Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2u9S3vCrMJBVw8usSepK6WdqvsKRXVNsZR4HsoTRHPqy/0/34352e3233332e36302e302f32322d3234203d3e20323637323935.roa
File: 34352e3233332e36302e302f32322d3234203d3e20323637323935.roa (raw, json)
Hash identifier: 17jH15Od8HCFRzdrKcVG9AghaOY837Y6AnW+Nq+u6jg=
Subject key identifier: 98:35:FA:3C:3A:9D:FE:16:6D:44:BD:3C:39:32:79:51:BB:C0:6C:8B
Certificate issuer: /CN=46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2
Certificate serial: 42B9FCF9803DAC3103510C442C294B12F45DF82D
Authority key identifier: 46:AF:B2:FA:4A:DA:42:A7:6C:BC:C1:53:83:EF:D8:FF:C7:3D:09:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2u9S3vCrMJBVw8usSepK6WdqvsKRXVNsZR4HsoTRHPqy/0/34352e3233332e36302e302f32322d3234203d3e20323637323935.roa
Signing time: Fri 06 Dec 2024 03:20:13 +0000
ROA not before: Fri 06 Dec 2024 03:15:13 +0000
ROA not after: Fri 05 Dec 2025 03:20:13 +0000
asID: 267295
IP address blocks: 45.233.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:b9:fc:f9:80:3d:ac:31:03:51:0c:44:2c:29:4b:12:f4:5d:f8:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2
Validity
Not Before: Dec 6 03:15:13 2024 GMT
Not After : Dec 5 03:20:13 2025 GMT
Subject: CN=9835FA3C3A9DFE166D44BD3C39327951BBC06C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:f2:f2:1f:5c:99:7f:36:10:67:e0:13:44:
29:a9:ec:28:86:d0:7f:94:04:52:b9:ff:76:8d:8b:
d2:d0:f2:13:7d:d2:d2:63:a2:d0:36:1a:3a:ee:3a:
83:c3:12:49:01:be:02:40:d7:3a:2b:4a:30:9d:83:
93:3d:87:cd:7c:34:3e:e9:20:fc:b2:f8:99:bd:51:
ec:0b:34:4d:cb:8a:90:d1:dc:5c:db:1d:1f:71:e4:
9a:d5:cd:03:e2:cd:8a:93:cd:32:d8:9f:a9:72:51:
88:a2:39:49:eb:4d:ee:b4:bd:f8:e9:b9:35:59:de:
20:80:fa:6d:6c:2b:2b:d2:89:cf:8a:3c:5b:94:9b:
e5:da:df:cc:78:dc:5f:1b:90:2f:3f:c4:f3:27:d4:
35:17:0a:6f:b2:55:a5:6c:f0:5b:f8:8b:90:8f:4a:
00:15:b7:30:24:7f:39:90:f4:cb:a9:a6:a1:a5:99:
84:09:29:e5:36:25:54:49:ac:9a:22:2d:25:16:7f:
18:86:94:22:33:4f:41:b1:1c:14:f1:30:a8:c5:aa:
23:3f:86:d0:7f:4a:98:46:22:1a:8d:88:a1:96:4e:
15:7b:24:18:4e:ea:67:f2:b1:e9:56:9b:89:56:ea:
97:43:43:ea:11:b8:66:64:fc:fb:30:a1:8e:90:9e:
9c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:35:FA:3C:3A:9D:FE:16:6D:44:BD:3C:39:32:79:51:BB:C0:6C:8B
X509v3 Authority Key Identifier:
keyid:46:AF:B2:FA:4A:DA:42:A7:6C:BC:C1:53:83:EF:D8:FF:C7:3D:09:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2u9S3vCrMJBVw8usSepK6WdqvsKRXVNsZR4HsoTRHPqy/0/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/46AFB2FA4ADA42A76CBCC15383EFD8FFC73D09F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2u9S3vCrMJBVw8usSepK6WdqvsKRXVNsZR4HsoTRHPqy/0/34352e3233332e36302e302f32322d3234203d3e20323637323935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:10:6c:4c:00:02:b2:81:a0:50:2a:f8:49:eb:1f:4b:ca:da:
47:f7:4c:d4:95:42:18:e5:c4:91:ae:a8:a9:55:61:b2:31:db:
21:a9:d5:91:57:3f:14:b9:23:e5:f5:19:a4:48:e2:03:fd:31:
68:fe:a8:dc:0a:d5:8a:e7:6d:09:02:b0:e6:82:1e:84:27:66:
b2:00:ef:ef:82:42:9b:2e:e4:d7:4d:64:9f:a7:13:6f:8d:0b:
0d:87:e3:b1:46:37:63:9b:0e:17:ed:6c:a5:3c:dc:bf:32:ac:
fb:2e:c2:bd:91:22:2c:0a:ce:57:8c:07:d6:b4:7c:21:e2:69:
7c:59:82:8b:63:57:bb:27:e8:1d:d5:51:06:90:0e:4b:47:c1:
99:8c:b6:f7:90:4b:29:d4:df:ff:b0:3b:d7:90:89:90:9e:ee:
ab:ab:82:c0:fe:2a:70:43:c1:30:0c:49:83:17:f1:96:07:33:
05:33:7a:30:24:b7:a9:97:97:4a:0e:28:15:a7:b3:4d:b0:96:
10:73:4c:5c:0a:bb:24:d3:9b:8d:ab:ec:35:a4:40:06:e7:b3:
27:94:77:7f:45:dd:86:77:f4:26:9e:fe:20:9d:37:fa:fd:f7:
68:78:bf:6b:e1:fc:cf:89:dd:53:33:15:e7:11:4d:0c:af:71:
10:cc:33:9a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUQrn8+YA9rDEDUQxELClLEvRd+C0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZBRkIyRkE0QURBNDJBNzZDQkNDMTUzODNFRkQ4RkZD
NzNEMDlGMjAeFw0yNDEyMDYwMzE1MTNaFw0yNTEyMDUwMzIwMTNaMDMxMTAvBgNV
BAMTKDk4MzVGQTNDM0E5REZFMTY2RDQ0QkQzQzM5MzI3OTUxQkJDMDZDOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7hfLyH1yZfzYQZ+ATRCmp7CiG
0H+UBFK5/3aNi9LQ8hN90tJjotA2GjruOoPDEkkBvgJA1zorSjCdg5M9h818ND7p
IPyy+Jm9UewLNE3LipDR3FzbHR9x5JrVzQPizYqTzTLYn6lyUYiiOUnrTe60vfjp
uTVZ3iCA+m1sKyvSic+KPFuUm+Xa38x43F8bkC8/xPMn1DUXCm+yVaVs8Fv4i5CP
SgAVtzAkfzmQ9MuppqGlmYQJKeU2JVRJrJoiLSUWfxiGlCIzT0GxHBTxMKjFqiM/
htB/SphGIhqNiKGWThV7JBhO6mfyselWm4lW6pdDQ+oRuGZk/PswoY6QnpzbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUmDX6PDqd/hZtRL08OTJ5UbvAbIswHwYDVR0j
BBgwFoAURq+y+kraQqdsvMFTg+/Y/8c9CfIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMnU5UzN2Q3JNSkJWdzh1c1NlcEs2V2RxdnNLUlhWTnNaUjRIc29UUkhQ
cXkvMC80NkFGQjJGQTRBREE0MkE3NkNCQ0MxNTM4M0VGRDhGRkM3M0QwOUYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ2QUZCMkZBNEFEQTQyQTc2
Q0JDQzE1MzgzRUZEOEZGQzczRDA5RjIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJ1OVMzdkNyTUpCVnc4dXNTZXBLNldkcXZzS1JYVk5zWlI0SHNvVFJIUHF5LzAv
MzQzNTJlMzIzMzMzMmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM3
MzIzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLek8MA0GCSqGSIb3DQEBCwUAA4IBAQBOEGxMAAKy
gaBQKvhJ6x9LytpH90zUlUIY5cSRrqipVWGyMdshqdWRVz8UuSPl9RmkSOID/TFo
/qjcCtWK520JArDmgh6EJ2ayAO/vgkKbLuTXTWSfpxNvjQsNh+OxRjdjmw4X7Wyl
PNy/Mqz7LsK9kSIsCs5XjAfWtHwh4ml8WYKLY1e7J+gd1VEGkA5LR8GZjLb3kEsp
1N//sDvXkImQnu6rq4LA/ipwQ8EwDEmDF/GWBzMFM3owJLepl5dKDigVp7NNsJYQ
c0xcCrsk05uNq+w1pEAG57MnlHd/Rd2Gd/Qmnv4gnTf6/fdoeL9r4fzPid1TMxXn
EU0Mr3EQzDOa
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:00:32 2025 by rpki-client