Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32322d3234203d3e20323639303936.roa
File: 34352e3138352e3132302e302f32322d3234203d3e20323639303936.roa (raw, json)
Hash identifier: siXsHoVp2NhvrcYq2BrGT1sOrkwAgVlbftKCtbpQ92E=
Subject key identifier: C2:3C:80:E8:FE:84:11:74:3D:36:1F:F7:18:B0:F1:77:E6:94:1D:5D
Certificate issuer: /CN=22AF7B01A71F10F6C4EB165BE13AE51E261E5B49
Certificate serial: 60144B841B8B54E58CEE2E3D09684E3B0B25BC44
Authority key identifier: 22:AF:7B:01:A7:1F:10:F6:C4:EB:16:5B:E1:3A:E5:1E:26:1E:5B:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32322d3234203d3e20323639303936.roa
Signing time: Tue 03 Dec 2024 18:36:52 +0000
ROA not before: Tue 03 Dec 2024 18:31:52 +0000
ROA not after: Tue 02 Dec 2025 18:36:52 +0000
asID: 269096
IP address blocks: 45.185.120.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:14:4b:84:1b:8b:54:e5:8c:ee:2e:3d:09:68:4e:3b:0b:25:bc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22AF7B01A71F10F6C4EB165BE13AE51E261E5B49
Validity
Not Before: Dec 3 18:31:52 2024 GMT
Not After : Dec 2 18:36:52 2025 GMT
Subject: CN=C23C80E8FE8411743D361FF718B0F177E6941D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:08:46:b0:6b:63:b9:db:18:1b:a7:fc:ad:e1:
d4:10:72:25:8e:82:06:8c:d0:81:3b:cb:fe:6d:31:
e1:3d:8a:76:00:9a:80:56:f4:4c:03:a2:2d:d9:1a:
71:da:ee:dd:6c:60:82:cf:33:f1:c5:68:e2:08:0e:
4d:df:f8:19:09:42:5a:22:6c:d5:13:9e:71:c1:60:
b7:d3:3f:48:c6:39:2a:f0:fd:38:1b:12:6f:d6:1e:
a5:88:5b:27:8b:0f:83:eb:bc:c2:37:34:f0:0b:b9:
05:c0:c1:bb:db:5d:f5:b8:80:45:94:db:08:09:7d:
5d:19:f9:ec:a2:31:da:cf:6e:26:81:40:3e:71:6c:
85:79:dd:35:37:75:26:9f:94:8f:59:59:b3:a2:6c:
bc:5e:09:67:51:09:f6:cc:c8:cb:36:e6:46:ab:28:
e5:26:e6:f4:63:47:8b:13:82:8a:00:b2:0a:59:b5:
51:ba:9e:a8:be:69:21:ff:be:18:73:78:eb:0a:6d:
11:df:d7:4f:19:67:ae:14:ed:67:dc:ee:3b:76:ca:
82:9d:34:62:78:8a:b6:6d:b9:ab:ef:dd:c4:88:23:
13:22:0d:63:b7:01:56:b3:f6:03:4a:c1:5a:ff:4e:
fb:f5:56:a0:5a:84:f0:15:8b:25:cb:6d:a6:58:88:
e2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3C:80:E8:FE:84:11:74:3D:36:1F:F7:18:B0:F1:77:E6:94:1D:5D
X509v3 Authority Key Identifier:
keyid:22:AF:7B:01:A7:1F:10:F6:C4:EB:16:5B:E1:3A:E5:1E:26:1E:5B:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22AF7B01A71F10F6C4EB165BE13AE51E261E5B49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9QTLw993b5dWLNqAW6B71bXRY52g3SeM1wCfxChFcPR/0/34352e3138352e3132302e302f32322d3234203d3e20323639303936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.120.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:22:3b:2d:60:3b:fe:c5:22:7c:63:1e:f8:bf:28:54:54:29:
9d:91:cc:12:0a:8b:1d:4d:c5:7c:f9:31:85:2d:51:90:12:2a:
fd:25:f8:68:09:e3:b3:66:cd:05:69:9c:ee:bf:f8:e4:35:06:
bc:f6:18:f0:04:c7:9b:d9:37:48:a7:5b:2a:f7:44:0d:f4:44:
67:60:8c:29:c7:53:b6:ec:32:5f:fc:f4:a6:d3:e8:cd:4f:23:
bd:b9:1d:13:0a:a6:16:b7:a9:10:20:9e:d8:49:c9:e4:de:f9:
98:a8:7e:37:a1:7d:72:48:b9:1d:9d:19:ba:7d:0c:e2:e8:e8:
a1:7e:16:c5:bd:9f:fe:5b:0e:fc:83:db:5f:c1:48:75:f0:eb:
64:b6:2e:f2:46:b6:6d:2b:f1:ca:12:0f:f8:f0:f0:69:32:3a:
56:fd:20:af:c4:37:8a:2c:4d:88:ef:5d:1d:c4:39:f3:56:f5:
81:81:df:a8:e7:a9:be:15:a2:22:3d:9c:9f:a3:cb:19:de:01:
2a:c8:eb:08:26:3c:b5:58:ce:23:ee:b8:0f:23:cb:3b:42:81:
70:92:29:a0:a4:d4:1f:96:30:86:96:d2:65:3f:77:81:e5:ea:
f0:0b:aa:7f:65:2a:e9:24:95:3d:b7:38:cb:dd:9b:73:3e:98:
50:8f:e8:d0
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYBRLhBuLVOWM7i49CWhOOwslvEQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJBRjdCMDFBNzFGMTBGNkM0RUIxNjVCRTEzQUU1MUUy
NjFFNUI0OTAeFw0yNDEyMDMxODMxNTJaFw0yNTEyMDIxODM2NTJaMDMxMTAvBgNV
BAMTKEMyM0M4MEU4RkU4NDExNzQzRDM2MUZGNzE4QjBGMTc3RTY5NDFENUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCEawa2O52xgbp/yt4dQQciWO
ggaM0IE7y/5tMeE9inYAmoBW9EwDoi3ZGnHa7t1sYILPM/HFaOIIDk3f+BkJQloi
bNUTnnHBYLfTP0jGOSrw/TgbEm/WHqWIWyeLD4PrvMI3NPALuQXAwbvbXfW4gEWU
2wgJfV0Z+eyiMdrPbiaBQD5xbIV53TU3dSaflI9ZWbOibLxeCWdRCfbMyMs25kar
KOUm5vRjR4sTgooAsgpZtVG6nqi+aSH/vhhzeOsKbRHf108ZZ64U7Wfc7jt2yoKd
NGJ4irZtuavv3cSIIxMiDWO3AVaz9gNKwVr/Tvv1VqBahPAViyXLbaZYiOJBAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUwjyA6P6EEXQ9Nh/3GLDxd+aUHV0wHwYDVR0j
BBgwFoAUIq97AacfEPbE6xZb4TrlHiYeW0kwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSDlRVEx3OTkzYjVkV0xOcUFXNkI3MWJYUlk1MmczU2VNMXdDZnhDaEZj
UFIvMC8yMkFGN0IwMUE3MUYxMEY2QzRFQjE2NUJFMTNBRTUxRTI2MUU1QjQ5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQUY3QjAxQTcxRjEwRjZD
NEVCMTY1QkUxM0FFNTFFMjYxRTVCNDkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0g5UVRMdzk5M2I1ZFdMTnFBVzZCNzFiWFJZNTJnM1NlTTF3Q2Z4Q2hGY1BSLzAv
MzQzNTJlMzEzODM1MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItuXgwDQYJKoZIhvcNAQELBQADggEBAH0iOy1g
O/7FInxjHvi/KFRUKZ2RzBIKix1NxXz5MYUtUZASKv0l+GgJ47NmzQVpnO6/+OQ1
Brz2GPAEx5vZN0inWyr3RA30RGdgjCnHU7bsMl/89KbT6M1PI725HRMKpha3qRAg
nthJyeTe+ZiofjehfXJIuR2dGbp9DOLo6KF+FsW9n/5bDvyD21/BSHXw62S2LvJG
tm0r8coSD/jw8GkyOlb9IK/EN4osTYjvXR3EOfNW9YGB36jnqb4VoiI9nJ+jyxne
ASrI6wgmPLVYziPuuA8jyztCgXCSKaCk1B+WMIaW0mU/d4Hl6vALqn9lKukklT23
OMvdm3M+mFCP6NA=
-----END CERTIFICATE-----
Generated at Sun Apr 13 01:38:53 2025 by rpki-client