Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa
File: 3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa (raw, json)
Hash identifier: FP49kIC2o9ve5FeQPxjBiciH/Hm67a+98Tf6eJ44ZIQ=
Subject key identifier: 4C:BD:48:D8:7B:81:74:FA:88:0D:C8:DD:27:D4:F7:D0:FB:AA:09:77
Certificate issuer: /CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Certificate serial: 3B9D3A22B2F59BC2A7FB4B061330679ABA2CCFF8
Authority key identifier: 2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa
Signing time: Wed 08 Jan 2025 02:08:25 +0000
ROA not before: Wed 08 Jan 2025 02:03:25 +0000
ROA not after: Wed 07 Jan 2026 02:08:25 +0000
asID: 266020
IP address blocks: 170.245.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9d:3a:22:b2:f5:9b:c2:a7:fb:4b:06:13:30:67:9a:ba:2c:cf:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2BB312B3051F7EC4E3021CE21956D0A2A50F76EF
Validity
Not Before: Jan 8 02:03:25 2025 GMT
Not After : Jan 7 02:08:25 2026 GMT
Subject: CN=4CBD48D87B8174FA880DC8DD27D4F7D0FBAA0977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:fa:4f:26:28:61:5e:7f:a0:89:79:80:22:
5d:7f:6e:6f:e3:51:d6:9a:2c:10:40:24:b8:e7:4b:
ab:68:eb:9e:a6:d7:80:0a:19:77:ef:b1:cf:17:6e:
17:c5:3f:87:8b:fa:c3:bf:ad:f1:d5:2d:8b:c2:4a:
d3:ff:42:12:bc:35:3e:01:32:12:8e:78:65:82:50:
23:df:93:c7:ae:53:2d:02:24:43:99:85:a4:93:bc:
9d:b8:ee:02:d0:0b:a5:55:3a:5a:49:f5:c2:99:36:
dc:a8:86:6c:6d:72:e5:cb:c5:bd:e9:fa:92:1e:33:
55:46:a6:dc:94:35:25:a2:2b:aa:44:45:37:06:11:
a6:bb:f6:67:f2:4d:21:63:68:af:b2:9a:57:b7:81:
ad:ea:a8:5c:39:f3:e8:2d:90:d9:0b:0c:a6:3b:f6:
d6:dd:82:89:85:93:c4:ba:71:8b:ea:eb:58:5d:86:
42:5c:a3:eb:e3:2a:17:57:9a:2b:38:c9:08:a8:1c:
c9:66:75:21:fe:79:dd:55:22:1f:3a:a0:45:09:6b:
51:8a:d8:0a:b3:b2:68:f8:0f:66:ef:83:40:1f:04:
d3:e9:5c:37:dd:a6:12:8f:64:7e:20:9b:cb:53:86:
5d:58:28:75:d5:2e:33:63:91:8f:1a:98:e5:71:b4:
5d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BD:48:D8:7B:81:74:FA:88:0D:C8:DD:27:D4:F7:D0:FB:AA:09:77
X509v3 Authority Key Identifier:
keyid:2B:B3:12:B3:05:1F:7E:C4:E3:02:1C:E2:19:56:D0:A2:A5:0F:76:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2BB312B3051F7EC4E3021CE21956D0A2A50F76EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ATyqDupdqp6W7wUHd3z4HPHQgr6VSHehZYdtTVrEAEN/0/3137302e3234352e3233392e302f32342d3234203d3e20323636303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.245.239.0/24
Signature Algorithm: sha256WithRSAEncryption
56:39:e4:95:bc:ca:1e:4f:57:e0:4d:30:c4:b4:a0:46:27:42:
7f:7c:d4:95:06:8e:ce:bc:ac:5f:aa:d3:9f:4f:c2:94:0a:b8:
29:61:f1:06:87:08:55:77:62:3e:93:7e:a3:03:5e:be:15:bd:
ed:ab:bc:15:cb:72:85:3a:87:9b:05:e9:2d:0b:9b:86:0c:6c:
f7:a7:e9:cb:bb:1c:99:53:11:5b:33:6c:b1:8c:75:b5:28:0e:
05:e0:49:26:a0:6d:4c:b1:df:10:1b:9b:92:ad:83:39:4b:07:
ed:f4:1b:d7:64:5c:5f:6f:7f:80:66:1f:f4:c5:8a:37:85:03:
88:dc:61:72:ec:3e:e6:59:b1:5b:4d:71:28:ea:d4:34:a2:ad:
6f:5c:22:09:2e:51:4c:67:38:c5:35:6f:a2:b7:f3:31:a4:48:
28:83:ed:6e:d6:b3:3d:52:a7:a6:06:31:3a:a8:50:47:b9:8b:
78:0a:85:f3:f3:fd:0b:ef:61:6a:32:e3:90:d1:ec:f4:49:61:
41:cd:2f:7b:7e:ea:c0:c4:b8:32:55:ca:78:55:20:3c:18:35:
b2:11:0c:73:33:cd:39:b3:6c:39:07:62:72:7c:86:24:77:32:
61:ef:ca:e2:2e:46:0a:12:45:15:8e:43:c6:2b:58:bf:89:63:
60:55:3a:6d
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUO506IrL1m8Kn+0sGEzBnmrosz/gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMzEyQjMwNTFGN0VDNEUzMDIxQ0UyMTk1NkQwQTJB
NTBGNzZFRjAeFw0yNTAxMDgwMjAzMjVaFw0yNjAxMDcwMjA4MjVaMDMxMTAvBgNV
BAMTKDRDQkQ0OEQ4N0I4MTc0RkE4ODBEQzhERDI3RDRGN0QwRkJBQTA5NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFKfpPJihhXn+giXmAIl1/bm/j
UdaaLBBAJLjnS6to656m14AKGXfvsc8XbhfFP4eL+sO/rfHVLYvCStP/QhK8NT4B
MhKOeGWCUCPfk8euUy0CJEOZhaSTvJ247gLQC6VVOlpJ9cKZNtyohmxtcuXLxb3p
+pIeM1VGptyUNSWiK6pERTcGEaa79mfyTSFjaK+ymle3ga3qqFw58+gtkNkLDKY7
9tbdgomFk8S6cYvq61hdhkJco+vjKhdXmis4yQioHMlmdSH+ed1VIh86oEUJa1GK
2Aqzsmj4D2bvg0AfBNPpXDfdphKPZH4gm8tThl1YKHXVLjNjkY8amOVxtF1fAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUTL1I2HuBdPqIDcjdJ9T30PuqCXcwHwYDVR0j
BBgwFoAUK7MSswUffsTjAhziGVbQoqUPdu8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM0FUeXFEdXBkcXA2Vzd3VUhkM3o0SFBIUWdyNlZTSGVoWllkdFRWckVB
RU4vMC8yQkIzMTJCMzA1MUY3RUM0RTMwMjFDRTIxOTU2RDBBMkE1MEY3NkVGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJCQjMxMkIzMDUxRjdFQzRF
MzAyMUNFMjE5NTZEMEEyQTUwRjc2RUYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNBVHlxRHVwZHFwNlc3d1VIZDN6NEhQSFFncjZWU0hlaFpZZHRUVnJFQUVOLzAv
MzEzNzMwMmUzMjM0MzUyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNjMwMzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr17zANBgkqhkiG9w0BAQsFAAOCAQEAVjnk
lbzKHk9X4E0wxLSgRidCf3zUlQaOzrysX6rTn0/ClAq4KWHxBocIVXdiPpN+owNe
vhW97au8FctyhTqHmwXpLQubhgxs96fpy7scmVMRWzNssYx1tSgOBeBJJqBtTLHf
EBubkq2DOUsH7fQb12RcX29/gGYf9MWKN4UDiNxhcuw+5lmxW01xKOrUNKKtb1wi
CS5RTGc4xTVvorfzMaRIKIPtbtazPVKnpgYxOqhQR7mLeAqF8/P9C+9hajLjkNHs
9ElhQc0ve37qwMS4MlXKeFUgPBg1shEMczPNObNsOQdicnyGJHcyYe/K4i5GChJF
FY5DxitYv4ljYFU6bQ==
-----END CERTIFICATE-----
Generated at Wed Apr 9 10:56:17 2025 by rpki-client