Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa
File: 34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa (raw, json)
Hash identifier: kbu54ESKW1e5BIRWIv2H+d7R8holRL2gmDinoqBBatI=
Subject key identifier: F5:79:B1:EA:8C:CA:DE:B8:11:82:26:41:9B:38:41:B1:2E:70:9D:49
Certificate issuer: /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial: 4DFEA42CA77861017255159113FD0FA3010CF50A
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa
Signing time: Thu 06 Mar 2025 09:03:17 +0000
ROA not before: Thu 06 Mar 2025 08:58:17 +0000
ROA not after: Thu 05 Mar 2026 09:03:17 +0000
asID: 269145
IP address blocks: 45.180.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:fe:a4:2c:a7:78:61:01:72:55:15:91:13:fd:0f:a3:01:0c:f5:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Validity
Not Before: Mar 6 08:58:17 2025 GMT
Not After : Mar 5 09:03:17 2026 GMT
Subject: CN=F579B1EA8CCADEB8118226419B3841B12E709D49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a2:60:e8:30:3d:18:38:b4:82:f1:74:bc:69:
29:27:90:94:5a:75:9b:19:f3:72:4d:c8:86:56:88:
15:50:ee:95:52:e7:e9:08:1f:45:fe:46:39:c6:6b:
a8:e1:be:2f:d4:d7:83:e4:c7:3e:de:86:4f:3f:8f:
18:41:bf:b3:e7:0e:e4:cd:8b:f0:b5:01:21:aa:54:
16:77:65:b2:c7:e7:26:68:c7:2e:53:92:d1:46:68:
9e:45:da:02:88:3b:ed:44:12:de:93:1c:7b:10:1e:
01:69:59:db:d9:52:02:b5:8a:6f:63:db:7b:44:4c:
04:fc:3a:54:cf:58:2c:79:85:e1:ab:f8:2f:f6:b3:
c4:15:7e:62:3d:64:86:da:99:5f:ed:21:5c:31:a5:
79:f0:59:56:58:78:51:91:8d:af:2f:c4:a7:08:cf:
72:ed:b1:e9:06:15:36:f7:d0:b6:a7:72:0d:77:ed:
60:5c:1b:01:e1:27:c1:c6:e5:0b:ce:a3:53:ec:94:
03:95:30:86:6e:73:c7:86:91:74:c8:d5:72:1b:85:
1f:fb:c4:11:0c:b0:5d:d5:ba:a5:ca:ac:61:72:2d:
ad:55:b4:90:c4:d4:04:0b:ea:9f:fa:31:4b:55:31:
30:2b:64:68:2b:0e:44:05:41:09:a8:36:e3:7a:c4:
a4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:79:B1:EA:8C:CA:DE:B8:11:82:26:41:9B:38:41:B1:2E:70:9D:49
X509v3 Authority Key Identifier:
keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/34352e3138302e3138342e302f32322d3232203d3e20323639313435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:a8:2a:c4:e8:0a:bd:57:40:13:34:87:21:a9:90:41:12:2d:
8f:f0:dc:d4:29:09:cc:2e:4f:a2:21:da:1c:40:9b:fc:bd:09:
17:23:65:33:6a:47:0c:42:97:74:19:f7:bb:fc:4a:e5:ee:71:
b1:a3:8e:81:74:d6:50:ff:d1:a3:82:ba:b3:70:22:26:4d:e2:
6c:0f:e1:55:a5:f1:52:3b:e5:6b:af:63:fd:06:5c:32:b2:67:
17:21:b6:4a:ae:f0:f2:e4:e4:9c:d2:1c:4b:ec:38:81:7a:ea:
49:9e:07:98:96:a9:a8:0e:fe:f6:7a:08:95:44:72:73:f3:79:
6a:26:56:c9:e4:24:10:c0:59:cf:91:3e:2d:d0:b1:40:b0:f9:
4b:ff:21:ee:5a:04:e2:75:42:91:d6:1d:6f:19:01:bb:42:28:
3e:f1:f2:0f:6e:3e:1f:13:0f:e6:b7:a9:cd:a9:65:3d:0a:e6:
5c:2d:ad:8f:15:e1:36:c2:00:b1:a4:f5:0c:62:fa:46:c8:7b:
52:e3:bd:8f:ae:9d:c1:bd:50:d0:d0:65:08:e6:da:c4:65:eb:
2c:3d:99:4c:0a:bf:43:2c:c9:a8:7f:e3:37:29:19:94:82:dd:
fc:67:c1:eb:07:e8:7c:cf:8d:c6:c3:86:79:7a:81:47:4f:e2:
86:e9:b5:a4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTf6kLKd4YQFyVRWRE/0PowEM9QowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZBNjQ1M0ZGNkVFNDhEQUQ5QzIwQzU1MkY5QTRBRkEx
M0JGNzRGMDAeFw0yNTAzMDYwODU4MTdaFw0yNjAzMDUwOTAzMTdaMDMxMTAvBgNV
BAMTKEY1NzlCMUVBOENDQURFQjgxMTgyMjY0MTlCMzg0MUIxMkU3MDlENDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEomDoMD0YOLSC8XS8aSknkJRa
dZsZ83JNyIZWiBVQ7pVS5+kIH0X+RjnGa6jhvi/U14Pkxz7ehk8/jxhBv7PnDuTN
i/C1ASGqVBZ3ZbLH5yZoxy5TktFGaJ5F2gKIO+1EEt6THHsQHgFpWdvZUgK1im9j
23tETAT8OlTPWCx5heGr+C/2s8QVfmI9ZIbamV/tIVwxpXnwWVZYeFGRja8vxKcI
z3LtsekGFTb30Lancg137WBcGwHhJ8HG5QvOo1PslAOVMIZuc8eGkXTI1XIbhR/7
xBEMsF3VuqXKrGFyLa1VtJDE1AQL6p/6MUtVMTArZGgrDkQFQQmoNuN6xKR5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU9Xmx6ozK3rgRgiZBmzhBsS5wnUkwHwYDVR0j
BBgwFoAUP6ZFP/buSNrZwgxVL5pK+hO/dPAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMmU5NkFwdUN6ZldKbnRvMXlQZjVRMlhaQzhndHEzNFZpY2t6aG9VaGRt
TU4vMS8zRkE2NDUzRkY2RUU0OERBRDlDMjBDNTUyRjlBNEFGQTEzQkY3NEYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGQTY0NTNGRjZFRTQ4REFE
OUMyMEM1NTJGOUE0QUZBMTNCRjc0RjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJlOTZBcHVDemZXSm50bzF5UGY1UTJYWkM4Z3RxMzRWaWNremhvVWhkbU1OLzEv
MzQzNTJlMzEzODMwMmUzMTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjM2
MzkzMTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttLgwDQYJKoZIhvcNAQELBQADggEBAKaoKsTo
Cr1XQBM0hyGpkEESLY/w3NQpCcwuT6Ih2hxAm/y9CRcjZTNqRwxCl3QZ97v8SuXu
cbGjjoF01lD/0aOCurNwIiZN4mwP4VWl8VI75WuvY/0GXDKyZxchtkqu8PLk5JzS
HEvsOIF66kmeB5iWqagO/vZ6CJVEcnPzeWomVsnkJBDAWc+RPi3QsUCw+Uv/Ie5a
BOJ1QpHWHW8ZAbtCKD7x8g9uPh8TD+a3qc2pZT0K5lwtrY8V4TbCALGk9Qxi+kbI
e1LjvY+uncG9UNDQZQjm2sRl6yw9mUwKv0Msyah/4zcpGZSC3fxnwesH6HzPjcbD
hnl6gUdP4obptaQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:34:00 2025 by rpki-client