Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3234203d3e20323731313034.roa
File: 3137392e34322e342e302f32322d3234203d3e20323731313034.roa (raw, json)
Hash identifier: 1MlKecVtwy3OKHuN7xJJ7iMMkygaLeINu2Gv0jD8wNw=
Subject key identifier: A8:FB:8E:A5:E0:D5:29:7F:AA:17:E2:09:E9:B8:EE:74:D6:8C:0F:84
Certificate issuer: /CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
Certificate serial: 158655F08962A49865333A1038E24E85A5DEFF5C
Authority key identifier: 69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3234203d3e20323731313034.roa
Signing time: Sat 22 Apr 2023 17:09:59 +0000
ROA not before: Sat 22 Apr 2023 17:04:59 +0000
ROA not after: Sat 20 Apr 2024 17:09:59 +0000
asID: 271104
IP address blocks: 179.42.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:86:55:f0:89:62:a4:98:65:33:3a:10:38:e2:4e:85:a5:de:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C
Validity
Not Before: Apr 22 17:04:59 2023 GMT
Not After : Apr 20 17:09:59 2024 GMT
Subject: CN=A8FB8EA5E0D5297FAA17E209E9B8EE74D68C0F84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:d1:bc:fb:43:e6:00:98:1f:18:d7:b5:85:
29:24:f3:69:8d:81:04:b8:38:b6:90:65:d0:1d:a0:
cf:e4:e0:aa:64:d9:9d:b7:31:fc:8d:3d:be:89:ff:
75:e7:cb:79:00:95:bb:a1:3c:66:ac:ee:1c:d4:86:
f1:04:5e:56:7c:a1:03:3a:31:67:23:a1:b5:3d:a6:
04:63:3f:c5:63:f8:0e:df:9d:29:8d:f5:5a:60:d6:
0e:be:81:20:08:cc:9f:bd:2a:19:dc:57:8f:11:fc:
42:0e:b1:4b:75:33:ba:a4:9c:1d:40:72:c2:75:94:
5c:bf:01:9b:99:75:f4:39:55:72:5e:d7:9c:5c:b7:
8a:a4:55:d8:f2:aa:05:d1:e6:07:7e:19:75:a3:02:
f1:48:fb:66:3d:c1:57:1f:a2:1c:f4:67:2f:79:24:
97:1a:aa:f3:a1:91:6c:30:1e:6c:e3:4a:27:7d:30:
ec:0c:25:13:cb:fc:a8:1c:64:87:29:9b:93:42:57:
0f:32:e2:3f:e0:25:31:a6:e4:7b:03:a1:2c:d4:c8:
a8:df:6c:48:da:48:d5:1a:90:9e:94:87:7a:78:07:
3e:de:c2:3f:c6:69:50:d3:59:10:31:d6:e3:81:bf:
8e:56:19:81:c6:ec:63:00:2c:c5:7d:b2:9a:cc:f7:
bd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:8E:A5:E0:D5:29:7F:AA:17:E2:09:E9:B8:EE:74:D6:8C:0F:84
X509v3 Authority Key Identifier:
keyid:69:6E:BF:66:C9:96:09:0B:CB:0C:78:8A:9A:0A:4B:FC:D2:E1:B3:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/696EBF66C996090BCB0C788A9A0A4BFCD2E1B31C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B6KEHy8R3TqNJi7qPdoEtwNqpUgDU4XQ8rdAdJr1aS72/0/3137392e34322e342e302f32322d3234203d3e20323731313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.42.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:b6:61:e4:0e:21:be:55:a9:72:63:c5:ff:99:49:5e:f6:35:
88:20:73:6e:ce:cc:91:94:1a:79:6d:3e:4b:a7:ad:c9:b4:f4:
66:5f:51:12:37:4a:7f:d6:99:2b:fd:23:47:93:3f:66:c9:a0:
da:9a:4e:e9:fd:76:68:86:e1:db:f5:3f:ff:1a:2b:0b:fb:b4:
eb:14:ff:83:93:09:63:52:49:b1:b7:b2:eb:22:4c:a1:b3:53:
cc:a8:e1:f4:eb:02:9d:8f:54:3d:11:ab:45:f0:40:25:94:14:
a7:23:7c:74:0e:cf:86:0e:c2:0d:42:eb:11:a5:26:47:fd:a3:
3c:8a:df:5b:77:d0:83:ce:e1:05:96:54:9a:84:46:19:ef:96:
c9:64:53:f4:86:5c:a4:6a:82:48:20:0e:b2:3f:5e:96:01:9d:
86:63:36:93:f5:de:80:7d:51:a7:f0:23:19:1c:7f:78:3d:b3:
1b:2b:dc:0c:53:4e:e5:a3:b1:a1:27:ed:49:fb:16:ff:c5:5c:
a2:0f:f5:91:56:e5:85:9a:5c:65:c3:ff:63:4c:dd:74:23:44:
d9:10:db:f8:8a:df:f8:8c:da:3c:35:32:3b:f5:e1:35:1c:6c:
65:60:fa:88:e4:b5:ee:24:b9:44:46:18:be:2d:44:5c:37:a7:
d0:9a:6f:e3
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUFYZV8IlipJhlMzoQOOJOhaXe/1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2RUJGNjZDOTk2MDkwQkNCMEM3ODhBOUEwQTRCRkNE
MkUxQjMxQzAeFw0yMzA0MjIxNzA0NTlaFw0yNDA0MjAxNzA5NTlaMDMxMTAvBgNV
BAMTKEE4RkI4RUE1RTBENTI5N0ZBQTE3RTIwOUU5QjhFRTc0RDY4QzBGODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU4dG8+0PmAJgfGNe1hSkk82mN
gQS4OLaQZdAdoM/k4Kpk2Z23MfyNPb6J/3Xny3kAlbuhPGas7hzUhvEEXlZ8oQM6
MWcjobU9pgRjP8Vj+A7fnSmN9Vpg1g6+gSAIzJ+9KhncV48R/EIOsUt1M7qknB1A
csJ1lFy/AZuZdfQ5VXJe15xct4qkVdjyqgXR5gd+GXWjAvFI+2Y9wVcfohz0Zy95
JJcaqvOhkWwwHmzjSid9MOwMJRPL/KgcZIcpm5NCVw8y4j/gJTGm5HsDoSzUyKjf
bEjaSNUakJ6Uh3p4Bz7ewj/GaVDTWRAx1uOBv45WGYHG7GMALMV9sprM973PAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUqPuOpeDVKX+qF+IJ6bjudNaMD4QwHwYDVR0j
BBgwFoAUaW6/ZsmWCQvLDHiKmgpL/NLhsxwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQjZLRUh5OFIzVHFOSmk3cVBkb0V0d05xcFVnRFU0WFE4cmRBZEpyMWFT
NzIvMC82OTZFQkY2NkM5OTYwOTBCQ0IwQzc4OEE5QTBBNEJGQ0QyRTFCMzFDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzY5NkVCRjY2Qzk5NjA5MEJD
QjBDNzg4QTlBMEE0QkZDRDJFMUIzMUMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0I2S0VIeThSM1RxTkppN3FQZG9FdHdOcXBVZ0RVNFhROHJkQWRKcjFhUzcyLzAv
MzEzNzM5MmUzNDMyMmUzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzczMTMx
MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEArMqBDANBgkqhkiG9w0BAQsFAAOCAQEAirZh5A4hvlWp
cmPF/5lJXvY1iCBzbs7MkZQaeW0+S6etybT0Zl9REjdKf9aZK/0jR5M/Zsmg2ppO
6f12aIbh2/U//xorC/u06xT/g5MJY1JJsbey6yJMobNTzKjh9OsCnY9UPRGrRfBA
JZQUpyN8dA7Phg7CDULrEaUmR/2jPIrfW3fQg87hBZZUmoRGGe+WyWRT9IZcpGqC
SCAOsj9elgGdhmM2k/XegH1Rp/AjGRx/eD2zGyvcDFNO5aOxoSftSfsW/8Vcog/1
kVblhZpcZcP/Y0zddCNE2RDb+Irf+IzaPDUyO/XhNRxsZWD6iOS17iS5REYYvi1E
XDen0Jpv4w==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net