Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32322d3332203d3e2030.roa
File: 34352e3233312e3137322e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier: 861e8Q/Ay7yfFinsk9h0BnY/X5hYkrUxB5CX/11xaHw=
Subject key identifier: DB:37:D6:4D:7D:EF:95:51:80:14:E3:20:EF:8D:58:07:08:E9:6D:96
Certificate issuer: /CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Certificate serial: 527FC5B5E2F953FBD2890AAABF617805C6F311CA
Authority key identifier: FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject info access: rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32322d3332203d3e2030.roa
Signing time: Sun 02 Feb 2025 15:05:16 +0000
ROA not before: Sun 02 Feb 2025 15:00:16 +0000
ROA not after: Sun 01 Feb 2026 15:05:16 +0000
asID: 0
IP address blocks: 45.231.172.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7f:c5:b5:e2:f9:53:fb:d2:89:0a:aa:bf:61:78:05:c6:f3:11:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FFD6C5FB56F6D62A4CAD09740260CC262A90B013
Validity
Not Before: Feb 2 15:00:16 2025 GMT
Not After : Feb 1 15:05:16 2026 GMT
Subject: CN=DB37D64D7DEF95518014E320EF8D580708E96D96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:6b:90:cc:ae:5c:f0:fd:c2:6e:43:ef:3c:
40:7a:35:4b:04:ff:a5:31:ed:70:bc:85:d8:96:4e:
55:21:c9:39:38:0c:ba:74:98:09:70:69:d6:2b:a1:
9c:38:68:64:27:04:07:b3:69:16:29:16:b4:38:43:
d1:0b:75:16:81:ae:cc:56:1f:d4:cd:23:9f:71:84:
40:0d:07:0c:8a:29:10:c1:e5:b9:b3:d8:df:f2:d6:
ef:a0:2f:8f:3a:1b:2c:4a:68:4b:d2:b7:9c:a6:ae:
96:02:11:21:07:a6:74:55:d9:0d:d5:5b:69:7d:82:
d8:f8:15:23:7a:88:6f:b2:be:19:1e:89:72:98:05:
65:ef:95:97:05:6f:f6:5a:29:25:4a:d9:74:2a:8a:
49:c7:0b:f1:08:71:7d:44:e4:45:ae:9b:58:6d:06:
1f:f1:c6:cb:2d:f8:e0:d1:88:ed:05:5a:c6:f5:10:
6d:a5:6e:c7:ae:97:29:1c:08:45:6f:9c:fa:aa:65:
82:ca:7b:12:d8:aa:38:7f:70:79:3f:41:02:94:ee:
fc:60:72:01:d1:61:9c:ed:78:ed:9b:ba:83:fa:83:
66:5b:d7:81:ce:67:8f:66:76:cc:43:73:29:35:53:
11:93:97:b1:99:c1:e4:c7:bc:74:e0:b7:b3:f9:c2:
f3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:37:D6:4D:7D:EF:95:51:80:14:E3:20:EF:8D:58:07:08:E9:6D:96
X509v3 Authority Key Identifier:
keyid:FF:D6:C5:FB:56:F6:D6:2A:4C:AD:09:74:02:60:CC:26:2A:90:B0:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FFD6C5FB56F6D62A4CAD09740260CC262A90B013.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/65bP1S2Ffsb76NentzKH9s5Ws6swJVhc7j9o4uLPxUVu/0/34352e3233312e3137322e302f32322d3332203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.231.172.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:fe:29:4d:0f:4e:12:93:fb:7d:a4:81:00:67:ea:2d:79:ec:
6a:a3:7c:20:e2:34:cc:dd:ff:b9:25:b0:5e:78:f8:c1:34:11:
61:98:26:49:db:93:09:e8:5e:21:ba:15:8a:6a:80:00:3d:f2:
03:2f:d6:98:53:02:71:63:cf:f5:58:fc:6c:89:59:e5:c0:2c:
ad:b8:84:7e:4c:85:b6:7a:e4:66:10:c5:9e:69:ec:81:94:72:
f3:90:c3:12:74:13:2a:cc:e1:72:e0:8c:9e:ad:bd:c5:08:ba:
2b:73:66:7c:26:7e:aa:13:7f:37:0c:36:c6:ea:ae:59:5e:b3:
8c:2b:2d:46:a4:91:33:f5:5e:c3:5e:cc:45:bc:c6:c1:95:4b:
82:7c:92:7a:f3:35:dd:3f:25:8d:a4:25:17:05:2e:5d:82:cd:
09:f6:48:90:1d:ef:d0:9f:a2:b2:fe:8d:f7:1f:7e:61:07:1e:
5d:5a:28:42:84:50:87:9a:49:24:2b:d9:4e:b7:40:ff:dc:e1:
5c:8f:47:26:06:b2:b6:7e:25:72:ef:9f:13:96:10:59:fb:31:
1f:9f:d4:d5:d6:2a:f3:d4:8c:c5:ac:7f:a2:5e:43:8b:66:04:
24:a0:11:03:13:93:c7:f3:3f:c4:de:41:99:38:31:e3:eb:44:
ec:e4:9b:52
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUUn/FteL5U/vSiQqqv2F4BcbzEcowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkZENkM1RkI1NkY2RDYyQTRDQUQwOTc0MDI2MENDMjYy
QTkwQjAxMzAeFw0yNTAyMDIxNTAwMTZaFw0yNjAyMDExNTA1MTZaMDMxMTAvBgNV
BAMTKERCMzdENjREN0RFRjk1NTE4MDE0RTMyMEVGOEQ1ODA3MDhFOTZEOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tWuQzK5c8P3CbkPvPEB6NUsE
/6Ux7XC8hdiWTlUhyTk4DLp0mAlwadYroZw4aGQnBAezaRYpFrQ4Q9ELdRaBrsxW
H9TNI59xhEANBwyKKRDB5bmz2N/y1u+gL486GyxKaEvSt5ymrpYCESEHpnRV2Q3V
W2l9gtj4FSN6iG+yvhkeiXKYBWXvlZcFb/ZaKSVK2XQqiknHC/EIcX1E5EWum1ht
Bh/xxsst+ODRiO0FWsb1EG2lbseulykcCEVvnPqqZYLKexLYqjh/cHk/QQKU7vxg
cgHRYZzteO2buoP6g2Zb14HOZ49mdsxDcyk1UxGTl7GZweTHvHTgt7P5wvP/AgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQU2zfWTX3vlVGAFOMg741YBwjpbZYwHwYDVR0j
BBgwFoAU/9bF+1b21ipMrQl0AmDMJiqQsBMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNjViUDFTMkZmc2I3Nk5lbnR6S0g5czVXczZzd0pWaGM3ajlvNHVMUHhV
VnUvMC9GRkQ2QzVGQjU2RjZENjJBNENBRDA5NzQwMjYwQ0MyNjJBOTBCMDEzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZGRDZDNUZCNTZGNkQ2MkE0
Q0FEMDk3NDAyNjBDQzI2MkE5MEIwMTMuY2VyMIGkBggrBgEFBQcBCwSBlzCBlDCB
kQYIKwYBBQUHMAuGgYRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzY1YlAxUzJGZnNiNzZOZW50ektIOXM1V3M2c3dKVmhjN2o5bzR1TFB4VVZ1LzAv
MzQzNTJlMzIzMzMxMmUzMTM3MzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAi3nrDANBgkqhkiG9w0BAQsFAAOCAQEAOv4pTQ9OEpP7faSBAGfq
LXnsaqN8IOI0zN3/uSWwXnj4wTQRYZgmSduTCeheIboVimqAAD3yAy/WmFMCcWPP
9Vj8bIlZ5cAsrbiEfkyFtnrkZhDFnmnsgZRy85DDEnQTKszhcuCMnq29xQi6K3Nm
fCZ+qhN/Nww2xuquWV6zjCstRqSRM/Vew17MRbzGwZVLgnySevM13T8ljaQlFwUu
XYLNCfZIkB3v0J+isv6N9x9+YQceXVooQoRQh5pJJCvZTrdA/9zhXI9HJgaytn4l
cu+fE5YQWfsxH5/U1dYq89SMxax/ol5Di2YEJKARAxOTx/M/xN5BmTgx4+tE7OSb
Ug==
-----END CERTIFICATE-----
Generated at Sun Apr 13 14:45:29 2025 by rpki-client