Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e37302e34302e302f32322d3332203d3e20323637353436.roa
File: 34352e37302e34302e302f32322d3332203d3e20323637353436.roa (raw, json)
Hash identifier: 4i45Gi7riafWyo4g7yUtbXLRnl7NPGvGlm2QILacFjE=
Subject key identifier: 2B:8A:F5:AF:1C:EA:7F:81:78:E2:55:8F:8F:64:37:91:0F:24:93:4E
Certificate issuer: /CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Certificate serial: 4F624FCFA3444C3AFFDF032680B61A4B6A2A208B
Authority key identifier: B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e37302e34302e302f32322d3332203d3e20323637353436.roa
Signing time: Tue 13 Feb 2024 23:58:00 +0000
ROA not before: Tue 13 Feb 2024 23:53:00 +0000
ROA not after: Tue 11 Feb 2025 23:58:00 +0000
asID: 267546
IP address blocks: 45.70.40.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:62:4f:cf:a3:44:4c:3a:ff:df:03:26:80:b6:1a:4b:6a:2a:20:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B2CAB3CEB03852E164D470A52A06D0DFA0494C86
Validity
Not Before: Feb 13 23:53:00 2024 GMT
Not After : Feb 11 23:58:00 2025 GMT
Subject: CN=2B8AF5AF1CEA7F8178E2558F8F6437910F24934E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:83:2b:5a:a1:99:a1:35:af:23:c9:c9:f5:4f:
e7:93:5a:fd:ab:9f:4f:f1:07:57:2c:30:e7:36:20:
7c:06:ab:22:3a:b4:b5:4c:8b:8b:0f:81:ec:ce:b7:
56:8a:1f:0e:f5:d7:60:cd:cf:7c:ab:9d:96:5e:20:
54:cc:da:b8:27:c5:a3:d5:a7:d4:ca:bb:2c:1f:32:
ae:63:2b:5a:9d:eb:96:6f:a4:ed:0f:37:ee:a3:b9:
e5:16:45:f6:95:d7:65:6f:75:df:da:34:ea:43:43:
04:b2:6b:33:3f:66:5a:04:2b:c3:59:0f:e5:e0:e4:
87:54:12:2d:b9:11:6c:75:f2:82:49:fd:0f:0c:41:
95:12:5c:07:97:52:f9:f2:54:da:38:69:39:98:fa:
58:ba:ac:9b:d1:09:e1:05:16:41:fd:03:b4:b3:63:
2a:cb:1b:a3:1f:1e:bf:ff:74:b2:7e:a9:d9:76:a7:
8d:63:5a:58:28:bf:54:c0:6b:4b:64:be:ac:73:d6:
c3:ab:48:53:d3:78:8a:66:2c:2b:b9:cc:bc:32:d5:
76:4c:bc:51:ce:c7:67:d6:c4:46:a8:3a:f8:e8:35:
e7:65:58:bd:19:4b:0a:8b:39:76:6d:a1:86:f8:e9:
f5:f5:4d:fe:0c:ce:b7:18:50:e4:85:9e:8a:6b:f0:
a8:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:F5:AF:1C:EA:7F:81:78:E2:55:8F:8F:64:37:91:0F:24:93:4E
X509v3 Authority Key Identifier:
keyid:B2:CA:B3:CE:B0:38:52:E1:64:D4:70:A5:2A:06:D0:DF:A0:49:4C:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2CAB3CEB03852E164D470A52A06D0DFA0494C86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HLXbvdRcmD4DFJ6rm7iWNq5GEcTFkPVhKuZBNZL26gSM/0/34352e37302e34302e302f32322d3332203d3e20323637353436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.40.0/22
Signature Algorithm: sha256WithRSAEncryption
02:34:19:9c:ca:e4:0e:25:db:c5:29:e7:be:45:c4:b2:e2:fb:
96:76:54:a4:17:04:73:3a:0e:09:74:42:de:f2:b1:b2:56:52:
ab:65:24:17:e0:30:24:97:5e:74:42:71:48:bf:79:8b:22:6a:
ac:db:31:a7:10:d2:35:43:83:8d:49:ac:9c:47:a7:53:ca:23:
dc:c7:8b:0a:36:04:a8:a2:64:c5:49:19:44:e9:24:d7:d0:6b:
40:c0:a0:7b:48:05:b7:7d:ed:7e:97:90:a3:24:80:48:81:19:
34:bd:0f:93:6f:31:41:18:8f:33:0c:f4:93:6c:34:90:e9:0c:
35:c3:0b:60:0e:63:88:8b:c2:c1:91:73:aa:25:0c:48:81:48:
94:3c:bb:d7:46:da:bc:89:43:0c:49:37:79:a7:59:b9:5a:3c:
12:f2:aa:43:79:00:0a:a7:50:c1:1f:02:dd:41:52:93:89:14:
2d:11:36:68:59:e5:9a:27:20:8f:29:8b:eb:ca:5b:54:e8:c2:
1d:50:d8:97:f4:e8:f9:81:6b:fd:26:84:06:ba:07:4b:89:4d:
7d:28:89:c3:04:20:62:5c:7b:31:8e:d7:a6:c8:3a:f9:ce:e5:
af:7b:84:18:d0:84:9a:82:6f:3b:45:ca:11:f8:32:19:1b:2f:
9d:a1:e6:a5
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUT2JPz6NETDr/3wMmgLYaS2oqIIswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjJDQUIzQ0VCMDM4NTJFMTY0RDQ3MEE1MkEwNkQwREZB
MDQ5NEM4NjAeFw0yNDAyMTMyMzUzMDBaFw0yNTAyMTEyMzU4MDBaMDMxMTAvBgNV
BAMTKDJCOEFGNUFGMUNFQTdGODE3OEUyNTU4RjhGNjQzNzkxMEYyNDkzNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvgytaoZmhNa8jycn1T+eTWv2r
n0/xB1csMOc2IHwGqyI6tLVMi4sPgezOt1aKHw7112DNz3yrnZZeIFTM2rgnxaPV
p9TKuywfMq5jK1qd65ZvpO0PN+6jueUWRfaV12Vvdd/aNOpDQwSyazM/ZloEK8NZ
D+Xg5IdUEi25EWx18oJJ/Q8MQZUSXAeXUvnyVNo4aTmY+li6rJvRCeEFFkH9A7Sz
YyrLG6MfHr//dLJ+qdl2p41jWlgov1TAa0tkvqxz1sOrSFPTeIpmLCu5zLwy1XZM
vFHOx2fWxEaoOvjoNedlWL0ZSwqLOXZtoYb46fX1Tf4MzrcYUOSFnopr8KhZAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUK4r1rxzqf4F44lWPj2Q3kQ8kk04wHwYDVR0j
BBgwFoAUssqzzrA4UuFk1HClKgbQ36BJTIYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSExYYnZkUmNtRDRERko2cm03aVdOcTVHRWNURmtQVmhLdVpCTlpMMjZn
U00vMC9CMkNBQjNDRUIwMzg1MkUxNjRENDcwQTUyQTA2RDBERkEwNDk0Qzg2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0IyQ0FCM0NFQjAzODUyRTE2
NEQ0NzBBNTJBMDZEMERGQTA0OTRDODYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hMWGJ2ZFJjbUQ0REZKNnJtN2lXTnE1R0VjVEZrUFZoS3VaQk5aTDI2Z1NNLzAv
MzQzNTJlMzczMDJlMzQzMDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMyMzYzNzM1
MzQzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1GKDANBgkqhkiG9w0BAQsFAAOCAQEAAjQZnMrkDiXb
xSnnvkXEsuL7lnZUpBcEczoOCXRC3vKxslZSq2UkF+AwJJdedEJxSL95iyJqrNsx
pxDSNUODjUmsnEenU8oj3MeLCjYEqKJkxUkZROkk19BrQMCge0gFt33tfpeQoySA
SIEZNL0Pk28xQRiPMwz0k2w0kOkMNcMLYA5jiIvCwZFzqiUMSIFIlDy710bavIlD
DEk3eadZuVo8EvKqQ3kACqdQwR8C3UFSk4kULRE2aFnlmicgjymL68pbVOjCHVDY
l/To+YFr/SaEBroHS4lNfSiJwwQgYlx7MY7Xpsg6+c7lr3uEGNCEmoJvO0XKEfgy
GRsvnaHmpQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org