Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3234203d3e20323638373838.roa
File: 34352e3137332e32342e302f32322d3234203d3e20323638373838.roa (raw, json)
Hash identifier: YLdMrsOuAqX0B3VrHxoaBEr1v3/cCj3yvGR2ktfqjvA=
Subject key identifier: 44:3D:E3:72:36:FD:75:32:A9:28:1E:1B:A8:CC:FB:CB:56:E9:0F:6A
Certificate issuer: /CN=24B3423445CE5D36280D8F72151340DCBE34B7BB
Certificate serial: 5F69FFB839F7CD130D816D2EF4687EA8966245C9
Authority key identifier: 24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3234203d3e20323638373838.roa
Signing time: Mon 17 Feb 2025 18:37:57 +0000
ROA not before: Mon 17 Feb 2025 18:32:57 +0000
ROA not after: Mon 16 Feb 2026 18:37:57 +0000
asID: 268788
IP address blocks: 45.173.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:69:ff:b8:39:f7:cd:13:0d:81:6d:2e:f4:68:7e:a8:96:62:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24B3423445CE5D36280D8F72151340DCBE34B7BB
Validity
Not Before: Feb 17 18:32:57 2025 GMT
Not After : Feb 16 18:37:57 2026 GMT
Subject: CN=443DE37236FD7532A9281E1BA8CCFBCB56E90F6A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:64:99:16:09:68:33:1e:3c:d2:b5:e4:d3:
1b:de:ee:30:97:bc:85:e4:61:1c:f2:80:18:eb:3a:
7a:99:25:75:08:6b:02:48:24:bb:b4:2d:5e:7f:4f:
f9:39:73:59:c6:bf:6f:38:93:49:d2:1d:3f:d5:97:
53:fe:b9:c8:28:65:a6:a6:7b:a7:0d:61:91:f7:a9:
b4:bf:8b:9c:ed:02:61:f5:73:65:b2:78:98:2f:90:
91:fa:57:c8:02:50:b9:a4:87:6c:aa:37:92:32:3c:
cc:fe:24:3c:73:1d:c1:57:12:f0:4f:11:10:66:46:
a2:54:2d:84:9e:98:8f:4a:08:5e:cc:b7:85:41:2d:
af:92:3c:15:fb:0b:2c:ac:9c:d0:a9:64:bd:ff:b5:
1e:30:bc:96:3c:4d:11:b7:37:d6:44:3f:78:d6:be:
82:c3:56:61:f2:86:d6:af:96:65:47:02:1a:a0:f9:
a2:21:c5:48:ce:92:e1:ed:55:58:c1:89:c0:40:87:
d2:da:8f:13:08:b1:46:92:80:a7:68:13:4c:40:72:
f8:08:b0:74:d9:21:00:53:33:eb:4c:89:a8:cf:98:
9e:f8:42:60:9f:7e:09:c0:ec:6e:3a:fe:ca:2d:62:
0a:c9:77:c6:24:b3:57:d2:2c:80:6e:0c:fc:99:1b:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3D:E3:72:36:FD:75:32:A9:28:1E:1B:A8:CC:FB:CB:56:E9:0F:6A
X509v3 Authority Key Identifier:
keyid:24:B3:42:34:45:CE:5D:36:28:0D:8F:72:15:13:40:DC:BE:34:B7:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/24B3423445CE5D36280D8F72151340DCBE34B7BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24B3423445CE5D36280D8F72151340DCBE34B7BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCWZkwEUg2xsjKJxnS7p58N8BXCkXbzisDwXpoP5gjBE/0/34352e3137332e32342e302f32322d3234203d3e20323638373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.24.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:93:ad:c8:ac:18:7a:27:00:ef:45:7d:7a:0f:d7:19:77:e2:
86:91:99:5a:f1:38:cf:c4:d9:77:a8:47:71:a1:29:52:d2:df:
17:1c:59:e5:21:31:2c:f6:d3:8b:c5:a4:37:60:9e:eb:ad:7e:
0a:ba:b5:e0:0a:8c:a5:64:a4:2b:7f:10:34:52:d3:ce:88:44:
b0:15:01:bc:81:5a:e8:70:bd:7f:b3:96:eb:5d:d9:81:1f:3c:
25:35:fd:de:07:ea:e8:c9:e2:0e:fb:ca:bc:b1:c4:be:f9:aa:
f7:9f:75:7e:b3:f7:dd:b5:55:7d:58:43:4b:64:11:e8:47:3f:
86:e0:ca:4c:b9:55:ce:33:23:c2:c1:f3:61:a7:c2:0f:37:c9:
89:35:e7:6c:96:fd:d8:2f:79:c4:a0:62:4f:7d:9c:c3:b0:8b:
19:a7:35:ed:e7:fc:01:21:4b:10:1b:45:bd:8c:30:55:da:32:
5a:91:41:79:6f:a7:01:91:9d:af:28:15:ba:8b:d5:00:79:99:
ff:90:90:f4:a9:05:95:8b:8e:33:a1:e6:98:9f:d8:eb:4e:db:
c8:36:21:cf:00:74:6c:51:72:6b:e7:2f:be:f5:93:06:65:0f:
07:17:56:dd:50:d7:22:e9:19:86:33:62:f5:73:b8:56:7b:06:
4b:bd:7b:2d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUX2n/uDn3zRMNgW0u9Gh+qJZiRckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjRCMzQyMzQ0NUNFNUQzNjI4MEQ4RjcyMTUxMzQwRENC
RTM0QjdCQjAeFw0yNTAyMTcxODMyNTdaFw0yNjAyMTYxODM3NTdaMDMxMTAvBgNV
BAMTKDQ0M0RFMzcyMzZGRDc1MzJBOTI4MUUxQkE4Q0NGQkNCNTZFOTBGNkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGzWSZFgloMx480rXk0xve7jCX
vIXkYRzygBjrOnqZJXUIawJIJLu0LV5/T/k5c1nGv284k0nSHT/Vl1P+ucgoZaam
e6cNYZH3qbS/i5ztAmH1c2WyeJgvkJH6V8gCULmkh2yqN5IyPMz+JDxzHcFXEvBP
ERBmRqJULYSemI9KCF7Mt4VBLa+SPBX7CyysnNCpZL3/tR4wvJY8TRG3N9ZEP3jW
voLDVmHyhtavlmVHAhqg+aIhxUjOkuHtVVjBicBAh9LajxMIsUaSgKdoE0xAcvgI
sHTZIQBTM+tMiajPmJ74QmCffgnA7G46/sotYgrJd8Yks1fSLIBuDPyZG1PxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQURD3jcjb9dTKpKB4bqMz7y1bpD2owHwYDVR0j
BBgwFoAUJLNCNEXOXTYoDY9yFRNA3L40t7swDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSENXWmt3RVVnMnhzaktKeG5TN3A1OE44QlhDa1hiemlzRHdYcG9QNWdq
QkUvMC8yNEIzNDIzNDQ1Q0U1RDM2MjgwRDhGNzIxNTEzNDBEQ0JFMzRCN0JCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI0QjM0MjM0NDVDRTVEMzYy
ODBEOEY3MjE1MTM0MERDQkUzNEI3QkIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hDV1prd0VVZzJ4c2pLSnhuUzdwNThOOEJYQ2tYYnppc0R3WHBvUDVnakJFLzAv
MzQzNTJlMzEzNzMzMmUzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzczODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa0YMA0GCSqGSIb3DQEBCwUAA4IBAQC7k63IrBh6
JwDvRX16D9cZd+KGkZla8TjPxNl3qEdxoSlS0t8XHFnlITEs9tOLxaQ3YJ7rrX4K
urXgCoylZKQrfxA0UtPOiESwFQG8gVrocL1/s5brXdmBHzwlNf3eB+royeIO+8q8
scS++ar3n3V+s/fdtVV9WENLZBHoRz+G4MpMuVXOMyPCwfNhp8IPN8mJNedslv3Y
L3nEoGJPfZzDsIsZpzXt5/wBIUsQG0W9jDBV2jJakUF5b6cBkZ2vKBW6i9UAeZn/
kJD0qQWVi44zoeaYn9jrTtvINiHPAHRsUXJr5y++9ZMGZQ8HF1bdUNci6RmGM2L1
c7hWewZLvXst
-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:22 2025 by rpki-client