Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32352e302f32342d3234203d3e20323638303931.roa
File: 34352e3136392e32352e302f32342d3234203d3e20323638303931.roa (raw, json)
Hash identifier: IhyEhVNj1prv6yCsLcMqOEjjX6wLriEB+A/U2xOefSI=
Subject key identifier: E6:00:36:3D:AC:12:D1:0E:0D:74:FA:6D:D8:88:BF:C0:09:9D:DE:D4
Certificate issuer: /CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
Certificate serial: 42686532DD3A48329335D71566CF9233032982CF
Authority key identifier: F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32352e302f32342d3234203d3e20323638303931.roa
Signing time: Sat 31 Aug 2024 14:14:51 +0000
ROA not before: Sat 31 Aug 2024 14:09:51 +0000
ROA not after: Sat 30 Aug 2025 14:14:51 +0000
asID: 268091
IP address blocks: 45.169.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:68:65:32:dd:3a:48:32:93:35:d7:15:66:cf:92:33:03:29:82:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
Validity
Not Before: Aug 31 14:09:51 2024 GMT
Not After : Aug 30 14:14:51 2025 GMT
Subject: CN=E600363DAC12D10E0D74FA6DD888BFC0099DDED4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fd:8f:65:dc:49:d9:a4:06:1b:ff:97:0e:b6:
15:7a:19:92:a2:8f:56:f3:68:36:03:71:b2:61:e5:
38:23:dd:b8:2a:22:62:bb:f1:86:f5:0f:9d:20:11:
a7:4e:61:51:4a:1f:e2:1c:a4:8c:d4:ce:3f:08:7a:
56:98:03:db:ec:04:ff:34:7a:6e:2d:00:12:5d:97:
b1:81:95:1c:ea:1c:41:90:40:09:c4:d2:cc:19:87:
4d:59:94:7d:ad:46:6b:51:5d:b7:d7:f7:b2:8a:c9:
e7:34:11:87:5a:48:1f:80:b1:a4:b2:63:8d:b7:31:
7f:0b:38:e8:6f:3c:d1:93:63:48:82:2d:12:1e:26:
94:2f:aa:29:a2:c8:c1:15:ce:90:d4:44:4f:18:86:
10:8a:95:13:08:49:29:05:76:fa:3d:f6:ef:b4:bc:
4d:30:92:8b:41:d1:11:12:6f:01:1d:f2:23:07:7f:
9b:b6:82:9f:53:a7:3a:34:28:60:76:20:48:0c:80:
ab:18:c3:d7:dd:fa:d4:10:c4:87:9f:62:bf:bf:7b:
83:87:42:11:cc:4a:df:84:05:48:7a:86:f9:67:9f:
b7:95:02:1e:35:1f:11:0f:f1:eb:60:df:8d:77:2e:
aa:f6:73:f3:82:9c:4e:60:2e:e3:9a:12:8a:40:84:
6c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:36:3D:AC:12:D1:0E:0D:74:FA:6D:D8:88:BF:C0:09:9D:DE:D4
X509v3 Authority Key Identifier:
keyid:F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32352e302f32342d3234203d3e20323638303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.25.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fa:d4:89:0e:8e:11:00:b8:ce:ec:3a:45:50:ea:ef:70:24:
0a:06:2d:fa:2b:81:2b:21:1a:02:93:1e:5b:f9:dd:4b:a7:7d:
e0:d6:3e:e2:6b:89:6b:cb:d3:7c:cb:72:1c:bf:4a:e6:2f:15:
f7:c2:41:53:ac:04:9d:a6:07:91:06:77:87:8b:cc:c0:33:b9:
45:cd:de:f9:01:fc:2a:46:ad:f5:b3:31:6d:d7:60:89:aa:ef:
0b:6e:c8:b6:69:73:2c:73:86:5f:e5:18:23:26:71:ca:7a:5a:
f9:9d:85:2d:d9:09:2e:07:54:8e:eb:cd:52:32:90:5d:f6:21:
af:63:50:ac:e7:96:fc:1a:6a:09:68:22:22:38:48:88:f4:34:
29:5b:b0:e8:20:f3:02:b3:34:47:ec:c0:f0:be:68:7c:53:ba:
1f:e2:2d:ff:b9:12:bd:64:3b:5d:e1:7f:a6:8f:2d:b9:f7:2d:
39:bc:3f:f1:0b:73:59:fe:5d:ce:e2:79:a0:ba:91:5a:94:21:
73:37:29:5e:c9:93:93:bc:51:fb:c8:42:a3:9c:a6:99:2c:e4:
5d:ad:f5:c9:c2:94:c3:71:b0:5e:f3:b7:49:af:d6:31:e4:47:
70:1b:cb:cd:40:a9:c2:ee:e0:80:c3:c4:71:b5:0c:22:22:07:
8c:0e:10:f7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQmhlMt06SDKTNdcVZs+SMwMpgs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjIxRDdCNDQxQ0QxN0IyN0RGNjYxNzUzRThFNjA3NDBB
QTVDREJGRTAeFw0yNDA4MzExNDA5NTFaFw0yNTA4MzAxNDE0NTFaMDMxMTAvBgNV
BAMTKEU2MDAzNjNEQUMxMkQxMEUwRDc0RkE2REQ4ODhCRkMwMDk5RERFRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/Y9l3EnZpAYb/5cOthV6GZKi
j1bzaDYDcbJh5Tgj3bgqImK78Yb1D50gEadOYVFKH+IcpIzUzj8IelaYA9vsBP80
em4tABJdl7GBlRzqHEGQQAnE0swZh01ZlH2tRmtRXbfX97KKyec0EYdaSB+AsaSy
Y423MX8LOOhvPNGTY0iCLRIeJpQvqimiyMEVzpDURE8YhhCKlRMISSkFdvo99u+0
vE0wkotB0RESbwEd8iMHf5u2gp9Tpzo0KGB2IEgMgKsYw9fd+tQQxIefYr+/e4OH
QhHMSt+EBUh6hvlnn7eVAh41HxEP8etg3413Lqr2c/OCnE5gLuOaEopAhGyZAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU5gA2PawS0Q4NdPpt2Ii/wAmd3tQwHwYDVR0j
BBgwFoAU8h17RBzReyffZhdT6OYHQKpc2/4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVn
RTgvMC9GMjFEN0I0NDFDRDE3QjI3REY2NjE3NTNFOEU2MDc0MEFBNUNEQkZFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0YyMUQ3QjQ0MUNEMTdCMjdE
RjY2MTc1M0U4RTYwNzQwQUE1Q0RCRkUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhOEtUTmFSTGZTMWdSOXg0OXB1dWJrdDl6bmZNTmh1ZUtoMlZlV0s1Z0U4LzAv
MzQzNTJlMzEzNjM5MmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALakZMA0GCSqGSIb3DQEBCwUAA4IBAQAZ+tSJDo4R
ALjO7DpFUOrvcCQKBi36K4ErIRoCkx5b+d1Lp33g1j7ia4lry9N8y3Icv0rmLxX3
wkFTrASdpgeRBneHi8zAM7lFzd75AfwqRq31szFt12CJqu8Lbsi2aXMsc4Zf5Rgj
JnHKelr5nYUt2QkuB1SO681SMpBd9iGvY1Cs55b8GmoJaCIiOEiI9DQpW7DoIPMC
szRH7MDwvmh8U7of4i3/uRK9ZDtd4X+mjy259y05vD/xC3NZ/l3O4nmgupFalCFz
NyleyZOTvFH7yEKjnKaZLORdrfXJwpTDcbBe87dJr9Yx5EdwG8vNQKnC7uCAw8Rx
tQwiIgeMDhD3
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:26:40 2025 by rpki-client