Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39322e302f32322d3232203d3e20323638373035.roa
File: 34352e3137312e39322e302f32322d3232203d3e20323638373035.roa (raw, json)
Hash identifier: AnGUkAsyygvQq3QIQaQOW/mvny94MtUW3TZrXQt2dY0=
Subject key identifier: C0:57:9E:33:05:35:48:6F:A4:BC:47:E7:58:99:7B:9A:3F:2D:7F:05
Certificate issuer: /CN=AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F
Certificate serial: 78685C3E8629E9B9AD68ACC4D49141CA0ED8D28D
Authority key identifier: AE:A3:33:C8:3A:BD:1B:AA:DB:6B:66:64:FF:34:C4:81:B4:3E:CA:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39322e302f32322d3232203d3e20323638373035.roa
Signing time: Thu 30 Jan 2025 18:00:15 +0000
ROA not before: Thu 30 Jan 2025 17:55:15 +0000
ROA not after: Thu 29 Jan 2026 18:00:15 +0000
asID: 268705
IP address blocks: 45.171.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:68:5c:3e:86:29:e9:b9:ad:68:ac:c4:d4:91:41:ca:0e:d8:d2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F
Validity
Not Before: Jan 30 17:55:15 2025 GMT
Not After : Jan 29 18:00:15 2026 GMT
Subject: CN=C0579E330535486FA4BC47E758997B9A3F2D7F05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:69:94:98:8f:b1:a1:47:10:a8:d2:e0:2d:
4b:35:c3:b6:5e:a8:23:88:c8:5a:74:49:d7:10:85:
89:72:78:f4:70:5c:10:3f:d8:35:1a:fd:39:13:5f:
67:57:87:5f:95:3e:58:5c:c3:fa:fa:d8:c2:a9:da:
68:6c:92:b6:ef:2c:79:0b:0d:f9:c5:44:9f:58:a1:
2c:70:8d:43:f7:15:b4:54:2e:9b:90:6a:78:a4:fe:
e1:e7:42:bc:31:9a:c0:73:78:f4:79:1f:34:da:60:
64:a0:58:18:78:58:6b:c5:be:c2:47:86:b7:e8:e5:
81:7b:2d:92:8f:17:2b:06:65:13:f2:86:be:a7:bf:
e1:d4:2a:e7:02:01:6a:d0:a0:32:e8:63:5a:d8:aa:
75:b9:d9:88:a1:0b:2e:28:d5:26:be:f5:87:70:1f:
b8:11:f0:d3:76:83:ab:22:6b:9c:72:08:07:59:a1:
b9:f4:17:e0:83:c6:ee:9a:15:b8:b4:2d:48:ae:d2:
f1:a6:46:30:f7:c9:0e:db:d7:ab:d8:8c:38:f9:fb:
25:90:eb:b2:83:66:dd:33:2c:c6:82:c3:6b:ec:92:
d8:d6:98:32:43:61:87:6f:b9:f7:54:af:c2:84:da:
8d:14:54:b9:c0:b2:a5:fd:ad:d4:b9:e2:48:8c:f4:
9c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:57:9E:33:05:35:48:6F:A4:BC:47:E7:58:99:7B:9A:3F:2D:7F:05
X509v3 Authority Key Identifier:
keyid:AE:A3:33:C8:3A:BD:1B:AA:DB:6B:66:64:FF:34:C4:81:B4:3E:CA:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AEA333C83ABD1BAADB6B6664FF34C481B43ECA6F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fk4LgCqzE1yWAjAo36e2bnVd7ZsEySjp3ZJGGNje2qPB/0/34352e3137312e39322e302f32322d3232203d3e20323638373035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.92.0/22
Signature Algorithm: sha256WithRSAEncryption
79:2d:aa:f4:5b:66:60:39:7b:b1:ae:1e:53:ef:80:95:7b:fa:
cc:11:6e:13:68:93:c2:d4:85:06:1a:9e:ee:3f:9b:62:4f:c1:
90:60:05:7d:9c:66:5b:7c:2a:c1:b9:01:6a:da:c4:f6:e4:0b:
43:0b:bc:bc:e0:8f:d2:b8:f5:10:60:e2:ff:18:a5:85:b6:64:
31:fc:b8:f7:7d:5d:be:38:5f:99:00:59:bb:1d:df:1f:27:ed:
46:62:ab:86:71:bd:9b:4f:b3:9a:66:41:3d:79:dd:f0:b6:09:
83:cb:79:5b:37:3e:6c:49:8b:3e:53:f1:b9:4a:68:2d:72:49:
95:22:9c:51:bd:42:36:e5:76:4a:5e:57:fa:b4:88:79:d9:cb:
52:c0:58:da:70:81:10:eb:c3:1d:ee:e2:b3:1d:e7:2b:a6:bc:
8d:85:30:c9:d3:19:be:03:f9:8f:71:5a:76:6b:38:1b:83:65:
eb:de:2c:d5:30:0a:93:89:cf:d6:24:85:8e:46:c2:43:44:39:
07:d2:38:a2:09:5a:fd:37:a3:53:e1:d8:fd:3e:ec:ba:73:12:
68:b4:1b:d6:8e:ae:22:62:a9:27:82:08:ff:ec:3b:f0:86:30:
e3:db:74:ce:89:29:8d:36:0c:aa:b9:ab:62:f1:39:61:f2:c8:
b1:b8:2c:c1
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUeGhcPoYp6bmtaKzE1JFByg7Y0o0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVBMzMzQzgzQUJEMUJBQURCNkI2NjY0RkYzNEM0ODFC
NDNFQ0E2RjAeFw0yNTAxMzAxNzU1MTVaFw0yNjAxMjkxODAwMTVaMDMxMTAvBgNV
BAMTKEMwNTc5RTMzMDUzNTQ4NkZBNEJDNDdFNzU4OTk3QjlBM0YyRDdGMDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gWmUmI+xoUcQqNLgLUs1w7Ze
qCOIyFp0SdcQhYlyePRwXBA/2DUa/TkTX2dXh1+VPlhcw/r62MKp2mhskrbvLHkL
DfnFRJ9YoSxwjUP3FbRULpuQanik/uHnQrwxmsBzePR5HzTaYGSgWBh4WGvFvsJH
hrfo5YF7LZKPFysGZRPyhr6nv+HUKucCAWrQoDLoY1rYqnW52YihCy4o1Sa+9Ydw
H7gR8NN2g6sia5xyCAdZobn0F+CDxu6aFbi0LUiu0vGmRjD3yQ7b16vYjDj5+yWQ
67KDZt0zLMaCw2vsktjWmDJDYYdvufdUr8KE2o0UVLnAsqX9rdS54kiM9JzvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUwFeeMwU1SG+kvEfnWJl7mj8tfwUwHwYDVR0j
BBgwFoAUrqMzyDq9G6rba2Zk/zTEgbQ+ym8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRms0TGdDcXpFMXlXQWpBbzM2ZTJiblZkN1pzRXlTanAzWkpHR05qZTJx
UEIvMC9BRUEzMzNDODNBQkQxQkFBREI2QjY2NjRGRjM0QzQ4MUI0M0VDQTZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0FFQTMzM0M4M0FCRDFCQUFE
QjZCNjY2NEZGMzRDNDgxQjQzRUNBNkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZrNExnQ3F6RTF5V0FqQW8zNmUyYm5WZDdac0V5U2pwM1pKR0dOamUycVBCLzAv
MzQzNTJlMzEzNzMxMmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzczMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLatcMA0GCSqGSIb3DQEBCwUAA4IBAQB5Lar0W2Zg
OXuxrh5T74CVe/rMEW4TaJPC1IUGGp7uP5tiT8GQYAV9nGZbfCrBuQFq2sT25AtD
C7y84I/SuPUQYOL/GKWFtmQx/Lj3fV2+OF+ZAFm7Hd8fJ+1GYquGcb2bT7OaZkE9
ed3wtgmDy3lbNz5sSYs+U/G5SmgtckmVIpxRvUI25XZKXlf6tIh52ctSwFjacIEQ
68Md7uKzHecrpryNhTDJ0xm+A/mPcVp2azgbg2Xr3izVMAqTic/WJIWORsJDRDkH
0jiiCVr9N6NT4dj9Puy6cxJotBvWjq4iYqknggj/7DvwhjDj23TOiSmNNgyquati
8Tlh8sixuCzB
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:49:12 2025 by rpki-client