Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3233203d3e20323638383739.roa
File: 34352e3137352e32342e302f32332d3233203d3e20323638383739.roa (raw, json)
Hash identifier: YQy6Z/iIgfJhkH/h5mKWPrWecxlIki7KYPcs5dYH21I=
Subject key identifier: 8E:B7:DC:59:52:0B:47:85:AF:C7:5C:A3:CD:E6:62:14:40:A9:5E:AB
Certificate issuer: /CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Certificate serial: 43E56CD7892207AFC31523A61D97AC41A8948F07
Authority key identifier: 28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3233203d3e20323638383739.roa
Signing time: Thu 04 Apr 2024 06:10:40 +0000
ROA not before: Thu 04 Apr 2024 06:05:40 +0000
ROA not after: Thu 03 Apr 2025 06:10:40 +0000
asID: 268879
IP address blocks: 45.175.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:e5:6c:d7:89:22:07:af:c3:15:23:a6:1d:97:ac:41:a8:94:8f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28C4721E667593A43DA7832F588E6B6B8F57311C
Validity
Not Before: Apr 4 06:05:40 2024 GMT
Not After : Apr 3 06:10:40 2025 GMT
Subject: CN=8EB7DC59520B4785AFC75CA3CDE6621440A95EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:02:00:fb:1b:91:e2:f1:1c:1f:39:33:ea:
37:12:ee:eb:71:ca:d0:44:c4:c8:4c:eb:25:4c:5a:
ef:94:c4:cc:eb:8c:e1:de:6c:dd:7c:4a:70:c7:d2:
a9:b5:9a:bc:4e:e1:f3:ea:41:cd:15:9a:26:97:66:
7e:ad:9b:db:5d:19:0d:65:02:d9:e4:65:ee:b3:97:
19:2d:3d:bc:32:b6:3f:b7:3c:7d:0f:18:fe:8b:48:
66:4a:ea:86:9b:1b:4b:ef:51:63:d9:28:c6:e2:de:
58:02:f2:df:1b:cf:d2:da:64:98:13:97:f7:53:a4:
77:94:73:49:23:37:72:b2:b4:8c:82:92:87:d1:9e:
cb:61:d2:e4:3c:8e:d4:84:b6:12:c3:47:5c:db:62:
8e:21:a8:ff:1f:6d:fa:26:d6:75:2c:ca:f7:71:a2:
f1:75:bd:55:82:20:8f:1c:04:aa:4f:cb:29:42:21:
d7:cb:cb:7c:4b:e5:ef:60:17:38:5b:be:f0:16:9e:
a8:06:08:3b:94:26:89:ec:48:68:26:42:5c:37:bf:
8d:25:89:81:d8:c5:ef:37:67:20:34:b4:d0:df:56:
4f:78:6f:8f:fb:11:f8:48:56:50:b4:9a:b3:ea:d1:
46:02:73:6b:c9:18:a4:2a:cc:a7:0f:ea:66:7c:fd:
7c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B7:DC:59:52:0B:47:85:AF:C7:5C:A3:CD:E6:62:14:40:A9:5E:AB
X509v3 Authority Key Identifier:
keyid:28:C4:72:1E:66:75:93:A4:3D:A7:83:2F:58:8E:6B:6B:8F:57:31:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/28C4721E667593A43DA7832F588E6B6B8F57311C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28C4721E667593A43DA7832F588E6B6B8F57311C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTe5NKFvfP96LKz8mHuaGkFeeTfDC1yBUxkroufNsTpC/1/34352e3137352e32342e302f32332d3233203d3e20323638383739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.24.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:13:38:87:47:e4:10:17:bb:0c:dc:a4:a5:25:1c:a2:a2:c6:
22:a5:ac:b0:6f:cb:96:4a:46:64:9a:ae:09:c3:ef:79:02:e6:
48:ad:4f:4d:c0:4f:8b:df:49:ae:17:64:b7:57:84:05:84:96:
54:ee:3b:8d:4a:c9:12:cf:c0:bd:b9:1e:54:c3:57:36:95:ec:
e9:42:e5:8b:24:62:d4:e4:97:ab:c9:90:bc:16:b4:76:0a:1a:
28:8f:5c:d3:c1:42:88:ef:29:5f:f3:0a:1d:83:6c:cb:bc:2a:
d1:97:a3:66:42:19:82:c3:01:ec:ba:ee:ef:f5:cb:d5:4f:83:
b2:5e:ab:21:12:72:c3:66:79:9a:2d:21:42:75:21:3c:4d:97:
1e:a5:dd:9b:6c:2a:f9:60:3d:07:67:91:5d:f2:f3:97:e3:15:
8d:ac:40:8d:9b:86:80:46:4b:b3:7e:5d:e5:ad:7e:63:e3:eb:
8c:a7:c0:6f:17:69:e8:ab:2f:f3:d4:fe:7f:7a:d0:5e:07:67:
69:99:09:4d:1f:f8:72:b6:da:b5:e4:fc:e6:97:61:91:e5:ea:
e8:07:52:d6:0e:c4:ee:9d:e5:0e:38:fa:1e:ba:21:78:52:b1:
9e:33:65:87:40:3a:99:1e:38:7c:d9:1b:2b:5e:50:79:4f:09:
62:be:63:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQ+Vs14kiB6/DFSOmHZesQaiUjwcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhDNDcyMUU2Njc1OTNBNDNEQTc4MzJGNTg4RTZCNkI4
RjU3MzExQzAeFw0yNDA0MDQwNjA1NDBaFw0yNTA0MDMwNjEwNDBaMDMxMTAvBgNV
BAMTKDhFQjdEQzU5NTIwQjQ3ODVBRkM3NUNBM0NERTY2MjE0NDBBOTVFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UwIA+xuR4vEcHzkz6jcS7utx
ytBExMhM6yVMWu+UxMzrjOHebN18SnDH0qm1mrxO4fPqQc0VmiaXZn6tm9tdGQ1l
AtnkZe6zlxktPbwytj+3PH0PGP6LSGZK6oabG0vvUWPZKMbi3lgC8t8bz9LaZJgT
l/dTpHeUc0kjN3KytIyCkofRnsth0uQ8jtSEthLDR1zbYo4hqP8fbfom1nUsyvdx
ovF1vVWCII8cBKpPyylCIdfLy3xL5e9gFzhbvvAWnqgGCDuUJonsSGgmQlw3v40l
iYHYxe83ZyA0tNDfVk94b4/7EfhIVlC0mrPq0UYCc2vJGKQqzKcP6mZ8/XwLAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjrfcWVILR4Wvx1yjzeZiFECpXqswHwYDVR0j
BBgwFoAUKMRyHmZ1k6Q9p4MvWI5ra49XMRwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFRlNU5LRnZmUDk2TEt6OG1IdWFHa0ZlZVRmREMxeUJVeGtyb3VmTnNU
cEMvMS8yOEM0NzIxRTY2NzU5M0E0M0RBNzgzMkY1ODhFNkI2QjhGNTczMTFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4QzQ3MjFFNjY3NTkzQTQz
REE3ODMyRjU4OEU2QjZCOEY1NzMxMUMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RUZTVOS0Z2ZlA5NkxLejhtSHVhR2tGZWVUZkRDMXlCVXhrcm91Zk5zVHBDLzEv
MzQzNTJlMzEzNzM1MmUzMjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzgzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLa8YMA0GCSqGSIb3DQEBCwUAA4IBAQCaEziHR+QQ
F7sM3KSlJRyiosYipaywb8uWSkZkmq4Jw+95AuZIrU9NwE+L30muF2S3V4QFhJZU
7juNSskSz8C9uR5Uw1c2lezpQuWLJGLU5JeryZC8FrR2Chooj1zTwUKI7ylf8wod
g2zLvCrRl6NmQhmCwwHsuu7v9cvVT4OyXqshEnLDZnmaLSFCdSE8TZcepd2bbCr5
YD0HZ5Fd8vOX4xWNrECNm4aARkuzfl3lrX5j4+uMp8BvF2noqy/z1P5/etBeB2dp
mQlNH/hyttq15Pzml2GR5eroB1LWDsTuneUOOPoeuiF4UrGeM2WHQDqZHjh82Rsr
XlB5TwlivmPv
-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:02 2025 by rpki-client