Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39322e302f32322d3232203d3e203232373036.roa
File: 3230302e3135322e39322e302f32322d3232203d3e203232373036.roa (raw, json)
Hash identifier: KsobBe52jz08Q7tDnv/7CPRVHUqnAIQ3OwMV1zCQlas=
Subject key identifier: AB:35:70:32:6B:72:80:94:A3:4E:34:0F:56:10:C1:EF:2C:F3:F7:0E
Certificate issuer: /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial: 5D31C668E3D8AAD30A316AFAE87385490B868A72
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39322e302f32322d3232203d3e203232373036.roa
Signing time: Tue 10 Jan 2023 09:25:03 +0000
ROA not before: Tue 10 Jan 2023 09:20:03 +0000
ROA not after: Tue 09 Jan 2024 09:25:03 +0000
asID: 22706
IP address blocks: 200.152.92.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:31:c6:68:e3:d8:aa:d3:0a:31:6a:fa:e8:73:85:49:0b:86:8a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Validity
Not Before: Jan 10 09:20:03 2023 GMT
Not After : Jan 9 09:25:03 2024 GMT
Subject: CN=AB3570326B728094A34E340F5610C1EF2CF3F70E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:78:61:be:53:38:c8:95:46:ed:27:5f:5f:
a0:d7:ce:61:e0:35:3d:d4:7b:d0:7b:2d:be:c7:0a:
6e:1c:66:8a:af:c4:39:e6:cb:7b:ba:4a:32:c8:ea:
54:03:9a:a8:13:47:ea:25:ec:80:03:9e:47:c3:e6:
1f:21:ec:b7:78:25:53:70:81:2a:e1:69:90:d4:30:
3e:4a:35:10:30:57:87:71:af:38:15:78:9c:91:9b:
8c:72:41:5b:cd:7f:c7:05:de:83:c6:57:92:88:ce:
00:69:64:40:cf:59:bd:2a:19:47:a2:60:9e:f9:67:
55:bf:2c:25:eb:9f:39:59:12:e9:ff:56:09:07:79:
b8:2f:a7:3e:0a:3a:e3:8a:d5:3c:ae:dc:43:c7:3f:
22:b4:c6:53:50:0f:0a:cb:02:53:b0:85:9a:d0:7f:
a0:ac:85:1b:1b:40:58:75:47:d0:26:41:e3:33:1a:
7a:ed:f4:8b:4f:ef:0a:3f:ba:e0:3f:7b:54:bd:ea:
97:94:10:da:d1:df:4f:ef:bd:c6:6e:86:2c:63:33:
77:5f:73:8d:37:95:81:4c:e4:13:1c:fd:91:7d:52:
1c:b5:da:9e:66:dd:6b:c7:b6:d3:8b:cf:2b:40:fb:
06:22:75:4b:4b:df:f7:e2:82:6b:6c:7e:7d:37:bd:
b6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:70:32:6B:72:80:94:A3:4E:34:0F:56:10:C1:EF:2C:F3:F7:0E
X509v3 Authority Key Identifier:
keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39322e302f32322d3232203d3e203232373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.152.92.0/22
Signature Algorithm: sha256WithRSAEncryption
23:e5:2b:b3:0d:01:2e:6f:84:ab:fd:d9:af:5b:7a:19:93:9c:
70:14:d8:0d:74:50:c0:31:5d:fc:eb:9a:ed:45:a5:87:1a:79:
3f:3a:2a:13:fa:d7:49:81:28:6e:21:d9:56:a8:4b:75:7f:25:
77:57:43:12:41:4f:b5:40:ec:9c:97:50:ce:d3:b3:fe:42:c8:
9c:5f:ca:81:e0:e7:16:c7:40:cd:89:67:48:78:12:44:b1:a2:
78:64:d5:79:33:f0:e2:15:d7:a2:c3:88:db:ab:7e:00:77:9e:
e4:9c:21:e7:33:09:db:2a:65:ae:5e:96:0d:35:95:43:50:3c:
bd:b5:8b:17:00:3c:a8:8a:d7:12:99:59:9d:5a:c3:71:c2:41:
0f:50:a3:58:a3:50:76:bb:18:4b:a1:b6:78:d4:5f:43:a2:c9:
2b:ca:05:06:eb:75:25:05:6e:70:58:13:ce:2e:c2:d9:e5:93:
ba:53:de:0a:6c:7e:e3:f5:f7:35:b5:ba:55:ac:33:e9:45:c1:
73:18:8c:a1:30:d1:23:3d:30:a8:1f:c1:12:fe:c6:d7:c9:f2:
46:27:65:7d:18:db:f5:01:fb:90:8f:f3:a4:b8:1a:d7:51:9b:
98:6a:9d:36:2e:ae:ac:47:59:42:21:36:f7:b9:19:2e:52:09:
1b:18:f5:85
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUXTHGaOPYqtMKMWr66HOFSQuGinIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMTAwOTIwMDNaFw0yNDAxMDkwOTI1MDNaMDMxMTAvBgNV
BAMTKEFCMzU3MDMyNkI3MjgwOTRBMzRFMzQwRjU2MTBDMUVGMkNGM0Y3MEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUHhhvlM4yJVG7SdfX6DXzmHg
NT3Ue9B7Lb7HCm4cZoqvxDnmy3u6SjLI6lQDmqgTR+ol7IADnkfD5h8h7Ld4JVNw
gSrhaZDUMD5KNRAwV4dxrzgVeJyRm4xyQVvNf8cF3oPGV5KIzgBpZEDPWb0qGUei
YJ75Z1W/LCXrnzlZEun/VgkHebgvpz4KOuOK1Tyu3EPHPyK0xlNQDwrLAlOwhZrQ
f6CshRsbQFh1R9AmQeMzGnrt9ItP7wo/uuA/e1S96peUENrR30/vvcZuhixjM3df
c403lYFM5BMc/ZF9Uhy12p5m3WvHttOLzytA+wYidUtL3/figmtsfn03vbZHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUqzVwMmtygJSjTjQPVhDB7yzz9w4wHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyJhcMA0GCSqGSIb3DQEBCwUAA4IBAQAj5SuzDQEu
b4Sr/dmvW3oZk5xwFNgNdFDAMV3865rtRaWHGnk/OioT+tdJgShuIdlWqEt1fyV3
V0MSQU+1QOycl1DO07P+QsicX8qB4OcWx0DNiWdIeBJEsaJ4ZNV5M/DiFdeiw4jb
q34Ad57knCHnMwnbKmWuXpYNNZVDUDy9tYsXADyoitcSmVmdWsNxwkEPUKNYo1B2
uxhLobZ41F9DoskrygUG63UlBW5wWBPOLsLZ5ZO6U94KbH7j9fc1tbpVrDPpRcFz
GIyhMNEjPTCoH8ES/sbXyfJGJ2V9GNv1AfuQj/OkuBrXUZuYap02Lq6sR1lCITb3
uRkuUgkbGPWF
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:38 2023 by rpki-client on console.sobornost.net