Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35342e302f32332d3233203d3e2031.roa
File: 34352e3136362e35342e302f32332d3233203d3e2031.roa (raw, json)
Hash identifier: 9i7WCRMdgDfmZpS+xk6LBq5ULiiHfGUVlZ/Tdm8qBlA=
Subject key identifier: 89:BB:4C:F2:A0:A8:5D:63:E9:17:9F:C2:70:F0:51:A4:C2:A7:3C:95
Certificate issuer: /CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Certificate serial: 417E6F664458F7A25BB8CACE5157268FA99696F9
Authority key identifier: 7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35342e302f32332d3233203d3e2031.roa
Signing time: Thu 04 Apr 2024 09:33:03 +0000
ROA not before: Thu 04 Apr 2024 09:28:03 +0000
ROA not after: Thu 03 Apr 2025 09:33:03 +0000
asID: 1
IP address blocks: 45.166.54.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7e:6f:66:44:58:f7:a2:5b:b8:ca:ce:51:57:26:8f:a9:96:96:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CD32787AF54793C40E640D59B41C4E38532BB54
Validity
Not Before: Apr 4 09:28:03 2024 GMT
Not After : Apr 3 09:33:03 2025 GMT
Subject: CN=89BB4CF2A0A85D63E9179FC270F051A4C2A73C95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0a:ca:2b:d1:71:01:46:f9:82:d7:2d:e9:ef:
28:3a:99:2a:9c:3e:30:c2:88:79:d8:51:b9:0a:67:
e2:29:bd:59:99:46:85:15:41:ec:01:6c:ad:53:ce:
66:f9:d8:94:cc:a6:c9:f4:61:46:f7:e6:0c:a0:1e:
e8:9d:0f:66:15:2d:b6:74:ae:80:78:8b:d3:51:f4:
d6:13:0d:e0:90:82:bb:42:e1:9b:86:7d:28:c6:3e:
58:0d:82:6d:7a:c8:70:92:3d:16:5b:eb:4f:35:9b:
46:b2:0b:06:a1:d6:ef:1a:29:4c:bc:e6:7b:37:e4:
5e:ee:ff:d9:ff:64:e0:12:ca:bc:89:32:e0:b8:d9:
31:c9:33:22:70:76:82:9c:77:00:92:3c:92:21:c0:
37:d6:1f:17:cd:68:5e:41:8b:0a:7a:7e:28:bb:09:
98:67:84:1f:37:3c:6f:32:b9:2a:1a:45:c2:af:86:
b9:74:e8:c9:f1:2e:a0:f7:33:43:9a:58:f7:9d:33:
2d:93:98:08:1e:36:0f:d3:08:ae:8f:bd:8a:94:7c:
56:82:d5:bf:c0:d6:93:aa:0a:5c:74:52:6b:36:a4:
c8:23:53:7c:7c:dd:2a:ca:3f:f3:3c:97:a6:ee:c4:
6f:04:d6:60:2e:12:28:7a:c5:0b:3c:ae:34:88:b9:
18:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BB:4C:F2:A0:A8:5D:63:E9:17:9F:C2:70:F0:51:A4:C2:A7:3C:95
X509v3 Authority Key Identifier:
keyid:7C:D3:27:87:AF:54:79:3C:40:E6:40:D5:9B:41:C4:E3:85:32:BB:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/7CD32787AF54793C40E640D59B41C4E38532BB54.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CD32787AF54793C40E640D59B41C4E38532BB54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GkWNB2LuNoxCexi2UYrW6jzkC2UUGDZnWP5x191yoWcM/1/34352e3136362e35342e302f32332d3233203d3e2031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.54.0/23
Signature Algorithm: sha256WithRSAEncryption
24:48:d8:8b:72:06:05:34:8f:c0:1b:db:ea:d7:0e:5f:4e:0f:
a4:43:8e:39:5f:6b:1b:da:4e:00:d5:c5:2c:17:ec:7c:ad:32:
ad:43:6f:48:90:b6:6d:7f:88:c6:f2:3e:d3:48:55:f6:69:99:
6c:7d:41:f1:b1:2b:43:b0:b6:79:83:7e:86:9b:10:0f:85:7a:
cd:22:d5:b2:5c:46:96:91:a0:a3:5c:25:29:f0:6d:d2:5e:97:
83:e3:cb:80:d8:b9:40:dd:c5:e1:72:5c:a6:5e:7e:a3:99:45:
71:ac:75:bc:05:6c:7f:4e:c1:e4:5f:51:f9:ae:86:d4:d7:de:
46:1a:c3:87:5c:fa:9e:f5:40:29:0f:9c:c4:21:cd:1c:96:77:
02:b8:5a:e9:d1:fb:e5:02:40:78:b3:c5:44:3f:7f:a8:59:c8:
5c:45:1c:32:7b:4f:c1:24:06:cd:cb:4a:e2:c3:a0:0d:85:62:
1f:42:04:62:0f:c8:26:ca:41:94:7b:73:85:e1:a4:62:75:26:
36:d6:5e:dc:cd:9d:eb:67:38:1a:22:ca:eb:42:a4:7d:11:fd:
6d:76:87:46:be:6b:58:2c:3e:4f:98:55:77:1d:5c:02:44:3b:
20:0a:d4:0c:4b:a1:0c:35:13:08:7b:39:6a:e4:99:51:38:4a:
f2:08:71:1b
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgIUQX5vZkRY96JbuMrOUVcmj6mWlvkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NEMzI3ODdBRjU0NzkzQzQwRTY0MEQ1OUI0MUM0RTM4
NTMyQkI1NDAeFw0yNDA0MDQwOTI4MDNaFw0yNTA0MDMwOTMzMDNaMDMxMTAvBgNV
BAMTKDg5QkI0Q0YyQTBBODVENjNFOTE3OUZDMjcwRjA1MUE0QzJBNzNDOTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzCsor0XEBRvmC1y3p7yg6mSqc
PjDCiHnYUbkKZ+IpvVmZRoUVQewBbK1Tzmb52JTMpsn0YUb35gygHuidD2YVLbZ0
roB4i9NR9NYTDeCQgrtC4ZuGfSjGPlgNgm16yHCSPRZb6081m0ayCwah1u8aKUy8
5ns35F7u/9n/ZOASyryJMuC42THJMyJwdoKcdwCSPJIhwDfWHxfNaF5Biwp6fii7
CZhnhB83PG8yuSoaRcKvhrl06MnxLqD3M0OaWPedMy2TmAgeNg/TCK6PvYqUfFaC
1b/A1pOqClx0Ums2pMgjU3x83SrKP/M8l6buxG8E1mAuEih6xQs8rjSIuRg3AgMB
AAGjggJFMIICQTAdBgNVHQ4EFgQUibtM8qCoXWPpF5/CcPBRpMKnPJUwHwYDVR0j
BBgwFoAUfNMnh69UeTxA5kDVm0HE44Uyu1QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2tXTkIyTHVOb3hDZXhpMlVZclc2anprQzJVVUdEWm5XUDV4MTkxeW9X
Y00vMS83Q0QzMjc4N0FGNTQ3OTNDNDBFNjQwRDU5QjQxQzRFMzg1MzJCQjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzdDRDMyNzg3QUY1NDc5M0M0
MEU2NDBENTlCNDFDNEUzODUzMkJCNTQuY2VyMIGiBggrBgEFBQcBCwSBlTCBkjCB
jwYIKwYBBQUHMAuGgYJyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0drV05CMkx1Tm94Q2V4aTJVWXJXNmp6a0MyVVVHRFpuV1A1eDE5MXlvV2NNLzEv
MzQzNTJlMzEzNjM2MmUzNTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEucm9h
MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAEtpjYwDQYJKoZIhvcNAQELBQADggEBACRI2ItyBgU0j8Ab2+rXDl9O
D6RDjjlfaxvaTgDVxSwX7HytMq1Db0iQtm1/iMbyPtNIVfZpmWx9QfGxK0OwtnmD
foabEA+Fes0i1bJcRpaRoKNcJSnwbdJel4Pjy4DYuUDdxeFyXKZefqOZRXGsdbwF
bH9OweRfUfmuhtTX3kYaw4dc+p71QCkPnMQhzRyWdwK4WunR++UCQHizxUQ/f6hZ
yFxFHDJ7T8EkBs3LSuLDoA2FYh9CBGIPyCbKQZR7c4XhpGJ1JjbWXtzNnetnOBoi
yutCpH0R/W12h0a+a1gsPk+YVXcdXAJEOyAK1AxLoQw1Ewh7OWrkmVE4SvIIcRs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:18:39 2025 by rpki-client