Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3234203d3e20323638383431.roa
File: 34352e3137342e302e302f32322d3234203d3e20323638383431.roa (raw, json)
Hash identifier: +DIAWk1hHJWZFMMLAC3BwMomMLZO4I9/bYgyairt5DM=
Subject key identifier: E9:59:02:48:6F:08:9A:5E:84:6B:58:22:C6:C2:02:E8:11:97:C0:CC
Certificate issuer: /CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Certificate serial: 637F4F789B3D11DB834B70D72E7FBB365754B537
Authority key identifier: 5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3234203d3e20323638383431.roa
Signing time: Sat 25 Jan 2025 11:19:20 +0000
ROA not before: Sat 25 Jan 2025 11:14:20 +0000
ROA not after: Sat 24 Jan 2026 11:19:20 +0000
asID: 268841
IP address blocks: 45.174.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7f:4f:78:9b:3d:11:db:83:4b:70:d7:2e:7f:bb:36:57:54:b5:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Validity
Not Before: Jan 25 11:14:20 2025 GMT
Not After : Jan 24 11:19:20 2026 GMT
Subject: CN=E95902486F089A5E846B5822C6C202E81197C0CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:95:16:1a:52:cb:8b:bb:69:09:6e:92:4b:
26:46:61:d2:6e:d8:57:25:9e:92:10:ca:62:f4:87:
a2:06:a5:c0:d0:ce:01:c9:83:52:07:f4:35:b6:ce:
30:46:57:e4:28:da:34:ee:83:8d:d1:cf:e0:bc:1c:
10:e7:ac:1e:83:b4:80:4f:d7:42:55:0c:9f:7d:41:
2a:cf:c3:14:00:2a:51:c5:71:86:c8:15:e0:ed:7a:
fd:63:48:7a:23:24:54:5d:e2:71:e0:f0:b3:2c:c2:
8a:65:ed:d6:17:1d:44:6a:6d:1c:f4:a3:de:f0:c0:
57:73:f2:95:22:22:22:4e:fb:83:f2:4b:ef:e2:30:
69:45:56:f8:e9:60:da:95:05:78:65:67:f9:bd:a2:
ac:04:e0:da:80:ae:0d:44:7f:8c:79:b6:5c:98:56:
4c:91:c1:09:2c:15:e0:a6:96:d0:34:d5:46:5e:80:
19:69:44:ec:74:d4:4c:66:5c:ca:fc:92:1a:21:83:
20:a7:29:5f:fd:f7:a6:f7:d8:d6:ee:5e:16:70:b2:
e1:a4:98:f5:6f:72:df:00:d0:dd:62:7a:f0:d1:32:
f0:a1:ed:8d:5b:28:b2:aa:d0:b5:83:da:af:ec:0b:
e9:56:20:13:29:2d:e1:ef:19:a4:76:6a:eb:c3:c2:
c0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:59:02:48:6F:08:9A:5E:84:6B:58:22:C6:C2:02:E8:11:97:C0:CC
X509v3 Authority Key Identifier:
keyid:5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3234203d3e20323638383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.0.0/22
Signature Algorithm: sha256WithRSAEncryption
81:7a:84:f1:69:ad:2d:b0:93:bd:a5:62:9c:8d:a2:29:16:cf:
ed:1d:3a:53:6b:f2:2f:d2:98:c1:9c:78:a1:f4:db:81:17:8d:
84:f7:a9:b5:aa:21:0e:35:7e:c5:bf:0b:ba:fc:50:2c:e8:f0:
12:5f:8d:36:89:03:04:b0:74:03:4d:18:97:c7:2f:e9:18:17:
73:ee:cb:51:e2:85:4c:9d:c5:cc:72:5a:2d:db:e5:5f:b4:cc:
9b:61:be:5a:92:23:1c:b7:78:37:bb:fd:e3:02:ee:ce:b7:cc:
44:79:66:55:39:13:a7:87:98:26:f1:46:ef:c4:35:d8:f2:5e:
55:81:a4:6b:18:f1:67:dd:88:3a:cf:bd:e0:9b:f4:1b:42:36:
e8:cf:18:4c:ca:c6:07:34:0b:32:c8:8c:16:a9:5c:05:32:75:
94:c4:dc:5f:02:c2:2d:51:5e:c5:14:14:66:10:2a:50:3c:6f:
98:52:ef:7d:95:61:e6:0b:49:f1:fb:b3:6d:2f:4d:14:01:bf:
8d:64:8d:04:23:84:97:5c:15:fe:47:51:48:1f:15:b1:82:ac:
22:f4:a9:2a:fd:f4:03:5b:d2:a8:ee:03:85:52:21:ab:ab:49:
c5:b5:34:26:79:c8:5d:fa:4e:75:3e:eb:0f:76:f5:37:2d:b3:
d7:14:d3:f5
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUY39PeJs9EduDS3DXLn+7NldUtTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUY1MjYzNkYyNEFFNjgwQTNGNjk2RUQ2RkRDRkIzMDU3
NEQ1QTdGQzAeFw0yNTAxMjUxMTE0MjBaFw0yNjAxMjQxMTE5MjBaMDMxMTAvBgNV
BAMTKEU5NTkwMjQ4NkYwODlBNUU4NDZCNTgyMkM2QzIwMkU4MTE5N0MwQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TpUWGlLLi7tpCW6SSyZGYdJu
2FclnpIQymL0h6IGpcDQzgHJg1IH9DW2zjBGV+Qo2jTug43Rz+C8HBDnrB6DtIBP
10JVDJ99QSrPwxQAKlHFcYbIFeDtev1jSHojJFRd4nHg8LMswopl7dYXHURqbRz0
o97wwFdz8pUiIiJO+4PyS+/iMGlFVvjpYNqVBXhlZ/m9oqwE4NqArg1Ef4x5tlyY
VkyRwQksFeCmltA01UZegBlpROx01ExmXMr8khohgyCnKV/996b32NbuXhZwsuGk
mPVvct8A0N1ievDRMvCh7Y1bKLKq0LWD2q/sC+lWIBMpLeHvGaR2auvDwsAfAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQU6VkCSG8Iml6Ea1gixsIC6BGXwMwwHwYDVR0j
BBgwFoAUX1JjbySuaAo/aW7W/c+zBXTVp/wwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NUTdhWGdva05DZ3N4VWo1U2RqaFZnQ1dobVY4R3M5ZkFtNjNMS0M4SkdG
LzAvNUY1MjYzNkYyNEFFNjgwQTNGNjk2RUQ2RkRDRkIzMDU3NEQ1QTdGQy5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS81RjUyNjM2RjI0QUU2ODBBM0Y2
OTZFRDZGRENGQjMwNTc0RDVBN0ZDLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
UTdhWGdva05DZ3N4VWo1U2RqaFZnQ1dobVY4R3M5ZkFtNjNMS0M4SkdGLzAvMzQz
NTJlMzEzNzM0MmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzODM4MzQz
MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAi2uADANBgkqhkiG9w0BAQsFAAOCAQEAgXqE8WmtLbCTvaVi
nI2iKRbP7R06U2vyL9KYwZx4ofTbgReNhPeptaohDjV+xb8LuvxQLOjwEl+NNokD
BLB0A00Yl8cv6RgXc+7LUeKFTJ3FzHJaLdvlX7TMm2G+WpIjHLd4N7v94wLuzrfM
RHlmVTkTp4eYJvFG78Q12PJeVYGkaxjxZ92IOs+94Jv0G0I26M8YTMrGBzQLMsiM
FqlcBTJ1lMTcXwLCLVFexRQUZhAqUDxvmFLvfZVh5gtJ8fuzbS9NFAG/jWSNBCOE
l1wV/kdRSB8VsYKsIvSpKv30A1vSqO4DhVIhq6tJxbU0JnnIXfpOdT7rD3b1Ny2z
1xTT9Q==
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:28:58 2025 by rpki-client