Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
File: 34352e3233352e35322e302f32322d3234203d3e20323638323037.roa (raw, json)
Hash identifier: u5KeEGEuS9g85wMS2RGjj71YGrkOWHbefa+Q4QTEhE4=
Subject key identifier: 4D:31:A7:B7:3B:7B:BB:60:6E:C4:47:F2:E4:66:8E:46:95:71:64:FB
Certificate issuer: /CN=22CBA337E0370365B681D563898357F37A7D4D97
Certificate serial: 642EA4410C97BFC189F028D3A8B11B2BFE5A2C08
Authority key identifier: 22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
Signing time: Sat 31 May 2025 00:17:13 +0000
ROA not before: Sat 31 May 2025 00:12:13 +0000
ROA not after: Sat 30 May 2026 00:17:13 +0000
asID: 268207
IP address blocks: 45.235.52.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2e:a4:41:0c:97:bf:c1:89:f0:28:d3:a8:b1:1b:2b:fe:5a:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22CBA337E0370365B681D563898357F37A7D4D97
Validity
Not Before: May 31 00:12:13 2025 GMT
Not After : May 30 00:17:13 2026 GMT
Subject: CN=4D31A7B73B7BBB606EC447F2E4668E46957164FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:6b:9d:5a:f3:ef:32:fb:8b:1c:bb:a6:63:
6c:a9:0b:4a:ac:12:88:56:31:83:9e:f6:f3:44:69:
24:32:f0:f1:4d:d0:59:0f:3a:d6:cb:34:2f:08:2f:
0e:3d:3e:06:27:54:03:65:a4:0a:4d:fc:94:13:5f:
db:d0:8d:ca:eb:58:7d:05:ab:04:58:ff:2a:e3:c7:
d5:7e:4b:58:23:a5:e3:d1:fc:7d:36:f6:83:af:28:
38:22:96:3a:09:fc:9c:87:41:6f:ba:ba:a7:50:6c:
8d:30:db:70:e8:cd:09:79:8f:d7:d1:db:e8:38:44:
d3:dd:6b:5e:18:2c:90:5f:9c:1d:98:c7:f4:20:56:
ff:1c:85:78:aa:28:57:cf:65:0e:2a:4a:4b:f7:d9:
4a:72:94:10:50:b4:53:9f:b6:46:50:21:db:bd:88:
56:bc:b4:e7:68:ae:55:0f:84:38:13:4b:e1:88:aa:
bc:d2:d7:53:c3:71:0b:1c:6b:2d:0c:cf:cc:70:c4:
e7:d3:72:23:cd:8b:18:e6:f3:dc:17:df:56:2b:62:
e8:71:2b:f0:3d:b1:f5:49:43:fe:ef:66:0b:78:a8:
55:a1:84:80:54:ec:83:59:0c:3a:9b:7d:57:13:f7:
29:7e:46:33:a2:86:8a:21:22:22:01:ff:70:3b:3d:
72:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:31:A7:B7:3B:7B:BB:60:6E:C4:47:F2:E4:66:8E:46:95:71:64:FB
X509v3 Authority Key Identifier:
keyid:22:CB:A3:37:E0:37:03:65:B6:81:D5:63:89:83:57:F3:7A:7D:4D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/22CBA337E0370365B681D563898357F37A7D4D97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22CBA337E0370365B681D563898357F37A7D4D97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/2/34352e3233352e35322e302f32322d3234203d3e20323638323037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:91:10:c3:dd:cd:38:4b:6d:99:ef:e8:e3:56:40:25:32:91:
e2:a9:9f:73:99:28:2b:7e:90:bf:23:95:12:d5:e6:3b:a4:ea:
13:f7:ce:6c:82:4c:87:fe:70:d4:7a:91:7c:aa:2c:06:92:47:
a3:96:0b:41:98:bb:a0:ea:00:74:da:47:7a:51:7c:aa:6d:39:
ae:53:6c:2b:6d:56:73:80:c6:f2:0f:b2:ae:b7:cc:36:25:07:
68:1e:61:c8:da:da:6c:90:5a:68:46:18:c2:29:b5:94:f7:bf:
f9:be:64:23:34:e9:b6:73:22:54:17:1f:61:1b:68:6f:68:48:
6d:c7:f0:78:aa:4f:a9:a2:31:28:ab:99:c2:03:01:8b:d6:02:
bb:1e:a1:2b:c0:61:91:44:88:25:8b:17:a5:69:ca:fb:2f:91:
d7:ff:9f:d5:ed:c4:88:b9:f5:57:d9:bd:12:7a:b2:79:62:f0:
47:98:05:e4:9b:02:0f:ec:cb:79:8a:62:93:0c:ed:0b:8a:01:
1c:3d:39:e5:c7:f1:ad:96:18:f3:44:cb:0d:16:32:4b:ed:0c:
28:09:bb:00:36:3d:65:e9:7d:9b:35:de:9e:2f:ce:16:8a:4e:
a9:14:45:4d:86:66:8c:f4:cc:12:94:a0:28:e5:db:ab:24:19:
28:3a:d4:bf
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZC6kQQyXv8GJ8CjTqLEbK/5aLAgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjJDQkEzMzdFMDM3MDM2NUI2ODFENTYzODk4MzU3RjM3
QTdENEQ5NzAeFw0yNTA1MzEwMDEyMTNaFw0yNjA1MzAwMDE3MTNaMDMxMTAvBgNV
BAMTKDREMzFBN0I3M0I3QkJCNjA2RUM0NDdGMkU0NjY4RTQ2OTU3MTY0RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdwmudWvPvMvuLHLumY2ypC0qs
EohWMYOe9vNEaSQy8PFN0FkPOtbLNC8ILw49PgYnVANlpApN/JQTX9vQjcrrWH0F
qwRY/yrjx9V+S1gjpePR/H029oOvKDgiljoJ/JyHQW+6uqdQbI0w23DozQl5j9fR
2+g4RNPda14YLJBfnB2Yx/QgVv8chXiqKFfPZQ4qSkv32UpylBBQtFOftkZQIdu9
iFa8tOdorlUPhDgTS+GIqrzS11PDcQscay0Mz8xwxOfTciPNixjm89wX31YrYuhx
K/A9sfVJQ/7vZgt4qFWhhIBU7INZDDqbfVcT9yl+RjOihoohIiIB/3A7PXIrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTTGntzt7u2BuxEfy5GaORpVxZPswHwYDVR0j
BBgwFoAUIsujN+A3A2W2gdVjiYNX83p9TZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzNwOXRrY2hkQVB2cEo5U29xeXA5cVpIR205Y1M5NExSYTFIOWdreFlM
QVMvMi8yMkNCQTMzN0UwMzcwMzY1QjY4MUQ1NjM4OTgzNTdGMzdBN0Q0RDk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzIyQ0JBMzM3RTAzNzAzNjVC
NjgxRDU2Mzg5ODM1N0YzN0E3RDREOTcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0czcDl0a2NoZEFQdnBKOVNvcXlwOXFaSEdtOWNTOTRMUmExSDlna3hZTEFTLzIv
MzQzNTJlMzIzMzM1MmUzNTMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM4
MzIzMDM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLes0MA0GCSqGSIb3DQEBCwUAA4IBAQCnkRDD3c04
S22Z7+jjVkAlMpHiqZ9zmSgrfpC/I5US1eY7pOoT985sgkyH/nDUepF8qiwGkkej
lgtBmLug6gB02kd6UXyqbTmuU2wrbVZzgMbyD7Kut8w2JQdoHmHI2tpskFpoRhjC
KbWU97/5vmQjNOm2cyJUFx9hG2hvaEhtx/B4qk+pojEoq5nCAwGL1gK7HqErwGGR
RIglixelacr7L5HX/5/V7cSIufVX2b0SerJ5YvBHmAXkmwIP7Mt5imKTDO0LigEc
PTnlx/GtlhjzRMsNFjJL7QwoCbsANj1l6X2bNd6eL84Wik6pFEVNhmaM9MwSlKAo
5durJBkoOtS/
-----END CERTIFICATE-----
Generated at Tue Jun 10 02:10:06 2025 by rpki-client