Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37302e302f32332d3233203d3e20323637393932.roa
File: 34352e3136372e37302e302f32332d3233203d3e20323637393932.roa (raw, json)
Hash identifier: YlCOqLTuUWpin2yYd7GHu4y83Yu/Z0GW0PMnzFo+N48=
Subject key identifier: 9C:B1:0E:3F:9D:F1:8F:8D:F2:BC:58:5F:07:8E:64:45:0C:FF:FC:DC
Certificate issuer: /CN=85221691CDF08706BEE1A2A092778521C8204123
Certificate serial: 70F244EEC79BCDEA6F82A222F4AEB12FC07A6FF1
Authority key identifier: 85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37302e302f32332d3233203d3e20323637393932.roa
Signing time: Mon 22 Apr 2024 13:25:46 +0000
ROA not before: Mon 22 Apr 2024 13:20:46 +0000
ROA not after: Mon 21 Apr 2025 13:25:46 +0000
asID: 267992
IP address blocks: 45.167.70.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:f2:44:ee:c7:9b:cd:ea:6f:82:a2:22:f4:ae:b1:2f:c0:7a:6f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85221691CDF08706BEE1A2A092778521C8204123
Validity
Not Before: Apr 22 13:20:46 2024 GMT
Not After : Apr 21 13:25:46 2025 GMT
Subject: CN=9CB10E3F9DF18F8DF2BC585F078E64450CFFFCDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:9b:33:92:54:ee:ac:e8:e8:c7:28:0b:49:
6e:72:d5:53:bd:f4:ee:59:77:19:ae:c7:8b:36:88:
f6:2f:a4:1b:0f:86:8e:db:18:40:eb:6f:6f:58:96:
21:8a:3f:64:1f:e8:67:35:49:90:be:d7:99:aa:24:
04:34:7a:b4:ef:3b:d7:cd:fb:63:3a:fb:a5:f3:b4:
9d:12:2a:2c:6e:3d:08:0f:81:42:12:14:20:01:02:
be:e5:f1:2a:06:5c:e6:9f:b1:e1:97:50:54:64:e8:
7e:0d:61:34:6f:8c:9c:17:cf:6e:81:db:27:d4:ca:
d6:b2:2c:ad:64:eb:9a:79:39:68:6a:05:11:e4:ec:
98:ec:2a:7b:32:c9:1a:a2:eb:50:cc:48:00:20:23:
9a:fa:3a:db:20:e0:e8:0c:64:5e:c5:54:f6:5c:5a:
b9:70:5d:1b:10:2c:04:9a:87:a9:77:22:86:c3:bb:
9a:7f:54:28:f4:45:8b:9d:1e:c0:06:e2:e2:8d:92:
b2:a4:9c:db:41:ab:0a:15:d0:fa:42:cb:b5:80:65:
53:82:bc:80:23:b6:d1:b1:61:40:26:83:c3:5d:56:
16:4e:fa:f2:2f:8e:6c:9e:05:28:94:39:b8:b8:36:
09:25:ee:ae:00:e8:63:82:7c:65:0e:54:ad:ce:21:
b6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:B1:0E:3F:9D:F1:8F:8D:F2:BC:58:5F:07:8E:64:45:0C:FF:FC:DC
X509v3 Authority Key Identifier:
keyid:85:22:16:91:CD:F0:87:06:BE:E1:A2:A0:92:77:85:21:C8:20:41:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/85221691CDF08706BEE1A2A092778521C8204123.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85221691CDF08706BEE1A2A092778521C8204123.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37302e302f32332d3233203d3e20323637393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.70.0/23
Signature Algorithm: sha256WithRSAEncryption
70:19:bf:d8:19:ab:9b:21:b4:3d:97:35:64:b6:7b:ff:b9:db:
b1:7b:33:fb:7e:1a:8c:4f:81:1f:fc:5a:25:f9:71:3e:5c:bf:
b6:23:1c:88:5e:11:e7:e1:cb:72:02:68:c4:d6:ef:0e:5a:94:
df:08:6c:fe:9b:28:f8:54:f9:b0:ec:d4:5f:c9:bf:c9:2f:92:
12:62:f7:95:80:b7:64:81:7f:b2:15:85:cb:a6:16:4c:96:4f:
d1:b4:06:72:68:5b:40:a1:61:1c:76:d7:8e:f5:87:7f:4a:9c:
8d:0b:e6:58:36:6c:a8:fd:86:80:21:81:12:c3:05:6d:22:dc:
dc:ab:e0:47:f6:bd:99:93:34:cd:23:30:e1:f8:09:3b:f0:70:
87:d0:34:62:f6:86:1e:23:d0:90:b2:25:27:ef:e4:21:14:c4:
f5:25:76:88:b2:6a:8a:ee:42:e3:f7:2a:74:db:e2:1e:33:57:
6e:39:5f:d7:af:91:fa:96:2b:57:0e:cf:97:8e:57:c2:11:eb:
7d:82:8a:eb:83:f9:ca:1a:82:c7:84:c2:dd:a3:3f:da:2e:3e:
bc:cf:54:fa:49:fd:30:cb:02:30:bc:c3:3b:a3:4c:c0:6c:9b:
94:5c:fc:1b:5b:63:45:8e:1e:ec:3e:49:b6:4c:71:55:5c:61:
d9:cc:98:82
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcPJE7sebzepvgqIi9K6xL8B6b/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODUyMjE2OTFDREYwODcwNkJFRTFBMkEwOTI3Nzg1MjFD
ODIwNDEyMzAeFw0yNDA0MjIxMzIwNDZaFw0yNTA0MjExMzI1NDZaMDMxMTAvBgNV
BAMTKDlDQjEwRTNGOURGMThGOERGMkJDNTg1RjA3OEU2NDQ1MENGRkZDREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu0pszklTurOjoxygLSW5y1VO9
9O5Zdxmux4s2iPYvpBsPho7bGEDrb29YliGKP2Qf6Gc1SZC+15mqJAQ0erTvO9fN
+2M6+6XztJ0SKixuPQgPgUISFCABAr7l8SoGXOafseGXUFRk6H4NYTRvjJwXz26B
2yfUytayLK1k65p5OWhqBRHk7JjsKnsyyRqi61DMSAAgI5r6Otsg4OgMZF7FVPZc
WrlwXRsQLASah6l3IobDu5p/VCj0RYudHsAG4uKNkrKknNtBqwoV0PpCy7WAZVOC
vIAjttGxYUAmg8NdVhZO+vIvjmyeBSiUObi4Ngkl7q4A6GOCfGUOVK3OIbYLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnLEOP53xj43yvFhfB45kRQz//NwwHwYDVR0j
BBgwFoAUhSIWkc3whwa+4aKgkneFIcggQSMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JzaTJMNU0xUFpKdDNnTGJxbWl4MUNyUnVXQUFYWm5tRGR3cVFrTXd1
bmEvMC84NTIyMTY5MUNERjA4NzA2QkVFMUEyQTA5Mjc3ODUyMUM4MjA0MTIzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzg1MjIxNjkxQ0RGMDg3MDZC
RUUxQTJBMDkyNzc4NTIxQzgyMDQxMjMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCc2kyTDVNMVBaSnQzZ0xicW1peDFDclJ1V0FBWFpubURkd3FRa013dW5hLzAv
MzQzNTJlMzEzNjM3MmUzNzMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzkzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLadGMA0GCSqGSIb3DQEBCwUAA4IBAQBwGb/YGaub
IbQ9lzVktnv/uduxezP7fhqMT4Ef/Fol+XE+XL+2IxyIXhHn4ctyAmjE1u8OWpTf
CGz+myj4VPmw7NRfyb/JL5ISYveVgLdkgX+yFYXLphZMlk/RtAZyaFtAoWEcdteO
9Yd/SpyNC+ZYNmyo/YaAIYESwwVtItzcq+BH9r2ZkzTNIzDh+Ak78HCH0DRi9oYe
I9CQsiUn7+QhFMT1JXaIsmqK7kLj9yp02+IeM1duOV/Xr5H6litXDs+XjlfCEet9
gorrg/nKGoLHhMLdoz/aLj68z1T6Sf0wywIwvMM7o0zAbJuUXPwbW2NFjh7sPkm2
THFVXGHZzJiC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org