Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
File: 34352e3233362e382e302f32342d3234203d3e20323638323133.roa (raw, json)
Hash identifier: NSij1b1nUSx2gha/ufooe05zIpDMewFaL4O2HdmZpDs=
Subject key identifier: 66:E7:55:97:49:54:DC:E0:A8:3B:66:A3:86:09:E7:28:A9:EA:F7:5D
Certificate issuer: /CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
Certificate serial: 2868C807F3666C6EA670DD09136CD0AAB022258D
Authority key identifier: BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer
Subject info access: rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
Signing time: Fri 30 Aug 2024 19:52:32 +0000
ROA not before: Fri 30 Aug 2024 19:47:32 +0000
ROA not after: Fri 29 Aug 2025 19:52:32 +0000
asID: 268213
IP address blocks: 45.236.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:68:c8:07:f3:66:6c:6e:a6:70:dd:09:13:6c:d0:aa:b0:22:25:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD3C6F3B1223FA6345D28272334E1F496EA34741
Validity
Not Before: Aug 30 19:47:32 2024 GMT
Not After : Aug 29 19:52:32 2025 GMT
Subject: CN=66E755974954DCE0A83B66A38609E728A9EAF75D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4f:d5:41:f4:63:07:15:81:7e:5e:24:45:22:
e8:93:b9:ac:5f:8a:d3:c6:2b:37:8e:01:a7:e1:f2:
6d:91:9d:86:4d:04:62:21:73:99:73:5a:70:85:9d:
5b:76:ed:1e:b3:45:e3:1b:a9:4f:82:dd:ce:b2:dc:
76:d3:6b:66:29:90:10:7b:df:b5:2f:89:b9:f3:7c:
5d:cf:3c:2a:e0:2f:b4:f5:12:88:95:21:0c:6a:cf:
32:b6:e2:ab:b7:75:54:d4:58:f8:3c:73:77:bf:30:
b7:db:6b:5f:26:05:e0:e5:c0:25:d4:8f:23:ae:34:
f5:42:2d:54:9a:8f:c9:57:31:c4:30:e7:2b:62:5f:
37:5e:74:a1:7a:55:75:c3:70:62:07:b4:93:46:05:
dd:53:c7:0e:14:ea:22:59:9e:2b:3d:83:0c:f9:2e:
53:75:ce:57:d9:ac:b0:02:2b:64:05:6f:44:14:47:
d7:f5:c1:f0:cf:f5:1c:42:ab:94:8c:7c:cf:30:c0:
8e:71:10:72:be:84:ca:55:62:36:18:b6:3b:95:2c:
d1:3e:62:46:dd:72:be:cd:a9:dd:c4:9a:7b:93:61:
f2:84:76:78:6b:18:f4:44:17:ee:e7:39:d5:e7:b2:
4f:b6:91:b3:86:e2:ca:ab:9a:34:4b:d1:8d:b5:99:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E7:55:97:49:54:DC:E0:A8:3B:66:A3:86:09:E7:28:A9:EA:F7:5D
X509v3 Authority Key Identifier:
keyid:BD:3C:6F:3B:12:23:FA:63:45:D2:82:72:33:4E:1F:49:6E:A3:47:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/BD3C6F3B1223FA6345D28272334E1F496EA34741.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD3C6F3B1223FA6345D28272334E1F496EA34741.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/WBZmgwfWtJpyUS2Jx8LyK8aBd4gvGRQSLXHNq7Xe7HU/0/34352e3233362e382e302f32342d3234203d3e20323638323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.8.0/24
Signature Algorithm: sha256WithRSAEncryption
59:80:c1:23:16:cb:e6:c6:78:5b:15:eb:ba:c5:d0:bc:68:4f:
9f:d2:4c:de:e9:18:35:bd:79:04:7c:8f:0c:52:97:00:c0:2c:
c7:47:b1:55:a3:5f:2f:dd:ab:8d:3a:ca:78:8c:90:9c:09:37:
0b:45:4e:87:d4:97:f3:49:c8:88:87:fb:90:c3:0f:1f:6d:d6:
f1:97:3c:9d:a7:39:98:0c:71:37:36:e5:7a:fa:3a:18:73:07:
bd:47:3f:d0:82:be:80:e0:e9:82:37:8e:48:bb:eb:03:73:a2:
2c:06:5d:dd:03:16:b4:ae:5f:c4:80:d5:8c:62:15:79:51:3f:
cf:5c:f2:67:05:f6:fe:4e:ce:a9:2c:ef:39:4c:93:b0:4c:c3:
6e:d3:42:43:ed:81:ce:16:86:75:78:56:af:78:0b:b2:9a:b3:
4b:f5:c0:72:8f:e2:c0:f4:b1:6e:3c:d4:19:a7:1e:e8:14:2b:
6b:09:f1:e0:1a:93:84:1d:f8:8d:96:9d:55:e3:4e:85:87:b9:
6c:3f:bb:13:19:1c:e0:0c:fd:4c:02:16:e4:1a:b5:0e:e2:c6:
ca:dc:dc:3a:41:15:ce:ee:70:9b:ba:cd:8c:62:f2:c3:40:44:
42:c9:5d:b8:2c:0b:c9:90:15:e9:9c:a7:e7:c0:f6:2e:a6:ce:
01:9f:28:3a
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUKGjIB/NmbG6mcN0JE2zQqrAiJY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkQzQzZGM0IxMjIzRkE2MzQ1RDI4MjcyMzM0RTFGNDk2
RUEzNDc0MTAeFw0yNDA4MzAxOTQ3MzJaFw0yNTA4MjkxOTUyMzJaMDMxMTAvBgNV
BAMTKDY2RTc1NTk3NDk1NERDRTBBODNCNjZBMzg2MDlFNzI4QTlFQUY3NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaT9VB9GMHFYF+XiRFIuiTuaxf
itPGKzeOAafh8m2RnYZNBGIhc5lzWnCFnVt27R6zReMbqU+C3c6y3HbTa2YpkBB7
37UvibnzfF3PPCrgL7T1EoiVIQxqzzK24qu3dVTUWPg8c3e/MLfba18mBeDlwCXU
jyOuNPVCLVSaj8lXMcQw5ytiXzdedKF6VXXDcGIHtJNGBd1Txw4U6iJZnis9gwz5
LlN1zlfZrLACK2QFb0QUR9f1wfDP9RxCq5SMfM8wwI5xEHK+hMpVYjYYtjuVLNE+
Ykbdcr7Nqd3EmnuTYfKEdnhrGPREF+7nOdXnsk+2kbOG4sqrmjRL0Y21mRl3AgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUZudVl0lU3OCoO2ajhgnnKKnq910wHwYDVR0j
BBgwFoAUvTxvOxIj+mNF0oJyM04fSW6jR0EwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9XQlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hV
LzAvQkQzQzZGM0IxMjIzRkE2MzQ1RDI4MjcyMzM0RTFGNDk2RUEzNDc0MS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CRDNDNkYzQjEyMjNGQTYzNDVE
MjgyNzIzMzRFMUY0OTZFQTM0NzQxLmNlcjCBqQYIKwYBBQUHAQsEgZwwgZkwgZYG
CCsGAQUFBzALhoGJcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9X
QlptZ3dmV3RKcHlVUzJKeDhMeUs4YUJkNGd2R1JRU0xYSE5xN1hlN0hVLzAvMzQz
NTJlMzIzMzM2MmUzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzYzODMyMzEz
My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ
MA4wDAQCAAEwBgMEAC3sCDANBgkqhkiG9w0BAQsFAAOCAQEAWYDBIxbL5sZ4WxXr
usXQvGhPn9JM3ukYNb15BHyPDFKXAMAsx0exVaNfL92rjTrKeIyQnAk3C0VOh9SX
80nIiIf7kMMPH23W8Zc8nac5mAxxNzblevo6GHMHvUc/0IK+gODpgjeOSLvrA3Oi
LAZd3QMWtK5fxIDVjGIVeVE/z1zyZwX2/k7OqSzvOUyTsEzDbtNCQ+2BzhaGdXhW
r3gLspqzS/XAco/iwPSxbjzUGace6BQrawnx4BqThB34jZadVeNOhYe5bD+7Exkc
4Az9TAIW5Bq1DuLGytzcOkEVzu5wm7rNjGLyw0BEQslduCwLyZAV6Zyn58D2LqbO
AZ8oOg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:12 2025 by rpki-client