Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
File: 34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa (raw, json)
Hash identifier: ekqpN325Er5rgfUQrpnvNSOxW5/EO9gNUijdhzNi768=
Subject key identifier: AD:51:39:92:74:6B:83:20:1A:5F:EC:0D:64:D9:10:4C:4C:E1:25:EB
Certificate issuer: /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial: 590A184CE92FE80C5B26E7E6421C148FCB4C3293
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
Signing time: Wed 03 Apr 2024 18:30:10 +0000
ROA not before: Wed 03 Apr 2024 18:25:10 +0000
ROA not after: Wed 02 Apr 2025 18:30:10 +0000
asID: 268092
IP address blocks: 45.168.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:0a:18:4c:e9:2f:e8:0c:5b:26:e7:e6:42:1c:14:8f:cb:4c:32:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Validity
Not Before: Apr 3 18:25:10 2024 GMT
Not After : Apr 2 18:30:10 2025 GMT
Subject: CN=AD513992746B83201A5FEC0D64D9104C4CE125EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:a5:b1:45:b3:29:55:3f:78:8b:db:34:21:
63:fe:9a:cb:d3:3b:37:6e:ec:27:d5:58:4b:6d:24:
d0:6c:0b:7c:5e:53:1d:2d:c7:c1:f5:eb:e9:c4:7d:
67:24:52:49:85:67:1f:53:61:4b:cf:d9:34:c1:e4:
13:20:b3:7e:84:c3:5a:49:94:7b:c2:51:cd:5e:ef:
8f:56:e8:d9:20:85:ba:f0:94:96:86:4d:a4:1e:87:
6b:d6:71:4f:19:84:15:2c:f1:c1:b6:aa:70:a1:12:
2b:4f:2c:2a:cc:de:34:d1:ec:18:6c:d3:a2:2b:15:
a4:5a:eb:67:e3:f8:53:3f:87:1d:1a:3a:8e:15:d5:
75:ee:26:35:7c:d4:1b:50:bb:d7:85:6a:2b:67:22:
42:42:bd:73:b7:8b:dd:65:e9:6b:fe:93:56:a8:b7:
02:54:a5:52:ec:b1:2f:47:a6:92:55:32:88:16:fd:
da:2b:3a:35:31:aa:ea:d2:da:4c:e1:0d:c0:fe:ab:
80:2b:b8:17:b7:1d:34:09:5c:41:87:91:67:e4:b2:
77:4e:11:2b:d3:86:e7:cd:88:ee:0b:f9:c0:af:54:
2e:23:e3:4a:4d:6c:22:79:be:77:a6:36:36:c8:ab:
ab:21:83:ff:a7:44:32:e3:9d:c9:ba:09:2d:dd:dd:
9c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:39:92:74:6B:83:20:1A:5F:EC:0D:64:D9:10:4C:4C:E1:25:EB
X509v3 Authority Key Identifier:
keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.220.0/22
Signature Algorithm: sha256WithRSAEncryption
43:21:cb:9a:87:3b:6d:5b:6b:5a:9b:ba:3f:60:28:ed:ee:7e:
5c:95:64:0d:af:e3:b5:a2:1b:ef:ae:ca:7f:11:f0:64:4e:6e:
14:53:db:5b:c7:90:68:51:7a:c9:81:63:42:72:83:2e:aa:74:
9e:e6:ab:37:e7:70:96:ac:dc:aa:ad:98:ff:f6:9e:e9:81:40:
d7:99:92:a1:66:f6:11:30:98:d4:b9:c3:31:99:35:a0:2b:e6:
50:e2:c7:eb:d8:86:be:87:ce:da:b7:a6:fd:ff:f9:62:29:01:
5c:a2:65:3c:03:38:1d:c1:d0:ff:99:93:de:fb:4e:de:96:0f:
a7:28:f9:e8:1d:ce:e9:cd:b5:8c:3d:99:69:ec:28:6a:99:79:
db:06:ee:ae:47:9b:c1:20:b2:70:2a:cf:ca:fe:c8:fd:58:c5:
92:3c:a3:b3:4d:0a:88:bc:ff:e4:75:45:60:04:ab:50:5e:11:
5c:82:28:6d:a8:f8:75:bb:87:ba:4d:da:d3:88:71:a4:df:30:
f1:73:9a:a7:b6:10:07:86:51:c7:51:8f:ba:4d:30:7b:c6:87:
c2:28:48:71:7d:0d:be:e2:7c:56:75:e4:26:16:44:66:03:84:
48:b1:ad:1c:53:35:6d:b4:32:08:ee:66:48:84:e6:0d:90:55:
6c:94:d7:f4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUWQoYTOkv6AxbJufmQhwUj8tMMpMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEMzNzNEOEY3NjhCMTA1REEwMjQwQzZBRUE0MENEMUFE
NzYyRUJBNDAeFw0yNDA0MDMxODI1MTBaFw0yNTA0MDIxODMwMTBaMDMxMTAvBgNV
BAMTKEFENTEzOTkyNzQ2QjgzMjAxQTVGRUMwRDY0RDkxMDRDNENFMTI1RUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXP6WxRbMpVT94i9s0IWP+msvT
Ozdu7CfVWEttJNBsC3xeUx0tx8H16+nEfWckUkmFZx9TYUvP2TTB5BMgs36Ew1pJ
lHvCUc1e749W6NkghbrwlJaGTaQeh2vWcU8ZhBUs8cG2qnChEitPLCrM3jTR7Bhs
06IrFaRa62fj+FM/hx0aOo4V1XXuJjV81BtQu9eFaitnIkJCvXO3i91l6Wv+k1ao
twJUpVLssS9HppJVMogW/dorOjUxqurS2kzhDcD+q4AruBe3HTQJXEGHkWfksndO
ESvThufNiO4L+cCvVC4j40pNbCJ5vnemNjbIq6shg/+nRDLjncm6CS3d3Zx9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUrVE5knRrgyAaX+wNZNkQTEzhJeswHwYDVR0j
BBgwFoAUDDc9j3aLEF2gJAxq6kDNGtdi66QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1NuYUp3ZmpHWVk1VWVObmdkV012ajRxaFpjdGVSVG1qb0xaU1pnaU43
TEsvMS8wQzM3M0Q4Rjc2OEIxMDVEQTAyNDBDNkFFQTQwQ0QxQUQ3NjJFQkE0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzBDMzczRDhGNzY4QjEwNURB
MDI0MEM2QUVBNDBDRDFBRDc2MkVCQTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNTbmFKd2ZqR1lZNVVlTm5nZFdNdmo0cWhaY3RlUlRtam9MWlNaZ2lON0xLLzEv
MzQzNTJlMzEzNjM4MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMDM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItqNwwDQYJKoZIhvcNAQELBQADggEBAEMhy5qH
O21ba1qbuj9gKO3uflyVZA2v47WiG++uyn8R8GRObhRT21vHkGhResmBY0Jygy6q
dJ7mqzfncJas3KqtmP/2numBQNeZkqFm9hEwmNS5wzGZNaAr5lDix+vYhr6Hztq3
pv3/+WIpAVyiZTwDOB3B0P+Zk977Tt6WD6co+egdzunNtYw9mWnsKGqZedsG7q5H
m8EgsnAqz8r+yP1YxZI8o7NNCoi8/+R1RWAEq1BeEVyCKG2o+HW7h7pN2tOIcaTf
MPFzmqe2EAeGUcdRj7pNMHvGh8IoSHF9Db7ifFZ15CYWRGYDhEixrRxTNW20Mgju
ZkiE5g2QVWyU1/Q=
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:43:33 2025 by rpki-client