Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa
File: 34352e3138312e37322e302f32322d3234203d3e20323639313838.roa (raw, json)
Hash identifier: YDEpdlYFpDQjRgvt4iOHCpzEQgR+ygpy21+mS6ZqK/0=
Subject key identifier: EF:89:2C:ED:D0:5C:15:0C:91:94:78:77:43:9B:58:3F:3C:C1:31:B5
Certificate issuer: /CN=A2481D14FAE137FC69C2002900E8E133F914C990
Certificate serial: 5B7F92EE74F7F947D36424C05125B70CA116D507
Authority key identifier: A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa
Signing time: Fri 12 Jul 2024 17:50:38 +0000
ROA not before: Fri 12 Jul 2024 17:45:38 +0000
ROA not after: Fri 11 Jul 2025 17:50:38 +0000
asID: 269188
IP address blocks: 45.181.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7f:92:ee:74:f7:f9:47:d3:64:24:c0:51:25:b7:0c:a1:16:d5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2481D14FAE137FC69C2002900E8E133F914C990
Validity
Not Before: Jul 12 17:45:38 2024 GMT
Not After : Jul 11 17:50:38 2025 GMT
Subject: CN=EF892CEDD05C150C91947877439B583F3CC131B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:a0:be:16:74:8a:ff:1d:00:31:fc:8b:f0:
a1:90:c5:19:4b:52:a9:56:24:2a:02:7a:6a:70:df:
31:e1:f6:9c:b8:32:a2:ce:18:2b:de:b0:37:5f:c9:
13:70:4d:c5:02:d2:97:7b:f2:0f:12:35:cf:4f:2a:
ba:87:ba:19:e9:07:52:63:00:5e:ea:e4:84:2c:cd:
ae:10:8a:88:42:fc:b4:66:d9:7b:73:ed:8d:50:fe:
f7:24:c0:5c:4e:aa:ea:68:7a:b5:e5:8c:93:7d:a5:
cf:e6:ea:87:42:d0:4d:e4:13:bf:f1:2e:66:20:b5:
6d:a9:22:3d:6f:81:67:76:40:8d:96:ee:74:2a:27:
71:ad:cc:48:76:c9:fb:86:6d:fa:f3:96:11:bc:40:
2e:04:3a:f6:76:ea:2d:4b:e2:c1:38:45:bb:86:cc:
a3:58:5b:d5:a0:98:ab:28:dc:d5:94:77:bd:4e:5b:
92:9b:0f:a6:28:84:2e:86:b4:41:0a:8b:f6:37:cc:
00:9b:00:c1:47:40:d3:84:9a:bd:72:dc:b8:47:a4:
a4:2a:6e:c3:0f:87:42:8e:d9:ec:9e:f5:3a:9b:11:
7e:35:6b:ef:98:2b:6b:3b:82:7d:35:27:b9:4a:41:
de:65:73:b6:c3:eb:d0:81:0a:17:43:04:86:e1:54:
76:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:89:2C:ED:D0:5C:15:0C:91:94:78:77:43:9B:58:3F:3C:C1:31:B5
X509v3 Authority Key Identifier:
keyid:A2:48:1D:14:FA:E1:37:FC:69:C2:00:29:00:E8:E1:33:F9:14:C9:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/A2481D14FAE137FC69C2002900E8E133F914C990.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2481D14FAE137FC69C2002900E8E133F914C990.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qj2E1W1FAxkcb5NJXNDtxCugSTavmVLwuR8NKSavafo/0/34352e3138312e37322e302f32322d3234203d3e20323639313838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.72.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:4b:7f:c9:9a:49:4f:e3:27:c9:f4:3f:11:04:0d:be:27:73:
ec:6c:04:09:e1:ad:3f:26:f1:a4:56:9b:6a:61:61:3b:59:fb:
fa:7c:5d:52:b7:7b:dd:96:80:14:24:68:d7:09:c0:69:f3:21:
77:8e:0c:9f:b5:d1:89:80:25:73:79:86:aa:d6:99:ed:12:cb:
90:b6:cc:2a:2f:79:d7:a8:cc:fa:7a:6e:18:5e:13:ac:c5:48:
be:af:b0:0c:47:09:88:a5:f5:fa:82:56:f5:18:00:6b:c3:1c:
b7:7b:b5:e9:87:d6:4a:39:2b:7a:87:ea:5a:bc:78:41:36:10:
d4:a2:b2:98:f7:57:61:42:6e:1c:ea:7b:07:d8:ba:10:2a:c2:
69:19:e2:ad:26:30:4b:f4:d1:43:b8:3f:1a:00:d2:48:7c:2e:
c7:64:b3:ca:d3:91:36:3a:ad:97:be:99:6a:ec:79:78:ca:d2:
ad:e9:87:1b:30:12:93:76:b8:83:2a:fb:c5:ca:03:3e:f0:17:
43:99:72:97:c6:77:25:f7:31:16:94:42:19:8a:5c:9f:9f:4b:
c4:2a:62:49:0f:2f:a6:03:0d:85:ed:22:92:70:26:b3:ad:cd:
7d:31:76:1e:f6:3a:ff:13:d9:c2:32:0c:3f:ba:c8:59:45:03:
9f:41:05:f2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUW3+S7nT3+UfTZCTAUSW3DKEW1QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTI0ODFEMTRGQUUxMzdGQzY5QzIwMDI5MDBFOEUxMzNG
OTE0Qzk5MDAeFw0yNDA3MTIxNzQ1MzhaFw0yNTA3MTExNzUwMzhaMDMxMTAvBgNV
BAMTKEVGODkyQ0VERDA1QzE1MEM5MTk0Nzg3NzQzOUI1ODNGM0NDMTMxQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqKC+FnSK/x0AMfyL8KGQxRlL
UqlWJCoCempw3zHh9py4MqLOGCvesDdfyRNwTcUC0pd78g8SNc9PKrqHuhnpB1Jj
AF7q5IQsza4QiohC/LRm2Xtz7Y1Q/vckwFxOqupoerXljJN9pc/m6odC0E3kE7/x
LmYgtW2pIj1vgWd2QI2W7nQqJ3GtzEh2yfuGbfrzlhG8QC4EOvZ26i1L4sE4RbuG
zKNYW9WgmKso3NWUd71OW5KbD6YohC6GtEEKi/Y3zACbAMFHQNOEmr1y3LhHpKQq
bsMPh0KO2eye9TqbEX41a++YK2s7gn01J7lKQd5lc7bD69CBChdDBIbhVHZ7AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU74ks7dBcFQyRlHh3Q5tYPzzBMbUwHwYDVR0j
BBgwFoAUokgdFPrhN/xpwgApAOjhM/kUyZAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOXFqMkUxVzFGQXhrY2I1TkpYTkR0eEN1Z1NUYXZtVkx3dVI4TktTYXZh
Zm8vMC9BMjQ4MUQxNEZBRTEzN0ZDNjlDMjAwMjkwMEU4RTEzM0Y5MTRDOTkwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0EyNDgxRDE0RkFFMTM3RkM2
OUMyMDAyOTAwRThFMTMzRjkxNEM5OTAuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlxajJFMVcxRkF4a2NiNU5KWE5EdHhDdWdTVGF2bVZMd3VSOE5LU2F2YWZvLzAv
MzQzNTJlMzEzODMxMmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzEzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbVIMA0GCSqGSIb3DQEBCwUAA4IBAQArS3/JmklP
4yfJ9D8RBA2+J3PsbAQJ4a0/JvGkVptqYWE7Wfv6fF1St3vdloAUJGjXCcBp8yF3
jgyftdGJgCVzeYaq1pntEsuQtswqL3nXqMz6em4YXhOsxUi+r7AMRwmIpfX6glb1
GABrwxy3e7Xph9ZKOSt6h+pavHhBNhDUorKY91dhQm4c6nsH2LoQKsJpGeKtJjBL
9NFDuD8aANJIfC7HZLPK05E2Oq2Xvplq7Hl4ytKt6YcbMBKTdriDKvvFygM+8BdD
mXKXxncl9zEWlEIZilyfn0vEKmJJDy+mAw2F7SKScCazrc19MXYe9jr/E9nCMgw/
ushZRQOfQQXy
-----END CERTIFICATE-----
Generated at Tue Apr 29 18:17:08 2025 by rpki-client