Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32322d3232203d3e20323636393234.roa
File: 34352e3232342e33322e302f32322d3232203d3e20323636393234.roa (raw, json)
Hash identifier: 3czZE1a9teLRwGWObSlD9/1IkMx8vF304zvTmw+dwTI=
Subject key identifier: D8:7A:87:06:ED:FF:B2:19:C5:0F:D5:83:0B:80:7F:9F:41:61:BC:E1
Certificate issuer: /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial: 50949FAA5DE0CC2E791C6A20CAB77792721A78E1
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32322d3232203d3e20323636393234.roa
Signing time: Sun 02 Mar 2025 16:19:04 +0000
ROA not before: Sun 02 Mar 2025 16:14:04 +0000
ROA not after: Sun 01 Mar 2026 16:19:04 +0000
asID: 266924
IP address blocks: 45.224.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:94:9f:aa:5d:e0:cc:2e:79:1c:6a:20:ca:b7:77:92:72:1a:78:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Validity
Not Before: Mar 2 16:14:04 2025 GMT
Not After : Mar 1 16:19:04 2026 GMT
Subject: CN=D87A8706EDFFB219C50FD5830B807F9F4161BCE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4f:e9:6a:cb:de:1f:95:bb:a0:45:e9:30:9d:
0e:bf:6d:c9:12:85:d4:4a:bd:8d:92:26:f2:47:1a:
02:b8:85:7f:22:36:b8:af:cd:61:1a:07:92:e5:e7:
11:bc:c9:99:3e:17:a8:ed:c1:93:e5:81:02:36:db:
30:85:2f:0e:9c:54:c9:46:6d:35:5f:4a:6e:cf:4a:
8c:c3:cb:f5:34:81:e1:95:ff:5c:3a:34:83:6f:91:
ed:ca:43:53:a4:0e:0c:db:e8:53:5d:10:22:ac:11:
40:cd:66:e2:b6:30:1c:50:5c:fb:e8:54:5a:69:38:
90:78:e5:b6:04:c1:b1:4b:f9:f3:10:09:4d:fd:03:
2c:fe:a3:43:f5:0d:ba:fe:f1:b0:7f:20:01:d1:0b:
e5:63:34:13:68:5a:50:d2:cf:2f:ee:8c:6b:ba:ba:
06:82:41:84:60:46:eb:4c:6b:af:10:1b:e3:97:ad:
d0:66:cc:d0:c8:54:a2:5f:cd:1c:50:c2:2b:85:34:
dd:f9:7e:9c:a3:b7:8b:b7:b9:bc:96:0e:13:94:5f:
ed:9f:1e:3b:42:76:41:35:b7:f0:de:65:ea:85:f6:
55:70:d9:ec:70:9b:59:d7:f1:aa:18:79:15:27:43:
01:f6:4b:d7:a6:3c:7a:0e:36:2c:48:6c:57:ee:a6:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7A:87:06:ED:FF:B2:19:C5:0F:D5:83:0B:80:7F:9F:41:61:BC:E1
X509v3 Authority Key Identifier:
keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33322e302f32322d3232203d3e20323636393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:80:34:b3:e6:bc:14:1d:74:58:f9:25:e6:bf:3e:7e:f9:42:
79:39:e6:d4:4c:d1:b4:ce:4f:36:bf:63:58:75:25:d1:83:fa:
41:76:46:1f:bf:c0:f5:ce:9a:04:1e:ed:7c:b0:76:68:38:aa:
d3:ac:b3:fd:ee:ae:cc:15:80:1e:a7:6d:f7:ef:bd:df:f9:83:
9c:51:f6:c4:2c:55:fe:a5:18:76:c2:de:b8:a6:bb:d8:41:01:
9c:91:6a:6d:d5:fe:54:8c:32:40:13:64:3e:50:9b:3d:4c:25:
b3:4c:2f:03:f7:a7:c0:61:62:7c:bb:e9:8b:d6:c1:3a:6c:35:
07:2e:6c:78:0e:a0:9a:90:5b:6d:80:62:d1:06:59:39:59:b4:
1e:a5:2d:d8:69:5c:43:d7:ce:f3:ae:93:c1:cd:49:1c:69:96:
ae:d3:a2:eb:0f:76:bd:06:a9:1c:dc:3b:79:47:5b:c3:11:6f:
ba:6e:06:6a:dc:84:a6:01:e9:af:db:1f:23:0b:03:e0:ad:3a:
44:b0:e7:fb:3a:e0:6c:fe:26:af:ca:72:9d:20:42:20:41:c5:
11:92:10:db:a9:02:8d:2e:94:6c:ac:ee:3c:39:09:b4:39:e5:
d7:e3:c1:8b:6c:fd:e3:90:99:4e:8a:27:71:75:f2:ba:24:1b:
d5:70:8e:47
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUUJSfql3gzC55HGogyrd3knIaeOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIzMzUzMzdDQkVCNTRCQkRDMEM1MUJBNDM0RjQ0MzlF
NzAwQzA1QTAeFw0yNTAzMDIxNjE0MDRaFw0yNjAzMDExNjE5MDRaMDMxMTAvBgNV
BAMTKEQ4N0E4NzA2RURGRkIyMTlDNTBGRDU4MzBCODA3RjlGNDE2MUJDRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9T+lqy94flbugRekwnQ6/bckS
hdRKvY2SJvJHGgK4hX8iNrivzWEaB5Ll5xG8yZk+F6jtwZPlgQI22zCFLw6cVMlG
bTVfSm7PSozDy/U0geGV/1w6NINvke3KQ1OkDgzb6FNdECKsEUDNZuK2MBxQXPvo
VFppOJB45bYEwbFL+fMQCU39Ayz+o0P1Dbr+8bB/IAHRC+VjNBNoWlDSzy/ujGu6
ugaCQYRgRutMa68QG+OXrdBmzNDIVKJfzRxQwiuFNN35fpyjt4u3ubyWDhOUX+2f
HjtCdkE1t/DeZeqF9lVw2exwm1nX8aoYeRUnQwH2S9emPHoONixIbFfuppT3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU2HqHBu3/shnFD9WDC4B/n0FhvOEwHwYDVR0j
BBgwFoAUizNTN8vrVLvcDFG6Q09EOecAwFowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMm9GYks4V2dZWEJBa0c4UEttZzRBY1Z1Q3VnQzRDd3k1eExHMmkzRVdT
RWMvMC84QjMzNTMzN0NCRUI1NEJCREMwQzUxQkE0MzRGNDQzOUU3MDBDMDVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhCMzM1MzM3Q0JFQjU0QkJE
QzBDNTFCQTQzNEY0NDM5RTcwMEMwNUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJvRmJLOFdnWVhCQWtHOFBLbWc0QWNWdUN1Z0M0Q3d5NXhMRzJpM0VXU0VjLzAv
MzQzNTJlMzIzMjM0MmUzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM2
MzkzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLeAgMA0GCSqGSIb3DQEBCwUAA4IBAQB9gDSz5rwU
HXRY+SXmvz5++UJ5OebUTNG0zk82v2NYdSXRg/pBdkYfv8D1zpoEHu18sHZoOKrT
rLP97q7MFYAep233773f+YOcUfbELFX+pRh2wt64prvYQQGckWpt1f5UjDJAE2Q+
UJs9TCWzTC8D96fAYWJ8u+mL1sE6bDUHLmx4DqCakFttgGLRBlk5WbQepS3YaVxD
187zrpPBzUkcaZau06LrD3a9Bqkc3Dt5R1vDEW+6bgZq3ISmAemv2x8jCwPgrTpE
sOf7OuBs/iavynKdIEIgQcURkhDbqQKNLpRsrO48OQm0OeXX48GLbP3jkJlOiidx
dfK6JBvVcI5H
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:15:09 2025 by rpki-client