:
46:ce:5c:bc:25:4b:1e:f0:bc:a9:38:9c:31:c4:d4:
f8:66:c7:d9:24:3d:13:b0:7e:33:32:b4:90:69:e5:
9d:e6:7b:d7:b5:5e:4b:bf:f3:41:af:8e:78:55:01:
26:72:35:15:fd:4b:1c:29:51:04:be:13:c9:2a:b4:
4d:33:aa:0c:74:f6:ec:f2:98:a6:9f:b7:df:79:b4:
93:b7:97:5a:5f:90:1b:fd:4e:93:d5:48:bb:ea:4d:
1f:14:04:c7:0b:e5:a1:78:7e:41:62:f7:e4:af:e6:
50:37:50:42:53:24:20:91:61:97:07:ff:8b:33:c0:
fb:a0:8c:8a:71:67:43:92:d0:64:47:51:34:7e:b9:
92:23:71:00:e7:6b:be:9e:19:1f:52:f3:33:48:f3:
27:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EE:B8:37:FD:06:21:B0:95:4C:79:A9:62:70:31:43:3D:81:D8:64
X509v3 Authority Key Identifier:
keyid:85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/85221691CDF08706BEE1A2A092778521C8204123.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.68.0/23
Signature Algorithm: sha256WithRSAEncryption
20:61:54:c7:a9:f6:aa:4d:2d:71:ec:81:6e:17:e1:7b:50:e4:
0c:f0:e4:bb:aa:0d:c5:d2:f2:2a:1c:f8:76:f8:00:fe:4f:d8:
f1:7b:eb:b4:ab:f0:78:0d:1d:5a:61:84:15:95:ea:5d:e1:8b:
b2:a3:ad:75:58:20:9e:69:33:6e:8e:1d:51:11:9e:40:5c:6e:
0d:91:35:be:96:68:2b:30:68:c4:50:89:d2:f4:f6:fd:3f:03:
cf:7a:0a:cf:84:eb:99:a5:24:c4:65:c9:2b:43:20:e2:0d:7f:
dd:91:fa:37:8e:2c:e6:7f:4e:f2:4d:8c:30:17:61:c9:33:5f:
d5:fa:76:bc:d6:94:90:2f:bd:07:16:79:d4:46:20:93:cc:74:
a1:58:2f:93:4f:78:13:68:cb:65:33:da:be:26:bd:ab:3d:25:
9a:b0:fb:4b:e6:2f:fd:37:4c:09:21:ea:8c:02:75:d8:cf:b0:
e7:0f:f2:5e:37:46:0b:bb:8f:b3:84:2e:14:ff:c8:5d:23:4f:
d8:51:ef:5d:ea:3f:e1:6d:a1:95:d2:6c:34:13:fc:b7:80:f8:
b0:6a:d3:87:05:06:b5:03:14:91:3a:1e:6f:01:f0:6c:eb:57:
bb:1c:72:c3:69:b0:da:e6:8b:15:15:78:c5:0b:df:80:d6:78:
4e:ce:81:72
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUd1Ad71CCIzW+4Op4xu6F1r3KYacwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyMjE2OTFDREYwODcwNkJFRTFBMkEwOTI3Nzg1MjFD
ODIwNDEyMzAeFw0yNDA0MjIxMzIwNDVaFw0yNTA0MjExMzI1NDVaMDMxMTAvBgNV
BAMTKDRBRUVCODM3RkQwNjIxQjA5NTRDNzlBOTYyNzAzMTQzM0Q4MUQ4NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEAd9T4Nk5e4g4QPhc4Ihe2Uo
Rt3aQ8kLKDkOPsJ8zJwCx9Cyj5+R3upMo262vMe8jO7KHnPAeo5aLaoI9100eQ46
3dKFzsWbCPmUimug2xoGtJgyYbq89u5H6ndy3StKJL4dLHT/eEbOXLwlSx7wvKk4
nDHE1Phmx9kkPROwfjMytJBp5Z3me9e1Xku/80GvjnhVASZyNRX9SxwpUQS+E8kq
tE0zqgx09uzymKaft995tJO3l1pfkBv9TpPVSLvqTR8UBMcL5aF4fkFi9+Sv5lA3
UEJTJCCRYZcH/4szwPugjIpxZ0OS0GRHUTR+uZIjcQDna76eGR9S8zNI8yf7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSu64N/0GIbCVTHmpYnAxQz2B2GQwHwYDVR0j
BBgwFoAUhSIWkc3whwa+4aKgkneFIcggQSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JzaTJMNU0xUFpKdDNnTGJxbWl4MUNyUnVXQUFYWm5tRGR3cVFrTXd1
bmEvMC84NTIyMTY5MUNERjA4NzA2QkVFMUEyQTA5Mjc3ODUyMUM4MjA0MTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MjIxNjkxQ0RGMDg3MDZC
RUUxQTJBMDkyNzc4NTIxQzgyMDQxMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCc2kyTDVNMVBaSnQzZ0xicW1peDFDclJ1V0FBWFpubURkd3FRa013dW5hLzAv
MzQzNTJlMzEzNjM3MmUzNjM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzkzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLadEMA0GCSqGSIb3DQEBCwUAA4IBAQAgYVTHqfaq
TS1x7IFuF+F7UOQM8OS7qg3F0vIqHPh2+AD+T9jxe+u0q/B4DR1aYYQVlepd4Yuy
o611WCCeaTNujh1REZ5AXG4NkTW+lmgrMGjEUInS9Pb9PwPPegrPhOuZpSTEZckr
QyDiDX/dkfo3jizmf07yTYwwF2HJM1/V+na81pSQL70HFnnURiCTzHShWC+TT3gT
aMtlM9q+Jr2rPSWasPtL5i/9N0wJIeqMAnXYz7DnD/JeN0YLu4+zhC4U/8hdI0/Y
Ue9d6j/hbaGV0mw0E/y3gPiwatOHBQa1AxSROh5vAfBs61e7HHLDabDa5osVFXjF
C9+A1nhOzoFy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org