Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39332e302f32342d3234203d3e20323636313239.roa
File: 34352e362e39332e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier: Q/jZkmeWtiCmMZ2ovSRcWBE2RGLOXy1hRxWLEsu14JY=
Subject key identifier: DD:9A:D6:1A:DD:B3:7C:05:9E:93:67:60:88:FA:D9:E6:D4:34:1A:B8
Certificate issuer: /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial: 06FCED29624BBD594F0E3E656AABF13A8971DF86
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39332e302f32342d3234203d3e20323636313239.roa
Signing time: Wed 05 Mar 2025 19:00:16 +0000
ROA not before: Wed 05 Mar 2025 18:55:16 +0000
ROA not after: Wed 04 Mar 2026 19:00:16 +0000
asID: 266129
IP address blocks: 45.6.93.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:fc:ed:29:62:4b:bd:59:4f:0e:3e:65:6a:ab:f1:3a:89:71:df:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Validity
Not Before: Mar 5 18:55:16 2025 GMT
Not After : Mar 4 19:00:16 2026 GMT
Subject: CN=DD9AD61ADDB37C059E93676088FAD9E6D4341AB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:bf:f6:c4:c0:92:e8:c6:f8:eb:d9:59:0b:8c:
16:a6:b6:54:5f:32:4d:fe:87:d4:93:6a:fe:c6:da:
a4:a2:2a:d3:da:49:5a:de:c5:90:77:7b:27:49:3e:
f6:a8:62:9c:b6:d0:8b:90:8a:ff:02:64:bb:fb:44:
05:d1:52:01:3b:a4:ff:10:ef:1a:c6:71:61:96:86:
c7:22:c1:13:d3:83:52:a9:c1:f7:da:6e:d6:ab:88:
09:76:69:24:f5:81:0d:62:a5:e3:bb:ae:7a:67:c2:
7b:d0:ae:9b:9c:fa:d8:83:f5:2b:a4:e4:cc:9c:07:
43:46:c9:40:d0:c6:cb:50:64:96:8c:2a:0f:92:e5:
fe:40:b4:13:d6:21:e1:ed:45:6b:fb:3b:c0:f2:e2:
f1:27:92:87:41:15:b0:18:be:f2:0f:d7:6a:e0:ad:
d6:2c:91:8e:0d:5d:fb:93:6b:a7:21:3d:0b:6a:cb:
4d:f5:23:37:8e:c9:89:0d:b2:33:9a:a3:43:45:ca:
74:17:fd:78:b5:65:a9:ee:ad:6f:de:09:b1:17:59:
f3:46:b2:83:66:5e:11:c5:16:f8:da:c9:a9:6b:9a:
02:55:ce:64:e9:86:c4:22:54:8c:db:44:c2:ed:5e:
67:69:d6:2d:3f:bc:32:2a:fe:68:9c:e1:a7:fe:8d:
a2:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9A:D6:1A:DD:B3:7C:05:9E:93:67:60:88:FA:D9:E6:D4:34:1A:B8
X509v3 Authority Key Identifier:
keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39332e302f32342d3234203d3e20323636313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.93.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:61:79:d9:84:26:e2:66:06:e5:2a:4f:0e:8f:9f:14:ff:25:
8b:6c:79:41:5c:a1:f4:7c:38:dc:df:ac:bd:56:4f:01:bf:04:
ed:b0:8f:fc:d3:73:6a:0d:8b:fc:f2:0a:a8:2f:43:19:bd:fa:
b4:9b:20:18:2e:9d:d4:b7:40:7a:a0:27:55:57:5d:35:4c:2c:
83:91:10:ff:53:d7:1a:c7:16:98:cb:bb:17:30:d1:9f:4e:e4:
44:d7:c0:89:da:8f:09:0b:1e:4e:e7:5d:05:4c:96:f8:cb:bc:
4d:3d:94:71:77:5a:b7:c5:9a:ce:be:f9:35:8f:7f:d6:8b:ec:
0e:9c:1c:09:27:c6:77:99:59:a4:61:96:c2:66:c3:cc:74:ff:
6f:6a:1c:6c:31:0c:28:5c:f0:05:5f:22:34:15:4a:44:1b:2b:
21:c8:1d:37:73:c4:51:7d:11:20:c2:d9:b2:07:9a:f9:15:0f:
93:03:45:e5:6c:18:5d:31:a7:c8:cf:ab:8d:ed:7b:28:38:6b:
63:78:8d:8d:b0:36:ee:9c:27:be:2b:83:72:53:90:d7:04:d2:
43:85:de:42:6b:17:00:3c:8b:59:84:8e:1b:54:e7:f0:78:e5:
06:64:9e:53:97:6c:40:34:9d:b1:af:ea:bb:14:4e:ab:c3:83:
78:f1:4a:7b
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUBvztKWJLvVlPDj5laqvxOolx34YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEU4NEZGOTEyMUQ5MjU3Mzc2RDc3N0EwOTI1MzNEOENF
REI5RUU5RTAeFw0yNTAzMDUxODU1MTZaFw0yNjAzMDQxOTAwMTZaMDMxMTAvBgNV
BAMTKEREOUFENjFBRERCMzdDMDU5RTkzNjc2MDg4RkFEOUU2RDQzNDFBQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlv/bEwJLoxvjr2VkLjBamtlRf
Mk3+h9STav7G2qSiKtPaSVrexZB3eydJPvaoYpy20IuQiv8CZLv7RAXRUgE7pP8Q
7xrGcWGWhsciwRPTg1KpwffabtariAl2aST1gQ1ipeO7rnpnwnvQrpuc+tiD9Suk
5MycB0NGyUDQxstQZJaMKg+S5f5AtBPWIeHtRWv7O8Dy4vEnkodBFbAYvvIP12rg
rdYskY4NXfuTa6chPQtqy031IzeOyYkNsjOao0NFynQX/Xi1ZanurW/eCbEXWfNG
soNmXhHFFvjayalrmgJVzmTphsQiVIzbRMLtXmdp1i0/vDIq/mic4af+jaKtAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU3ZrWGt2zfAWek2dgiPrZ5tQ0GrgwHwYDVR0j
BBgwFoAUjoT/kSHZJXN213egklM9jO257p4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1lEelE1bmIxN3lwWko5dnJLYjcyMnlCWWV3a21LRGUyRXdZcVNqSmp3
dVcvMS84RTg0RkY5MTIxRDkyNTczNzZENzc3QTA5MjUzM0Q4Q0VEQjlFRTlFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzhFODRGRjkxMjFEOTI1NzM3
NkQ3NzdBMDkyNTMzRDhDRURCOUVFOUUuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNZRHpRNW5iMTd5cFpKOXZyS2I3MjJ5Qllld2ttS0RlMkV3WXFTakpqd3VXLzEv
MzQzNTJlMzYyZTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2MzYzMTMy
Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAAtBl0wDQYJKoZIhvcNAQELBQADggEBALBhedmEJuJmBuUq
Tw6PnxT/JYtseUFcofR8ONzfrL1WTwG/BO2wj/zTc2oNi/zyCqgvQxm9+rSbIBgu
ndS3QHqgJ1VXXTVMLIOREP9T1xrHFpjLuxcw0Z9O5ETXwInajwkLHk7nXQVMlvjL
vE09lHF3WrfFms6++TWPf9aL7A6cHAknxneZWaRhlsJmw8x0/29qHGwxDChc8AVf
IjQVSkQbKyHIHTdzxFF9ESDC2bIHmvkVD5MDReVsGF0xp8jPq43teyg4a2N4jY2w
Nu6cJ74rg3JTkNcE0kOF3kJrFwA8i1mEjhtU5/B45QZknlOXbEA0nbGv6rsUTqvD
g3jxSns=
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:22:58 2025 by rpki-client