Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137322e302f32322d3234203d3e20323638303334.roa
File: 34352e3136372e3137322e302f32322d3234203d3e20323638303334.roa (raw, json)
Hash identifier: N8KbslTc9CckHITTQ39hIaxpxKAUxX3LmrmrNLUkXso=
Subject key identifier: 0D:FC:E8:BF:B6:CF:D4:1B:F1:57:A8:5F:FF:71:CB:63:15:63:D5:3D
Certificate issuer: /CN=8CCF22873E634698CEE5348EF53F753A789078D6
Certificate serial: 7249DC8C64C4E7D05C3535106179C076010D486B
Authority key identifier: 8C:CF:22:87:3E:63:46:98:CE:E5:34:8E:F5:3F:75:3A:78:90:78:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CCF22873E634698CEE5348EF53F753A789078D6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137322e302f32322d3234203d3e20323638303334.roa
Signing time: Tue 22 Aug 2023 21:36:54 +0000
ROA not before: Tue 22 Aug 2023 21:31:54 +0000
ROA not after: Tue 20 Aug 2024 21:36:54 +0000
asID: 268034
IP address blocks: 45.167.172.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:49:dc:8c:64:c4:e7:d0:5c:35:35:10:61:79:c0:76:01:0d:48:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CCF22873E634698CEE5348EF53F753A789078D6
Validity
Not Before: Aug 22 21:31:54 2023 GMT
Not After : Aug 20 21:36:54 2024 GMT
Subject: CN=0DFCE8BFB6CFD41BF157A85FFF71CB631563D53D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:4d:24:39:77:81:e9:80:bd:f0:69:a1:c7:
33:79:14:f0:68:3f:a0:49:8a:9e:58:bb:ec:6c:d9:
a6:6a:b8:9d:d2:d0:36:c0:10:9c:cb:23:3c:6e:af:
fc:c3:05:1b:be:af:0a:04:4c:1c:a3:56:e5:00:1c:
74:a9:be:a8:32:35:13:f3:e5:1b:96:66:ba:c1:72:
27:15:ca:93:9d:e7:a3:ab:d8:05:b4:42:e3:e0:ef:
33:7c:b0:1a:0d:a6:36:95:b9:8f:00:24:78:72:2f:
a9:52:4c:5a:61:cf:40:99:cb:e9:de:cf:ca:71:fd:
71:4d:48:e0:69:35:84:71:42:ff:82:25:43:ed:95:
32:e1:81:6b:d7:61:24:65:1b:8e:40:87:5c:cd:0c:
bc:c7:06:51:61:10:7e:40:66:e1:bc:f4:d5:9b:1a:
c0:23:54:2f:6c:8a:a5:90:53:a6:6b:b8:24:43:1d:
0a:2c:28:74:cd:16:4e:4e:b6:27:89:c8:3b:a7:5d:
cb:83:0a:34:19:3d:3b:76:af:0d:9d:66:6a:d1:a1:
bc:56:42:f4:17:d8:74:e0:4e:0e:06:43:79:0b:1d:
1d:9c:74:8c:67:f7:87:09:0d:04:a1:c3:d9:f4:4b:
ef:18:87:f8:89:e9:f0:ef:ca:5a:7e:ad:7a:14:60:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FC:E8:BF:B6:CF:D4:1B:F1:57:A8:5F:FF:71:CB:63:15:63:D5:3D
X509v3 Authority Key Identifier:
keyid:8C:CF:22:87:3E:63:46:98:CE:E5:34:8E:F5:3F:75:3A:78:90:78:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/8CCF22873E634698CEE5348EF53F753A789078D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CCF22873E634698CEE5348EF53F753A789078D6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/34352e3136372e3137322e302f32322d3234203d3e20323638303334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.172.0/22
Signature Algorithm: sha256WithRSAEncryption
17:6c:4a:27:c9:76:83:7b:cc:ed:e6:cc:7b:e5:e6:dc:bd:a3:
64:e7:1c:a3:cb:18:cd:45:1c:1f:8a:a8:de:19:a4:ef:2b:48:
bf:ec:fc:4e:2b:77:a6:73:d9:f4:a5:5c:b8:74:4c:77:07:1a:
93:c7:ad:0f:62:bc:b2:a1:46:89:2c:55:be:ba:38:44:65:d0:
45:b2:b4:e7:dd:1b:44:d6:a6:52:2b:8b:0c:c0:b7:05:cb:16:
71:e5:ad:61:89:fe:89:c2:5b:f1:36:f3:69:bf:c1:1b:42:1f:
46:72:40:2e:4d:ff:8a:51:4a:2a:d5:16:d5:61:39:55:53:fe:
ff:93:73:7c:87:93:b0:5f:0a:36:82:57:29:03:9e:73:0c:78:
da:c6:ff:25:7c:65:68:4f:d3:a5:17:77:63:ad:2f:07:99:64:
2f:3b:3c:42:b6:5e:14:c4:df:4b:55:25:ce:4a:93:50:3a:cf:
d9:70:f1:e3:d1:b0:cc:fc:6b:a2:6c:1d:c3:b9:77:b9:13:60:
6e:24:5f:f4:83:cd:e5:c4:42:29:ad:3c:ca:a6:2b:65:ce:e8:
f6:5d:f0:e2:ab:1f:b5:14:00:b4:57:8d:64:03:0d:5c:2d:66:
41:08:97:32:77:7c:3c:f7:cc:80:fc:47:0a:0f:8b:50:8f:bd:
32:20:c2:f3
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUckncjGTE59BcNTUQYXnAdgENSGswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENDRjIyODczRTYzNDY5OENFRTUzNDhFRjUzRjc1M0E3
ODkwNzhENjAeFw0yMzA4MjIyMTMxNTRaFw0yNDA4MjAyMTM2NTRaMDMxMTAvBgNV
BAMTKDBERkNFOEJGQjZDRkQ0MUJGMTU3QTg1RkZGNzFDQjYzMTU2M0Q1M0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjuk0kOXeB6YC98GmhxzN5FPBo
P6BJip5Yu+xs2aZquJ3S0DbAEJzLIzxur/zDBRu+rwoETByjVuUAHHSpvqgyNRPz
5RuWZrrBcicVypOd56Or2AW0QuPg7zN8sBoNpjaVuY8AJHhyL6lSTFphz0CZy+ne
z8px/XFNSOBpNYRxQv+CJUPtlTLhgWvXYSRlG45Ah1zNDLzHBlFhEH5AZuG89NWb
GsAjVC9siqWQU6ZruCRDHQosKHTNFk5OtieJyDunXcuDCjQZPTt2rw2dZmrRobxW
QvQX2HTgTg4GQ3kLHR2cdIxn94cJDQShw9n0S+8Yh/iJ6fDvylp+rXoUYGF9AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUDfzov7bP1BvxV6hf/3HLYxVj1T0wHwYDVR0j
BBgwFoAUjM8ihz5jRpjO5TSO9T91OniQeNYwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9NU2NhQWs5VHkzd2VWTEJjWjV2a0RXU2Y0WjJvYlQzWFhpaWNwaXYydlBM
LzAvOENDRjIyODczRTYzNDY5OENFRTUzNDhFRjUzRjc1M0E3ODkwNzhENi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMC84Q0NGMjI4NzNFNjM0Njk4Q0VF
NTM0OEVGNTNGNzUzQTc4OTA3OEQ2LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9N
U2NhQWs5VHkzd2VWTEJjWjV2a0RXU2Y0WjJvYlQzWFhpaWNwaXYydlBMLzAvMzQz
NTJlMzEzNjM3MmUzMTM3MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MDMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAItp6wwDQYJKoZIhvcNAQELBQADggEBABdsSifJdoN7
zO3mzHvl5ty9o2TnHKPLGM1FHB+KqN4ZpO8rSL/s/E4rd6Zz2fSlXLh0THcHGpPH
rQ9ivLKhRoksVb66OERl0EWytOfdG0TWplIriwzAtwXLFnHlrWGJ/onCW/E282m/
wRtCH0ZyQC5N/4pRSirVFtVhOVVT/v+Tc3yHk7BfCjaCVykDnnMMeNrG/yV8ZWhP
06UXd2OtLweZZC87PEK2XhTE30tVJc5Kk1A6z9lw8ePRsMz8a6JsHcO5d7kTYG4k
X/SDzeXEQimtPMqmK2XO6PZd8OKrH7UUALRXjWQDDVwtZkEIlzJ3fDz3zID8RwoP
i1CPvTIgwvM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org