Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa
File: 34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier: Y95ZIQwyQ+nSPVtHIJmdIanSUc+nhQY1ilZeIovs6vo=
Subject key identifier: FA:91:56:FC:F8:30:04:7A:BB:AF:B7:C4:53:6E:25:82:48:7B:CB:85
Certificate issuer: /CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Certificate serial: 5F9C8BA4BD496CAB052EE2D97324E73AB5DAA081
Authority key identifier: D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa
Signing time: Thu 04 Apr 2024 00:02:22 +0000
ROA not before: Wed 03 Apr 2024 23:57:22 +0000
ROA not after: Thu 03 Apr 2025 00:02:22 +0000
asID: 268746
IP address blocks: 45.171.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:9c:8b:a4:bd:49:6c:ab:05:2e:e2:d9:73:24:e7:3a:b5:da:a0:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47
Validity
Not Before: Apr 3 23:57:22 2024 GMT
Not After : Apr 3 00:02:22 2025 GMT
Subject: CN=FA9156FCF830047ABBAFB7C4536E2582487BCB85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f4:15:28:c9:00:ae:71:74:a9:69:78:c2:c5:
a5:f6:a4:98:f5:f2:8f:13:26:b8:0c:d9:b9:6d:f6:
da:9d:73:2a:13:c2:13:9f:8f:ee:db:70:9c:07:d1:
40:0d:61:cb:68:a8:98:44:c9:70:d4:92:ae:a8:3f:
0c:0f:52:00:5d:47:54:56:f5:77:38:b9:53:77:02:
88:81:f3:90:28:c6:ec:d5:03:63:d0:55:72:9f:c8:
aa:c6:59:a4:27:90:8d:df:57:61:1f:c4:3b:59:93:
4c:1c:b9:8c:cb:4f:5b:9e:dd:c4:74:b1:19:43:b5:
95:d1:5f:3e:a7:76:81:ba:2a:c8:0a:90:46:fe:b9:
4a:06:2f:06:bb:53:bf:aa:77:c3:bb:02:6b:c7:dd:
bd:9c:5b:77:c5:67:ac:bd:0e:36:4f:15:27:d2:82:
dd:c4:7d:8f:39:c4:58:78:11:50:09:76:10:d8:5b:
c0:7f:3b:bb:97:ba:dd:f8:7b:04:a4:5c:bb:53:43:
ae:ed:36:5a:e5:20:3a:f6:d1:a4:28:48:b6:fd:76:
b0:45:7a:17:11:dc:8f:22:9e:64:17:83:86:7d:56:
ed:fe:3e:0a:38:1a:6e:e9:1b:30:2a:1b:55:bd:86:
8d:d4:5b:02:35:5b:d3:1c:1b:80:f1:9e:a2:7e:d2:
52:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:91:56:FC:F8:30:04:7A:BB:AF:B7:C4:53:6E:25:82:48:7B:CB:85
X509v3 Authority Key Identifier:
keyid:D1:EC:0A:15:7E:47:45:C6:E2:C4:AC:CE:96:C0:A9:2E:DE:9F:8B:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1EC0A157E4745C6E2C4ACCE96C0A92EDE9F8B47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/1/34352e3137312e3232382e302f32342d3234203d3e20323638373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.228.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:97:cf:24:ae:d5:4a:be:9c:11:d0:3b:5e:ae:3a:97:e0:1a:
b4:f1:de:f5:48:4f:d4:1c:6c:58:a8:ef:41:91:8f:51:90:23:
e9:81:b4:99:59:2d:d6:26:0e:3c:48:8b:73:ca:36:a0:3a:0d:
47:d8:ad:38:bf:4e:dd:41:d0:c5:70:4e:02:28:55:e2:bc:aa:
fc:b7:72:32:2f:05:c0:9b:39:b6:ec:bd:5c:b2:60:8a:dd:34:
28:72:83:50:9c:c5:64:bd:a6:e6:2e:e2:4e:1d:86:0f:9a:d5:
28:32:13:7f:b3:27:b4:ea:f8:8a:d7:f4:c8:41:cc:f7:4a:ce:
c5:26:67:48:09:8a:7c:2d:22:f6:38:c6:f1:9f:bf:0b:d8:66:
63:4d:f8:6e:b9:7a:1f:61:42:63:b8:2f:7c:41:73:de:c8:2b:
1b:ca:5b:9e:fc:bb:81:6d:79:c0:15:54:46:bc:f1:6a:37:7b:
27:24:1f:b5:a1:62:f0:21:71:9f:20:f7:41:f6:13:6a:12:f3:
5d:8c:40:d2:6b:01:51:37:da:f9:7f:a2:be:83:1c:76:2c:4c:
27:1b:89:17:cc:85:22:71:5e:ba:2a:27:cf:0d:d9:60:98:c1:
73:48:a0:82:4c:8f:73:7f:6f:d5:6a:11:84:84:17:75:cc:63:
a5:28:dd:a8
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUX5yLpL1JbKsFLuLZcyTnOrXaoIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFFQzBBMTU3RTQ3NDVDNkUyQzRBQ0NFOTZDMEE5MkVE
RTlGOEI0NzAeFw0yNDA0MDMyMzU3MjJaFw0yNTA0MDMwMDAyMjJaMDMxMTAvBgNV
BAMTKEZBOTE1NkZDRjgzMDA0N0FCQkFGQjdDNDUzNkUyNTgyNDg3QkNCODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9BUoyQCucXSpaXjCxaX2pJj1
8o8TJrgM2blt9tqdcyoTwhOfj+7bcJwH0UANYctoqJhEyXDUkq6oPwwPUgBdR1RW
9Xc4uVN3AoiB85AoxuzVA2PQVXKfyKrGWaQnkI3fV2EfxDtZk0wcuYzLT1ue3cR0
sRlDtZXRXz6ndoG6KsgKkEb+uUoGLwa7U7+qd8O7AmvH3b2cW3fFZ6y9DjZPFSfS
gt3EfY85xFh4EVAJdhDYW8B/O7uXut34ewSkXLtTQ67tNlrlIDr20aQoSLb9drBF
ehcR3I8inmQXg4Z9Vu3+Pgo4Gm7pGzAqG1W9ho3UWwI1W9McG4DxnqJ+0lJTAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU+pFW/PgwBHq7r7fEU24lgkh7y4UwHwYDVR0j
BBgwFoAU0ewKFX5HRcbixKzOlsCpLt6fi0cwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzEvRDFFQzBBMTU3RTQ3NDVDNkUyQzRBQ0NFOTZDMEE5MkVERTlGOEI0Ny5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9EMUVDMEExNTdFNDc0NUM2RTJD
NEFDQ0U5NkMwQTkyRURFOUY4QjQ3LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzEvMzQz
NTJlMzEzNzMxMmUzMjMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
NzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtq+QwDQYJKoZIhvcNAQELBQADggEBAE2XzySu1Uq+
nBHQO16uOpfgGrTx3vVIT9QcbFio70GRj1GQI+mBtJlZLdYmDjxIi3PKNqA6DUfY
rTi/Tt1B0MVwTgIoVeK8qvy3cjIvBcCbObbsvVyyYIrdNChyg1CcxWS9puYu4k4d
hg+a1SgyE3+zJ7Tq+IrX9MhBzPdKzsUmZ0gJinwtIvY4xvGfvwvYZmNN+G65eh9h
QmO4L3xBc97IKxvKW578u4FtecAVVEa88Wo3eyckH7WhYvAhcZ8g90H2E2oS812M
QNJrAVE32vl/or6DHHYsTCcbiRfMhSJxXroqJ88N2WCYwXNIoIJMj3N/b9VqEYSE
F3XMY6Uo3ag=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:45 2025 by rpki-client