Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32332d3233203d3e20323639363938.roa
File: 34352e3139312e382e302f32332d3233203d3e20323639363938.roa (raw, json)
Hash identifier: xRrx9Vq67c0ikaYHF0QserWemoU8F1h17bI9yQB0gQ0=
Subject key identifier: 88:46:B7:BA:C1:ED:27:5B:47:4C:06:20:EA:C5:3A:0C:A3:77:29:02
Certificate issuer: /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial: 7E8845AC638D2B902C3D34605721416D5BEB5C63
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32332d3233203d3e20323639363938.roa
Signing time: Tue 23 Jan 2024 14:19:18 +0000
ROA not before: Tue 23 Jan 2024 14:14:18 +0000
ROA not after: Tue 21 Jan 2025 14:19:18 +0000
asID: 269698
IP address blocks: 45.191.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:88:45:ac:63:8d:2b:90:2c:3d:34:60:57:21:41:6d:5b:eb:5c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Validity
Not Before: Jan 23 14:14:18 2024 GMT
Not After : Jan 21 14:19:18 2025 GMT
Subject: CN=8846B7BAC1ED275B474C0620EAC53A0CA3772902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:97:a8:3e:cd:bb:b3:5e:4f:f6:9e:29:f3:56:
44:aa:90:34:3e:37:95:e7:11:6e:fc:0f:b5:26:70:
48:67:7a:3a:2c:92:28:5f:12:a6:a8:cb:fa:cc:86:
fe:06:75:90:63:68:37:e1:df:f4:a3:61:ef:2e:72:
45:6c:09:d7:60:c5:a3:09:16:45:44:1a:06:aa:b9:
a1:4b:9f:a7:38:cb:e7:39:52:15:2e:d9:dd:c5:ba:
f9:7c:1d:97:4f:dc:3d:93:e8:45:25:5c:78:be:81:
63:97:4c:da:1e:e3:ad:ef:36:e9:7d:ad:21:96:ba:
2c:5b:d4:9c:49:0c:7a:20:89:9f:d7:09:bb:0d:24:
1b:97:1c:3e:7d:f0:03:fb:d8:d3:4d:8c:24:1b:e1:
48:6e:ff:7b:50:f4:32:50:1a:2d:8e:a3:25:e5:50:
cb:ee:83:a9:dc:da:50:fc:a0:9a:51:0c:92:e0:c6:
72:65:0e:f5:8f:05:ee:f4:01:2f:10:75:a9:8b:a9:
db:09:2e:f6:e6:38:63:74:9e:3e:78:ac:d7:db:bb:
80:bb:da:8b:c8:fa:ea:be:17:86:84:7c:d2:91:34:
7e:4c:b3:e3:34:f5:fc:0a:f8:b7:04:3d:73:27:b2:
06:b9:1a:01:3a:3a:04:a4:4c:de:76:c0:35:35:26:
3d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:46:B7:BA:C1:ED:27:5B:47:4C:06:20:EA:C5:3A:0C:A3:77:29:02
X509v3 Authority Key Identifier:
keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32332d3233203d3e20323639363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.8.0/23
Signature Algorithm: sha256WithRSAEncryption
98:97:de:2d:b0:38:97:d2:24:71:7f:0f:ab:3d:f3:33:33:0e:
52:c3:86:de:00:fb:70:70:2e:78:7d:c6:bf:73:f8:3d:42:64:
0c:39:c5:0d:45:d6:b4:51:8c:41:7e:e8:d8:57:3f:cc:cf:e9:
0b:dc:5b:30:35:43:65:a0:80:a3:97:a4:d1:b6:75:9d:04:1e:
f3:41:c1:36:be:de:59:9f:f8:a8:1a:56:77:6f:b6:fc:99:dc:
c5:ca:e7:e8:34:08:7b:a3:8c:b2:96:d0:9c:ca:94:99:93:31:
12:f5:5e:e2:37:8f:cf:8d:7f:cf:63:30:e7:77:1a:9c:35:5b:
49:fa:f9:aa:f5:6b:5d:8d:bb:ed:ce:5e:a9:76:25:30:cf:51:
14:0c:63:a6:16:e7:c6:79:95:be:8b:c3:29:1a:08:db:61:c7:
5b:ed:3d:8c:08:64:66:ea:59:12:0b:38:ef:a4:af:11:1d:0c:
09:08:7a:20:c6:5e:0a:72:95:1d:c0:e3:cf:b4:be:60:8d:e3:
36:02:24:b3:c6:f1:38:bf:bc:9f:f1:f9:2f:f7:fc:86:fc:bc:
bb:97:62:73:5c:d2:1e:d2:30:9a:de:b1:77:99:0e:88:f8:cd:
47:49:fc:47:6e:44:ca:0e:3f:d8:89:f7:3b:7d:e9:37:78:eb:
eb:92:f7:c4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUfohFrGONK5AsPTRgVyFBbVvrXGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI2NEMwQjdDMUYwNTEzNjg4OTI5ODM1QUU5MDhDMjFB
NzY1QzRFMzAeFw0yNDAxMjMxNDE0MThaFw0yNTAxMjExNDE5MThaMDMxMTAvBgNV
BAMTKDg4NDZCN0JBQzFFRDI3NUI0NzRDMDYyMEVBQzUzQTBDQTM3NzI5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFl6g+zbuzXk/2ninzVkSqkDQ+
N5XnEW78D7UmcEhnejoskihfEqaoy/rMhv4GdZBjaDfh3/SjYe8uckVsCddgxaMJ
FkVEGgaquaFLn6c4y+c5UhUu2d3Fuvl8HZdP3D2T6EUlXHi+gWOXTNoe463vNul9
rSGWuixb1JxJDHogiZ/XCbsNJBuXHD598AP72NNNjCQb4Uhu/3tQ9DJQGi2OoyXl
UMvug6nc2lD8oJpRDJLgxnJlDvWPBe70AS8QdamLqdsJLvbmOGN0nj54rNfbu4C7
2ovI+uq+F4aEfNKRNH5Ms+M09fwK+LcEPXMnsga5GgE6OgSkTN52wDU1Jj0LAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUiEa3usHtJ1tHTAYg6sU6DKN3KQIwHwYDVR0j
BBgwFoAUu2TAt8HwUTaIkpg1rpCMIadlxOMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSGhiUGt2RERrNkFrQVA4a2dkYU51VDZXdWhpYkYxUExRUWg0RGRTNXdx
VEsvMC9CQjY0QzBCN0MxRjA1MTM2ODg5Mjk4MzVBRTkwOEMyMUE3NjVDNEUzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0JCNjRDMEI3QzFGMDUxMzY4
ODkyOTgzNUFFOTA4QzIxQTc2NUM0RTMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hoYlBrdkREazZBa0FQOGtnZGFOdVQ2V3VoaWJGMVBMUVFoNERkUzV3cVRLLzAv
MzQzNTJlMzEzOTMxMmUzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzOTM2
MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS2/CDANBgkqhkiG9w0BAQsFAAOCAQEAmJfeLbA4l9Ik
cX8Pqz3zMzMOUsOG3gD7cHAueH3Gv3P4PUJkDDnFDUXWtFGMQX7o2Fc/zM/pC9xb
MDVDZaCAo5ek0bZ1nQQe80HBNr7eWZ/4qBpWd2+2/Jncxcrn6DQIe6OMspbQnMqU
mZMxEvVe4jePz41/z2Mw53canDVbSfr5qvVrXY277c5eqXYlMM9RFAxjphbnxnmV
vovDKRoI22HHW+09jAhkZupZEgs476SvER0MCQh6IMZeCnKVHcDjz7S+YI3jNgIk
s8bxOL+8n/H5L/f8hvy8u5dic1zSHtIwmt6xd5kOiPjNR0n8R25Eyg4/2In3O33p
N3jr65L3xA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:57 2025 by rpki-client