Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32332d3233203d3e20323637303637.roa
File: 34352e3232382e38342e302f32332d3233203d3e20323637303637.roa (raw, json)
Hash identifier: 1bgjsDY/43ipfIatXCHno40suBZGoK9MbQGDMx8Kw5A=
Subject key identifier: A5:6E:62:13:68:7F:62:06:FF:00:2F:4C:50:35:6B:43:25:7F:5D:08
Certificate issuer: /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial: 0D3D4CD38BAA18B85701762C507E86D50D37625B
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32332d3233203d3e20323637303637.roa
Signing time: Fri 23 Feb 2024 14:40:52 +0000
ROA not before: Fri 23 Feb 2024 14:35:52 +0000
ROA not after: Fri 21 Feb 2025 14:40:52 +0000
asID: 267067
IP address blocks: 45.228.84.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3d:4c:d3:8b:aa:18:b8:57:01:76:2c:50:7e:86:d5:0d:37:62:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Validity
Not Before: Feb 23 14:35:52 2024 GMT
Not After : Feb 21 14:40:52 2025 GMT
Subject: CN=A56E6213687F6206FF002F4C50356B43257F5D08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:89:d2:0d:af:3a:9d:7c:73:36:7b:cc:bb:3b:
f9:04:ac:f5:3f:20:cf:ee:01:d5:d7:f9:26:ab:ec:
b7:b7:53:5f:58:1c:d0:bb:ec:53:42:da:fc:2c:dd:
d2:75:7a:f7:75:55:4e:b0:dd:ca:14:73:71:a8:ea:
c4:91:a8:76:95:e2:be:d1:1c:88:ad:e2:58:a5:18:
57:43:b8:f7:b4:7d:18:d9:d3:07:52:ba:a3:fa:23:
bb:40:bc:0c:44:e0:54:d5:76:60:fe:c3:bb:bc:9d:
fb:cc:61:d7:60:44:e5:77:b5:09:e1:45:05:d4:92:
2d:fc:92:4a:cc:77:ec:1d:da:f0:af:e2:7f:49:74:
3e:3f:aa:df:8a:fc:dc:53:dc:77:d2:44:cb:d2:1c:
d3:8e:d8:aa:62:41:6a:a6:88:b8:46:7b:66:4b:da:
72:62:2c:02:ad:d2:6b:40:c2:88:0b:7d:03:e6:87:
30:af:72:35:66:76:9f:53:f9:56:0f:b9:a5:66:25:
6a:a2:ad:77:cf:33:6f:44:5d:9a:4f:35:97:0e:86:
5e:f5:ca:f9:84:3e:44:be:63:cb:13:1c:06:db:99:
27:f0:c8:69:ce:3f:ff:67:ad:1f:69:77:a7:f7:86:
e1:e9:80:d8:43:86:02:4a:65:f6:74:97:f9:2f:78:
96:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:6E:62:13:68:7F:62:06:FF:00:2F:4C:50:35:6B:43:25:7F:5D:08
X509v3 Authority Key Identifier:
keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/34352e3232382e38342e302f32332d3233203d3e20323637303637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.84.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:22:6c:91:d3:20:e6:86:b7:f5:9e:9e:00:14:7a:aa:5c:8d:
7f:21:22:c3:e1:72:e1:dc:56:ca:86:fa:05:8f:3d:f9:b6:ab:
44:d0:dc:7f:f0:9f:fc:0d:84:ad:cf:a7:e9:96:49:e9:94:6c:
69:b6:97:89:2d:c2:b5:5b:45:70:c6:05:4b:74:e6:5c:c3:ca:
dc:20:53:63:5b:2e:57:d9:7b:1b:aa:78:3d:4f:ba:bf:c9:0e:
6f:dc:b2:59:6a:6e:19:75:85:ce:82:a4:7e:81:4d:fe:30:7a:
d9:4d:96:c3:4f:70:28:4a:7f:1c:ad:95:57:fb:64:b3:94:8b:
38:d8:d6:4f:e1:b7:78:e6:5a:f7:41:89:fc:b6:b3:8e:59:23:
99:2b:1a:a6:a9:bf:9a:10:c5:c3:0e:d9:ea:84:be:8f:81:52:
44:42:54:04:ab:26:3d:cb:5e:f0:44:9f:02:ab:0a:8e:86:bd:
c9:81:59:ad:5b:08:2f:cf:cd:47:5f:2f:9a:ba:e6:b3:2a:2f:
19:f8:9e:7d:e3:15:08:93:f1:1a:36:f7:35:7a:77:90:af:71:
20:d1:19:1b:2f:9e:9e:73:91:2a:6e:07:b4:17:2e:67:66:5a:
bd:25:27:05:80:9f:7e:86:4a:43:c9:fe:ec:62:49:f9:00:f2:
b0:b3:15:cc
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUDT1M04uqGLhXAXYsUH6G1Q03YlswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUE2NDVCNEMzMDREQjI1NEI1QkY2NjY5QTkzMEEyOTQ3
ODBEQzQ5QjAeFw0yNDAyMjMxNDM1NTJaFw0yNTAyMjExNDQwNTJaMDMxMTAvBgNV
BAMTKEE1NkU2MjEzNjg3RjYyMDZGRjAwMkY0QzUwMzU2QjQzMjU3RjVEMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsidINrzqdfHM2e8y7O/kErPU/
IM/uAdXX+Sar7Le3U19YHNC77FNC2vws3dJ1evd1VU6w3coUc3Go6sSRqHaV4r7R
HIit4lilGFdDuPe0fRjZ0wdSuqP6I7tAvAxE4FTVdmD+w7u8nfvMYddgROV3tQnh
RQXUki38kkrMd+wd2vCv4n9JdD4/qt+K/NxT3HfSRMvSHNOO2KpiQWqmiLhGe2ZL
2nJiLAKt0mtAwogLfQPmhzCvcjVmdp9T+VYPuaVmJWqirXfPM29EXZpPNZcOhl71
yvmEPkS+Y8sTHAbbmSfwyGnOP/9nrR9pd6f3huHpgNhDhgJKZfZ0l/kveJb7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpW5iE2h/Ygb/AC9MUDVrQyV/XQgwHwYDVR0j
BBgwFoAUqmRbTDBNslS1v2ZpqTCilHgNxJswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHFhdEdrRjRRRFA2U2V0N1VjYlhuR0dqMlRrZWhEQloyNExHaWFMQWJk
enUvMC9BQTY0NUI0QzMwNERCMjU0QjVCRjY2NjlBOTMwQTI5NDc4MERDNDlCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FBNjQ1QjRDMzA0REIyNTRC
NUJGNjY2OUE5MzBBMjk0NzgwREM0OUIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hxYXRHa0Y0UURQNlNldDdVY2JYbkdHajJUa2VoREJaMjRMR2lhTEFiZHp1LzAv
MzQzNTJlMzIzMjM4MmUzODM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzAzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeRUMA0GCSqGSIb3DQEBCwUAA4IBAQCqImyR0yDm
hrf1np4AFHqqXI1/ISLD4XLh3FbKhvoFjz35tqtE0Nx/8J/8DYStz6fplknplGxp
tpeJLcK1W0VwxgVLdOZcw8rcIFNjWy5X2Xsbqng9T7q/yQ5v3LJZam4ZdYXOgqR+
gU3+MHrZTZbDT3AoSn8crZVX+2SzlIs42NZP4bd45lr3QYn8trOOWSOZKxqmqb+a
EMXDDtnqhL6PgVJEQlQEqyY9y17wRJ8CqwqOhr3JgVmtWwgvz81HXy+auuazKi8Z
+J594xUIk/EaNvc1eneQr3Eg0RkbL56ec5Eqbge0Fy5nZlq9JScFgJ9+hkpDyf7s
Ykn5APKwsxXM
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org