Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32322d3234203d3e20323637353936.roa
File: 34352e37312e32302e302f32322d3234203d3e20323637353936.roa (raw, json)
Hash identifier: vs1X8o7gpiPlNqJhDN/VcnJM+DrXQ5wSyjRYwbsllBY=
Subject key identifier: D9:13:2E:CF:89:0F:AB:73:CF:27:5C:E1:8E:A2:0F:21:39:FC:71:1C
Certificate issuer: /CN=F37E9B61AA932590B95C490C03E35AFF96B9B9CF
Certificate serial: 02FD58A3403CA7433D63FA347EFFF006C48DD668
Authority key identifier: F3:7E:9B:61:AA:93:25:90:B9:5C:49:0C:03:E3:5A:FF:96:B9:B9:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32322d3234203d3e20323637353936.roa
Signing time: Thu 08 Jun 2023 15:01:29 +0000
ROA not before: Thu 08 Jun 2023 14:56:29 +0000
ROA not after: Thu 06 Jun 2024 15:01:29 +0000
asID: 267596
IP address blocks: 45.71.20.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:fd:58:a3:40:3c:a7:43:3d:63:fa:34:7e:ff:f0:06:c4:8d:d6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F37E9B61AA932590B95C490C03E35AFF96B9B9CF
Validity
Not Before: Jun 8 14:56:29 2023 GMT
Not After : Jun 6 15:01:29 2024 GMT
Subject: CN=D9132ECF890FAB73CF275CE18EA20F2139FC711C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:08:56:47:e0:3a:d7:e4:e9:2d:d8:7a:26:a9:
c0:84:fc:ff:dd:b4:3d:3c:49:5a:30:b4:93:d2:e4:
6f:a1:ea:40:75:50:12:39:e9:09:cc:5c:08:d6:bd:
7e:eb:85:df:96:48:e4:49:64:7f:b4:db:d1:4b:91:
d0:11:09:68:d4:64:45:13:be:2f:57:61:e0:a2:13:
b7:66:e6:87:bf:8b:86:96:63:10:ce:f5:ad:b3:4a:
e4:93:b5:bb:f4:e2:24:1b:b7:b0:1a:77:da:22:10:
aa:b0:c3:4a:39:4a:71:49:9f:b2:ff:43:27:0c:b5:
65:c0:f7:61:f2:f2:ea:39:10:b3:30:e8:ee:5c:5a:
77:3c:f6:00:18:a5:d1:42:ef:b2:7a:a9:75:f9:af:
60:87:5d:04:54:fd:fd:60:96:5a:8c:71:c2:98:9d:
33:4b:90:e7:c6:17:95:c9:81:4f:b2:ee:60:53:04:
c4:e4:12:5c:27:bc:a1:6a:73:96:72:7b:a0:5b:cc:
da:e5:c0:98:8f:74:ba:8b:7d:3d:80:b5:ca:ed:2a:
ba:7e:8a:08:98:a8:2b:4b:45:4e:42:e4:a5:b1:90:
8a:8a:d6:83:8b:39:8c:ae:1d:88:01:21:e4:fd:7e:
66:06:19:c1:8e:b4:74:b9:d3:df:c9:f9:d6:20:02:
10:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:13:2E:CF:89:0F:AB:73:CF:27:5C:E1:8E:A2:0F:21:39:FC:71:1C
X509v3 Authority Key Identifier:
keyid:F3:7E:9B:61:AA:93:25:90:B9:5C:49:0C:03:E3:5A:FF:96:B9:B9:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F37E9B61AA932590B95C490C03E35AFF96B9B9CF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32302e302f32322d3234203d3e20323637353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.20.0/22
Signature Algorithm: sha256WithRSAEncryption
99:0f:74:4e:9e:35:3e:44:91:36:05:2a:90:da:93:b5:0f:82:
7a:3a:12:f3:ae:91:f8:3d:f1:33:09:29:ce:6a:77:ab:bf:6f:
23:8f:c2:54:91:d0:1b:4f:a8:3a:a2:a0:0b:c2:46:4e:3d:27:
1c:ec:a7:fb:ed:5e:a2:21:da:7b:00:07:77:d9:73:cb:eb:6a:
40:5e:ea:76:9f:5d:15:14:fa:6f:c6:6b:36:e1:a5:8c:59:6e:
a4:d5:c5:14:66:9a:16:07:6c:8c:dd:c8:0f:4e:33:f6:cb:fb:
cd:fd:81:d7:21:11:93:f6:ff:e2:45:f7:c9:b6:c1:65:c8:8c:
97:ce:1b:6c:d6:06:e2:94:bf:2f:d9:72:48:50:ce:0c:86:4b:
fe:a3:a4:ab:4e:f7:d2:08:99:75:a5:29:b7:f1:90:6f:66:af:
e6:a6:5e:76:e6:20:1c:f6:74:58:fc:3e:bc:6a:88:f2:91:77:
f3:96:9c:17:85:65:32:0b:23:fb:27:27:62:50:c2:4a:3b:0e:
8b:9c:22:0d:0e:9c:6e:12:9c:8e:5d:4c:9a:e2:45:06:14:c6:
e6:0e:a2:48:48:c8:01:d4:55:9c:0b:69:bf:d1:8e:71:63:a6:
99:24:53:08:20:32:00:bd:90:d2:1c:e9:95:a4:e8:17:df:11:
c8:a7:b1:c2
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUAv1Yo0A8p0M9Y/o0fv/wBsSN1mgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM3RTlCNjFBQTkzMjU5MEI5NUM0OTBDMDNFMzVBRkY5
NkI5QjlDRjAeFw0yMzA2MDgxNDU2MjlaFw0yNDA2MDYxNTAxMjlaMDMxMTAvBgNV
BAMTKEQ5MTMyRUNGODkwRkFCNzNDRjI3NUNFMThFQTIwRjIxMzlGQzcxMUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoCFZH4DrX5Okt2HomqcCE/P/d
tD08SVowtJPS5G+h6kB1UBI56QnMXAjWvX7rhd+WSORJZH+029FLkdARCWjUZEUT
vi9XYeCiE7dm5oe/i4aWYxDO9a2zSuSTtbv04iQbt7Aad9oiEKqww0o5SnFJn7L/
QycMtWXA92Hy8uo5ELMw6O5cWnc89gAYpdFC77J6qXX5r2CHXQRU/f1gllqMccKY
nTNLkOfGF5XJgU+y7mBTBMTkElwnvKFqc5Zye6BbzNrlwJiPdLqLfT2AtcrtKrp+
igiYqCtLRU5C5KWxkIqK1oOLOYyuHYgBIeT9fmYGGcGOtHS509/J+dYgAhB9AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU2RMuz4kPq3PPJ1zhjqIPITn8cRwwHwYDVR0j
BBgwFoAU836bYaqTJZC5XEkMA+Na/5a5uc8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkE1YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3
c3ovMC9GMzdFOUI2MUFBOTMyNTkwQjk1QzQ5MEMwM0UzNUFGRjk2QjlCOUNGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0YzN0U5QjYxQUE5MzI1OTBC
OTVDNDkwQzAzRTM1QUZGOTZCOUI5Q0YuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pBNWFHZlBTNVhoMkR6VGJYb000aE02ekYxdVl5NnFmVlhUTFVqRlU2N3N6LzAv
MzQzNTJlMzczMTJlMzIzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzM1
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi1HFDANBgkqhkiG9w0BAQsFAAOCAQEAmQ90Tp41PkSR
NgUqkNqTtQ+CejoS866R+D3xMwkpzmp3q79vI4/CVJHQG0+oOqKgC8JGTj0nHOyn
++1eoiHaewAHd9lzy+tqQF7qdp9dFRT6b8ZrNuGljFlupNXFFGaaFgdsjN3ID04z
9sv7zf2B1yERk/b/4kX3ybbBZciMl84bbNYG4pS/L9lySFDODIZL/qOkq0730giZ
daUpt/GQb2av5qZeduYgHPZ0WPw+vGqI8pF385acF4VlMgsj+ycnYlDCSjsOi5wi
DQ6cbhKcjl1MmuJFBhTG5g6iSEjIAdRVnAtpv9GOcWOmmSRTCCAyAL2Q0hzplaTo
F98RyKexwg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:23 2025 by rpki-client