Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/34352e3137332e32312e302f32342d3234203d3e20323732353738.roa
File: 34352e3137332e32312e302f32342d3234203d3e20323732353738.roa (raw, json)
Hash identifier: EfzVIWyRQHQQ1iHRlW5OpXPTsJAPW6eh0UHcyhtEdR0=
Subject key identifier: 59:9D:70:2A:CE:79:30:1D:C5:CC:4E:91:3D:50:3E:81:44:61:B3:8E
Certificate issuer: /CN=CD751FD85EB2EA218659B38ACB7AA70081FE0026
Certificate serial: 4A6FA4755E571C6650723D193B2DF14AEDB3EFD7
Authority key identifier: CD:75:1F:D8:5E:B2:EA:21:86:59:B3:8A:CB:7A:A7:00:81:FE:00:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/34352e3137332e32312e302f32342d3234203d3e20323732353738.roa
Signing time: Mon 20 Feb 2023 21:58:05 +0000
ROA not before: Mon 20 Feb 2023 21:53:05 +0000
ROA not after: Mon 19 Feb 2024 21:58:05 +0000
asID: 272578
IP address blocks: 45.173.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:6f:a4:75:5e:57:1c:66:50:72:3d:19:3b:2d:f1:4a:ed:b3:ef:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD751FD85EB2EA218659B38ACB7AA70081FE0026
Validity
Not Before: Feb 20 21:53:05 2023 GMT
Not After : Feb 19 21:58:05 2024 GMT
Subject: CN=599D702ACE79301DC5CC4E913D503E814461B38E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:3e:cf:b4:02:e0:ae:30:af:c3:9c:a6:fc:
57:68:50:81:fc:0f:15:c2:b9:26:89:50:19:c1:06:
1b:d3:69:c1:3a:bd:03:cb:e0:2e:14:72:f3:73:45:
65:7e:60:81:54:2e:5d:c1:dd:6e:c2:e0:6f:df:90:
89:4c:00:6c:5d:ad:9a:21:d9:09:6b:fe:2e:19:8c:
6e:35:6d:4e:70:6b:df:08:38:f1:49:86:5d:6a:e6:
90:de:98:fe:29:85:15:64:50:77:29:7e:eb:c0:f1:
ed:a6:42:05:33:4b:d8:a9:67:6b:c4:71:3c:e0:c2:
a4:d9:8b:9f:25:ae:07:61:96:7a:12:e8:72:52:bb:
5a:53:52:7a:5d:5d:ed:0b:5e:7d:c7:45:eb:ac:ff:
0e:af:4c:22:06:34:38:af:07:59:6d:38:4f:06:3e:
d6:0a:91:99:3c:a4:d1:2f:2a:7c:74:6f:bc:b1:79:
a7:b5:0c:59:bd:3b:98:14:b0:5b:21:b7:e1:33:ec:
51:db:0f:b0:4b:3e:47:7f:0f:24:f0:c0:e4:8c:1f:
26:38:63:47:35:75:d0:dc:1f:75:a4:5f:4e:e9:18:
55:bc:a1:b1:ba:a0:3b:72:8c:b7:b2:78:83:25:1b:
c2:5b:fd:99:3c:38:b7:6e:7d:4d:69:8d:9a:fd:23:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:9D:70:2A:CE:79:30:1D:C5:CC:4E:91:3D:50:3E:81:44:61:B3:8E
X509v3 Authority Key Identifier:
keyid:CD:75:1F:D8:5E:B2:EA:21:86:59:B3:8A:CB:7A:A7:00:81:FE:00:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD751FD85EB2EA218659B38ACB7AA70081FE0026.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdJgAc9jrWuyAq1B4kBVUqZKp42q9evoAaKoztL3idTv/0/34352e3137332e32312e302f32342d3234203d3e20323732353738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.21.0/24
Signature Algorithm: sha256WithRSAEncryption
35:cf:72:1e:64:4b:0a:b1:16:46:bc:e7:b3:89:ac:1a:78:c3:
db:b0:3d:a5:af:63:79:4a:d6:3c:67:4f:f0:69:bb:c2:a4:47:
58:e2:26:e7:6d:56:19:ec:d2:72:a8:d8:3d:3d:b0:a1:74:2a:
77:15:9b:3e:6c:86:83:e0:79:d2:32:96:db:b6:73:08:0f:d1:
6a:16:0c:bf:8b:29:13:83:f3:15:ce:59:d6:28:11:17:1a:44:
b1:9b:ee:5e:d7:6a:b0:21:e7:85:11:00:d6:30:76:38:c2:da:
fe:af:b1:4b:7d:61:32:75:3e:95:25:2c:f2:8d:b2:43:e9:d6:
d2:bd:77:1b:e7:9e:05:fc:39:ef:4a:24:82:09:f4:df:31:4d:
2f:d7:a2:c5:37:cd:0d:f5:09:cd:5d:4f:2f:a7:18:2f:bb:6e:
d5:3a:17:13:3f:54:6d:ae:31:76:cd:64:00:0b:fb:79:4b:32:
93:c4:66:a7:66:40:c7:3b:80:2f:e2:78:a0:22:ea:58:ed:2b:
2d:9f:6c:c5:91:60:bd:dd:a3:43:63:cc:c6:32:68:5c:60:06:
20:7a:fd:8a:9b:7d:d8:9b:12:58:62:2c:7b:3b:fe:b1:7d:d0:
03:f7:9d:14:d5:29:9c:65:d4:cb:4d:25:0d:8d:58:8c:bc:57:
78:e5:d7:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSm+kdV5XHGZQcj0ZOy3xSu2z79cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0Q3NTFGRDg1RUIyRUEyMTg2NTlCMzhBQ0I3QUE3MDA4
MUZFMDAyNjAeFw0yMzAyMjAyMTUzMDVaFw0yNDAyMTkyMTU4MDVaMDMxMTAvBgNV
BAMTKDU5OUQ3MDJBQ0U3OTMwMURDNUNDNEU5MTNENTAzRTgxNDQ2MUIzOEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1fT7PtALgrjCvw5ym/FdoUIH8
DxXCuSaJUBnBBhvTacE6vQPL4C4UcvNzRWV+YIFULl3B3W7C4G/fkIlMAGxdrZoh
2Qlr/i4ZjG41bU5wa98IOPFJhl1q5pDemP4phRVkUHcpfuvA8e2mQgUzS9ipZ2vE
cTzgwqTZi58lrgdhlnoS6HJSu1pTUnpdXe0LXn3HReus/w6vTCIGNDivB1ltOE8G
PtYKkZk8pNEvKnx0b7yxeae1DFm9O5gUsFsht+Ez7FHbD7BLPkd/DyTwwOSMHyY4
Y0c1ddDcH3WkX07pGFW8obG6oDtyjLeyeIMlG8Jb/Zk8OLdufU1pjZr9I1PjAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUWZ1wKs55MB3FzE6RPVA+gURhs44wHwYDVR0j
BBgwFoAUzXUf2F6y6iGGWbOKy3qnAIH+ACYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRGRKZ0FjOWpyV3V5QXExQjRrQlZVcVpLcDQycTlldm9BYUtvenRMM2lk
VHYvMC9DRDc1MUZEODVFQjJFQTIxODY1OUIzOEFDQjdBQTcwMDgxRkUwMDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0NENzUxRkQ4NUVCMkVBMjE4
NjU5QjM4QUNCN0FBNzAwODFGRTAwMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RkSmdBYzlqcld1eUFxMUI0a0JWVXFaS3A0MnE5ZXZvQWFLb3p0TDNpZFR2LzAv
MzQzNTJlMzEzNzMzMmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNzMy
MzUzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa0VMA0GCSqGSIb3DQEBCwUAA4IBAQA1z3IeZEsK
sRZGvOeziawaeMPbsD2lr2N5StY8Z0/wabvCpEdY4ibnbVYZ7NJyqNg9PbChdCp3
FZs+bIaD4HnSMpbbtnMID9FqFgy/iykTg/MVzlnWKBEXGkSxm+5e12qwIeeFEQDW
MHY4wtr+r7FLfWEydT6VJSzyjbJD6dbSvXcb554F/DnvSiSCCfTfMU0v16LFN80N
9QnNXU8vpxgvu27VOhcTP1RtrjF2zWQAC/t5SzKTxGanZkDHO4Av4nigIupY7Sst
n2zFkWC93aNDY8zGMmhcYAYgev2Km33YmxJYYix7O/6xfdAD950U1SmcZdTLTSUN
jViMvFd45ddH
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:35:35 2025 by rpki-client