Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
File: 34352e37312e32322e302f32332d3233203d3e20323637353936.roa (raw, json)
Hash identifier: G4cy9w7sxr3n56ROdSBGrx5nv3CesIY4NjEkvH2sCow=
Subject key identifier: 2F:53:D9:B7:25:06:62:DC:16:D9:B6:F9:42:C9:2B:11:56:F9:19:7D
Certificate issuer: /CN=7A6E161A8B2B31DB30E03A950051D8233F43BE11
Certificate serial: 3E2088DE97105917CD9E10AA2272418D768E8E03
Authority key identifier: 7A:6E:16:1A:8B:2B:31:DB:30:E0:3A:95:00:51:D8:23:3F:43:BE:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
Signing time: Thu 15 Feb 2024 17:54:25 +0000
ROA not before: Thu 15 Feb 2024 17:49:25 +0000
ROA not after: Thu 13 Feb 2025 17:54:25 +0000
asID: 267596
IP address blocks: 45.71.22.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:20:88:de:97:10:59:17:cd:9e:10:aa:22:72:41:8d:76:8e:8e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A6E161A8B2B31DB30E03A950051D8233F43BE11
Validity
Not Before: Feb 15 17:49:25 2024 GMT
Not After : Feb 13 17:54:25 2025 GMT
Subject: CN=2F53D9B7250662DC16D9B6F942C92B1156F9197D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:49:4d:52:bc:b8:56:b6:8b:de:c2:eb:c1:75:
78:19:b7:b6:32:26:90:5c:66:45:56:4e:45:04:9a:
77:a6:44:31:f5:61:57:76:33:c8:20:36:52:8e:cf:
f5:19:a4:b9:f2:f9:c0:ff:2e:fb:fc:64:3b:de:48:
b2:e4:ac:48:cc:aa:4d:b0:32:42:af:34:a9:92:7b:
25:b1:7a:89:18:ef:93:d2:6c:bf:23:26:79:d0:24:
e5:76:c8:db:f5:0f:9d:2d:98:f4:5a:fe:7e:6e:34:
81:db:12:7b:cd:21:72:3f:70:58:bf:95:1b:b2:1b:
e7:5e:25:c8:32:92:0d:28:43:a1:00:e3:d5:58:b7:
a0:23:42:f1:ca:81:9a:20:5e:96:8c:be:d7:1f:cb:
4e:1b:83:8b:8c:76:04:95:04:43:a6:fb:da:e0:fb:
b2:42:e9:ba:50:51:fd:9b:80:2e:54:1d:a0:2c:ea:
ed:0c:4a:68:e6:e4:9f:c7:16:de:74:fa:24:c8:07:
a5:b7:89:80:4c:39:d3:6d:a9:d2:78:84:54:98:3b:
81:da:67:c8:15:a7:d3:fb:4f:f4:b3:89:b4:14:5b:
63:02:65:a0:ec:50:ac:15:41:73:d1:69:77:b7:dd:
49:30:d7:e6:5d:92:82:a9:c2:d3:94:f7:3b:19:d7:
11:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:53:D9:B7:25:06:62:DC:16:D9:B6:F9:42:C9:2B:11:56:F9:19:7D
X509v3 Authority Key Identifier:
keyid:7A:6E:16:1A:8B:2B:31:DB:30:E0:3A:95:00:51:D8:23:3F:43:BE:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A6E161A8B2B31DB30E03A950051D8233F43BE11.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JA5aGfPS5Xh2DzTbXoM4hM6zF1uYy6qfVXTLUjFU67sz/0/34352e37312e32322e302f32332d3233203d3e20323637353936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.22.0/23
Signature Algorithm: sha256WithRSAEncryption
39:ba:6e:c6:76:73:28:c3:8e:ec:0a:87:f5:01:f3:8a:cd:dc:
43:74:4c:e2:03:f9:5c:75:de:10:0e:a8:a5:19:b3:c4:9c:ce:
78:8c:a5:28:f4:27:03:02:2b:58:5b:e9:f5:bf:12:77:5f:4a:
b7:1b:29:34:0e:fc:7b:f1:a1:96:b4:5f:7e:d8:29:c5:21:9a:
be:31:25:c9:1e:01:f1:9f:e2:07:ff:3d:ef:31:f0:e7:0d:19:
de:01:42:4b:42:f0:1e:98:54:d2:d3:a9:aa:93:88:8d:a3:0a:
e1:aa:52:81:f8:7f:28:f0:fc:9f:c1:9b:cb:c4:f1:f8:85:70:
e4:42:30:12:67:21:74:f6:af:9a:60:8a:1e:a8:e1:fc:a3:41:
a2:f5:86:a4:71:12:3b:21:1b:aa:0e:bf:54:5d:6b:2c:5c:b7:
89:b6:4a:10:2a:41:6c:63:7e:4a:24:98:19:c4:3b:f1:95:63:
47:ec:c7:53:8b:48:87:66:dc:98:99:71:23:0c:dc:bd:a8:cf:
bb:2c:e5:62:7a:b3:2c:8c:45:cf:8b:b4:16:ce:23:58:a9:b1:
9f:bc:9c:fd:5d:87:28:0e:ae:b5:0a:91:80:5c:10:81:ff:68:
15:63:41:bb:52:9d:77:58:aa:ae:31:3d:2f:bf:be:e5:d5:81:
70:e0:05:9b
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUPiCI3pcQWRfNnhCqInJBjXaOjgMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0E2RTE2MUE4QjJCMzFEQjMwRTAzQTk1MDA1MUQ4MjMz
RjQzQkUxMTAeFw0yNDAyMTUxNzQ5MjVaFw0yNTAyMTMxNzU0MjVaMDMxMTAvBgNV
BAMTKDJGNTNEOUI3MjUwNjYyREMxNkQ5QjZGOTQyQzkyQjExNTZGOTE5N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZSU1SvLhWtovewuvBdXgZt7Yy
JpBcZkVWTkUEmnemRDH1YVd2M8ggNlKOz/UZpLny+cD/Lvv8ZDveSLLkrEjMqk2w
MkKvNKmSeyWxeokY75PSbL8jJnnQJOV2yNv1D50tmPRa/n5uNIHbEnvNIXI/cFi/
lRuyG+deJcgykg0oQ6EA49VYt6AjQvHKgZogXpaMvtcfy04bg4uMdgSVBEOm+9rg
+7JC6bpQUf2bgC5UHaAs6u0MSmjm5J/HFt50+iTIB6W3iYBMOdNtqdJ4hFSYO4Ha
Z8gVp9P7T/SzibQUW2MCZaDsUKwVQXPRaXe33Ukw1+ZdkoKpwtOU9zsZ1xHHAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUL1PZtyUGYtwW2bb5QskrEVb5GX0wHwYDVR0j
BBgwFoAUem4WGosrMdsw4DqVAFHYIz9DvhEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSkE1YUdmUFM1WGgyRHpUYlhvTTRoTTZ6RjF1WXk2cWZWWFRMVWpGVTY3
c3ovMC83QTZFMTYxQThCMkIzMURCMzBFMDNBOTUwMDUxRDgyMzNGNDNCRTExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzdBNkUxNjFBOEIyQjMxREIz
MEUwM0E5NTAwNTFEODIzM0Y0M0JFMTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0pBNWFHZlBTNVhoMkR6VGJYb000aE02ekYxdVl5NnFmVlhUTFVqRlU2N3N6LzAv
MzQzNTJlMzczMTJlMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMyMzYzNzM1
MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAS1HFjANBgkqhkiG9w0BAQsFAAOCAQEAObpuxnZzKMOO
7AqH9QHzis3cQ3RM4gP5XHXeEA6opRmzxJzOeIylKPQnAwIrWFvp9b8Sd19Ktxsp
NA78e/GhlrRfftgpxSGavjElyR4B8Z/iB/897zHw5w0Z3gFCS0LwHphU0tOpqpOI
jaMK4apSgfh/KPD8n8Gby8Tx+IVw5EIwEmchdPavmmCKHqjh/KNBovWGpHESOyEb
qg6/VF1rLFy3ibZKECpBbGN+SiSYGcQ78ZVjR+zHU4tIh2bcmJlxIwzcvajPuyzl
YnqzLIxFz4u0Fs4jWKmxn7yc/V2HKA6utQqRgFwQgf9oFWNBu1Kdd1iqrjE9L7++
5dWBcOAFmw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org