Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36332e302f32342d3234203d3e20323639363637.roa
File: 34352e3139312e36332e302f32342d3234203d3e20323639363637.roa (raw, json)
Hash identifier: I7FfoDWhoUiPkPYQkZyEohbRE39RrzPsYYP2NkN6aEo=
Subject key identifier: 8F:E9:56:B8:20:36:8F:66:DC:97:FA:9E:11:8F:EC:B7:0E:17:E6:E6
Certificate issuer: /CN=FB5EF042BD78A22553B5ED9830EF05043520648D
Certificate serial: 498DECB7953D1F9EF683F2FB2146FECF92C603D2
Authority key identifier: FB:5E:F0:42:BD:78:A2:25:53:B5:ED:98:30:EF:05:04:35:20:64:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5EF042BD78A22553B5ED9830EF05043520648D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36332e302f32342d3234203d3e20323639363637.roa
Signing time: Thu 13 Mar 2025 19:12:20 +0000
ROA not before: Thu 13 Mar 2025 19:07:20 +0000
ROA not after: Thu 12 Mar 2026 19:12:20 +0000
asID: 269667
IP address blocks: 45.191.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:8d:ec:b7:95:3d:1f:9e:f6:83:f2:fb:21:46:fe:cf:92:c6:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB5EF042BD78A22553B5ED9830EF05043520648D
Validity
Not Before: Mar 13 19:07:20 2025 GMT
Not After : Mar 12 19:12:20 2026 GMT
Subject: CN=8FE956B820368F66DC97FA9E118FECB70E17E6E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c4:ab:76:41:6e:2a:cb:59:5c:e3:4c:d8:82:
84:7f:f7:1d:78:0c:bf:ea:34:9f:1a:f3:7f:6d:06:
e8:4a:05:ea:ba:17:80:27:53:79:b2:78:75:d2:35:
e5:33:82:a0:24:08:c2:c4:f0:d2:53:3c:72:eb:25:
c7:63:2d:83:9b:e0:f4:f1:80:af:4d:18:0c:72:86:
a5:3f:61:1e:f3:a9:69:48:2e:6d:60:b6:81:d4:46:
b6:1e:b6:c7:cb:a9:49:12:cc:ef:85:7a:a2:02:bd:
a2:19:a6:e0:3d:58:5c:55:7e:70:90:05:37:a8:7a:
d6:f0:44:ad:5d:0d:5c:c7:db:c1:b0:5d:7b:fa:20:
47:87:69:65:8e:9b:b9:5c:20:e8:bd:26:18:01:81:
e4:ee:17:86:ae:9c:21:00:ef:95:c8:f0:63:72:4c:
31:a9:a6:8c:e9:72:52:b8:ee:08:30:50:02:cf:2d:
9a:68:e9:a1:3c:d0:ff:bc:68:53:97:3d:20:77:58:
f8:d4:9a:c4:47:ac:09:0f:99:2e:6a:76:a5:33:da:
d6:89:37:04:20:69:b9:3d:9e:5f:3c:8b:76:81:71:
cb:02:6d:68:8d:49:5f:09:d3:1e:8e:be:1d:24:f4:
27:a4:27:80:bf:7e:b9:c3:fc:82:a8:30:95:a7:04:
08:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E9:56:B8:20:36:8F:66:DC:97:FA:9E:11:8F:EC:B7:0E:17:E6:E6
X509v3 Authority Key Identifier:
keyid:FB:5E:F0:42:BD:78:A2:25:53:B5:ED:98:30:EF:05:04:35:20:64:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/FB5EF042BD78A22553B5ED9830EF05043520648D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5EF042BD78A22553B5ED9830EF05043520648D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36332e302f32342d3234203d3e20323639363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.63.0/24
Signature Algorithm: sha256WithRSAEncryption
57:44:cd:8b:f0:bc:26:32:0c:9f:db:ea:ad:6b:54:50:26:84:
7d:54:5b:c8:61:e6:84:7b:b4:31:2f:48:a8:c8:f6:4e:12:bd:
44:bf:cc:37:a5:a2:e6:21:91:a3:13:57:26:3c:99:67:48:6c:
38:23:0e:b8:32:a8:db:7f:99:ce:dd:ce:6c:89:b6:22:2b:b3:
95:8b:b8:bc:86:5e:99:cc:cc:3d:71:32:f2:4d:c3:bb:c3:76:
f4:7f:17:9c:22:be:08:93:c0:dd:c5:6b:54:a3:16:7d:ca:a9:
7d:65:43:79:32:60:79:ec:84:42:77:83:3b:50:28:87:6e:7e:
da:cf:4c:56:9e:be:f8:d5:48:f5:b7:47:19:e6:ed:8e:37:a7:
c4:c3:33:2f:67:2a:33:75:77:fc:3d:c6:30:86:9c:af:3f:80:
28:61:a8:c2:4d:95:3e:34:a6:5b:74:90:53:51:3c:93:1e:ce:
c6:fd:aa:57:f9:43:7d:f2:b7:a1:60:d4:20:6c:ce:22:21:bc:
88:76:3d:63:48:76:29:f4:10:a8:be:bf:ac:6e:86:bf:52:e4:
72:97:ae:9b:9b:90:1a:68:21:bf:04:07:45:73:58:47:5f:51:
70:e6:2c:4b:96:18:fb:dd:a9:0a:76:12:eb:1d:45:22:71:7b:
ab:95:5d:06
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSY3st5U9H572g/L7IUb+z5LGA9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI1RUYwNDJCRDc4QTIyNTUzQjVFRDk4MzBFRjA1MDQz
NTIwNjQ4RDAeFw0yNTAzMTMxOTA3MjBaFw0yNjAzMTIxOTEyMjBaMDMxMTAvBgNV
BAMTKDhGRTk1NkI4MjAzNjhGNjZEQzk3RkE5RTExOEZFQ0I3MEUxN0U2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxKt2QW4qy1lc40zYgoR/9x14
DL/qNJ8a839tBuhKBeq6F4AnU3myeHXSNeUzgqAkCMLE8NJTPHLrJcdjLYOb4PTx
gK9NGAxyhqU/YR7zqWlILm1gtoHURrYetsfLqUkSzO+FeqICvaIZpuA9WFxVfnCQ
BTeoetbwRK1dDVzH28GwXXv6IEeHaWWOm7lcIOi9JhgBgeTuF4aunCEA75XI8GNy
TDGppozpclK47ggwUALPLZpo6aE80P+8aFOXPSB3WPjUmsRHrAkPmS5qdqUz2taJ
NwQgabk9nl88i3aBccsCbWiNSV8J0x6Ovh0k9CekJ4C/frnD/IKoMJWnBAirAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUj+lWuCA2j2bcl/qeEY/stw4X5uYwHwYDVR0j
BBgwFoAU+17wQr14oiVTte2YMO8FBDUgZI0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM2VYeW8xd1dkNUV4c0hXa1ZVNTI0NGE5dk1oM2QyWnhZY2pScnhnNTZv
TngvMC9GQjVFRjA0MkJENzhBMjI1NTNCNUVEOTgzMEVGMDUwNDM1MjA2NDhELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNUVGMDQyQkQ3OEEyMjU1
M0I1RUQ5ODMwRUYwNTA0MzUyMDY0OEQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNlWHlvMXdXZDVFeHNIV2tWVTUyNDRhOXZNaDNkMlp4WWNqUnJ4ZzU2b054LzAv
MzQzNTJlMzEzOTMxMmUzNjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb8/MA0GCSqGSIb3DQEBCwUAA4IBAQBXRM2L8Lwm
Mgyf2+qta1RQJoR9VFvIYeaEe7QxL0ioyPZOEr1Ev8w3paLmIZGjE1cmPJlnSGw4
Iw64Mqjbf5nO3c5sibYiK7OVi7i8hl6ZzMw9cTLyTcO7w3b0fxecIr4Ik8DdxWtU
oxZ9yql9ZUN5MmB57IRCd4M7UCiHbn7az0xWnr741Uj1t0cZ5u2ON6fEwzMvZyoz
dXf8PcYwhpyvP4AoYajCTZU+NKZbdJBTUTyTHs7G/apX+UN98rehYNQgbM4iIbyI
dj1jSHYp9BCovr+sboa/UuRyl66bm5AaaCG/BAdFc1hHX1Fw5ixLlhj73akKdhLr
HUUicXurlV0G
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:00:45 2025 by rpki-client