Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
File: 34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa (raw, json)
Hash identifier: 8X1CUyEp+r9U5yjK2MkjsmTiItzmfB9iRSbZicKoyoA=
Subject key identifier: 33:AB:C6:AF:1A:2F:AA:90:1E:FA:2C:A5:E4:57:49:C9:FE:7F:54:6C
Certificate issuer: /CN=A5A5E563B461C001EA666874188010075B6CA70D
Certificate serial: 6566451BEF6078BC1A115F20F637F15B5E7426A3
Authority key identifier: A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
Signing time: Sun 05 Jan 2025 18:58:45 +0000
ROA not before: Sun 05 Jan 2025 18:53:45 +0000
ROA not after: Sun 04 Jan 2026 18:58:45 +0000
asID: 262503
IP address blocks: 45.181.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:66:45:1b:ef:60:78:bc:1a:11:5f:20:f6:37:f1:5b:5e:74:26:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5A5E563B461C001EA666874188010075B6CA70D
Validity
Not Before: Jan 5 18:53:45 2025 GMT
Not After : Jan 4 18:58:45 2026 GMT
Subject: CN=33ABC6AF1A2FAA901EFA2CA5E45749C9FE7F546C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:99:62:56:a5:83:ce:ca:92:d1:bb:c6:43:bd:
f6:25:21:73:98:6c:ac:d9:e9:3c:5a:ff:54:cf:72:
90:97:e8:49:b3:93:3a:b5:99:de:04:15:11:23:9a:
84:2d:75:9a:4a:7b:3a:16:af:f2:c7:19:6b:70:bc:
b9:70:ec:6a:a3:8a:ec:2e:63:54:0c:22:eb:e9:9b:
06:45:91:27:a6:d7:8b:d9:d2:ce:31:2c:2b:0d:38:
dc:a4:51:b7:95:42:4d:85:24:58:b9:97:40:94:55:
3e:a0:d4:70:c2:fa:93:40:f0:f9:d5:1c:20:32:22:
e8:0f:e2:36:34:61:6d:34:40:b0:42:68:4b:4c:5f:
e7:f9:fd:43:10:9a:98:66:0f:cb:7e:ef:0b:9a:3e:
f5:aa:b1:9e:77:85:be:e5:ea:a0:d9:43:93:11:f7:
75:b5:14:0a:d2:ac:63:bd:d6:81:b9:92:cd:d0:51:
17:9d:76:89:a0:d5:f9:c8:0f:f9:7d:aa:1d:c1:19:
f8:b0:6f:bd:a6:4b:0e:0d:e9:a4:1b:23:70:4b:45:
34:f5:53:6c:24:cd:d9:0d:f7:59:9a:89:a3:7b:83:
f7:cb:01:69:a1:41:6a:a3:e9:05:98:e2:fd:56:5e:
f6:b8:70:cd:be:44:e6:cc:e1:fe:d5:99:f7:33:52:
69:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:C6:AF:1A:2F:AA:90:1E:FA:2C:A5:E4:57:49:C9:FE:7F:54:6C
X509v3 Authority Key Identifier:
keyid:A5:A5:E5:63:B4:61:C0:01:EA:66:68:74:18:80:10:07:5B:6C:A7:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/A5A5E563B461C001EA666874188010075B6CA70D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5A5E563B461C001EA666874188010075B6CA70D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Eo5QMmqtdim4jwo5AtTuPJkQizPcmWSm9foRufYMFkF/0/34352e3138312e3232382e302f32342d3234203d3e20323632353033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:0c:5e:88:24:bc:95:a5:6c:ab:15:fd:96:d3:ef:fe:b4:48:
63:b9:a9:e0:e6:d9:1d:59:b1:5b:c2:96:3f:af:f8:79:6b:d2:
3f:8f:9c:67:b6:22:db:2e:fe:68:2a:53:df:9e:e7:b1:e1:9b:
82:15:ae:ba:3f:0c:9c:f0:c3:2e:d4:6a:0e:0c:23:ef:12:32:
b2:35:e1:7a:7e:1a:7a:1f:55:d1:56:7d:ff:ff:6f:46:c5:04:
36:cf:66:93:ae:dc:8b:8e:76:39:bf:df:71:2b:15:9d:81:b6:
34:cf:01:b9:af:80:f4:83:30:cd:77:36:e7:a2:a2:d1:6d:99:
53:b0:e2:ed:f3:b9:90:e5:60:9d:a6:9e:f6:0a:ed:30:8b:9c:
1d:d6:ad:ae:0d:b2:51:68:cb:32:a0:d7:ea:ed:ef:48:61:16:
7d:b4:ee:d7:da:49:97:ad:f8:34:98:db:55:7c:2d:94:1c:a0:
9b:ee:4d:2c:fb:0c:60:eb:84:f2:8c:5e:59:48:3f:d9:84:b8:
d7:28:d7:dc:97:c4:59:1b:d7:79:06:c5:52:71:2d:32:ec:9c:
56:1f:6d:76:f3:6b:58:72:62:4c:b8:8d:e9:07:3b:1a:0c:97:
6c:4b:56:26:be:99:95:87:14:f9:f4:8e:a6:be:5b:3e:b4:54:
f8:0c:af:4d
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZWZFG+9geLwaEV8g9jfxW150JqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVBNUU1NjNCNDYxQzAwMUVBNjY2ODc0MTg4MDEwMDc1
QjZDQTcwRDAeFw0yNTAxMDUxODUzNDVaFw0yNjAxMDQxODU4NDVaMDMxMTAvBgNV
BAMTKDMzQUJDNkFGMUEyRkFBOTAxRUZBMkNBNUU0NTc0OUM5RkU3RjU0NkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmWJWpYPOypLRu8ZDvfYlIXOY
bKzZ6Txa/1TPcpCX6Emzkzq1md4EFREjmoQtdZpKezoWr/LHGWtwvLlw7Gqjiuwu
Y1QMIuvpmwZFkSem14vZ0s4xLCsNONykUbeVQk2FJFi5l0CUVT6g1HDC+pNA8PnV
HCAyIugP4jY0YW00QLBCaEtMX+f5/UMQmphmD8t+7wuaPvWqsZ53hb7l6qDZQ5MR
93W1FArSrGO91oG5ks3QUReddomg1fnID/l9qh3BGfiwb72mSw4N6aQbI3BLRTT1
U2wkzdkN91maiaN7g/fLAWmhQWqj6QWY4v1WXva4cM2+RObM4f7VmfczUml5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUM6vGrxovqpAe+iyl5FdJyf5/VGwwHwYDVR0j
BBgwFoAUpaXlY7RhwAHqZmh0GIAQB1tspw0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOEVvNVFNbXF0ZGltNGp3bzVBdFR1UEprUWl6UGNtV1NtOWZvUnVmWU1G
a0YvMC9BNUE1RTU2M0I0NjFDMDAxRUE2NjY4NzQxODgwMTAwNzVCNkNBNzBELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E1QTVFNTYzQjQ2MUMwMDFF
QTY2Njg3NDE4ODAxMDA3NUI2Q0E3MEQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhFbzVRTW1xdGRpbTRqd281QXRUdVBKa1FpelBjbVdTbTlmb1J1ZllNRmtGLzAv
MzQzNTJlMzEzODMxMmUzMjMyMzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNTMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtteQwDQYJKoZIhvcNAQELBQADggEBADoMXogk
vJWlbKsV/ZbT7/60SGO5qeDm2R1ZsVvClj+v+Hlr0j+PnGe2Itsu/mgqU9+e57Hh
m4IVrro/DJzwwy7Uag4MI+8SMrI14Xp+GnofVdFWff//b0bFBDbPZpOu3IuOdjm/
33ErFZ2BtjTPAbmvgPSDMM13NueiotFtmVOw4u3zuZDlYJ2mnvYK7TCLnB3Wra4N
slFoyzKg1+rt70hhFn207tfaSZet+DSY21V8LZQcoJvuTSz7DGDrhPKMXllIP9mE
uNco19yXxFkb13kGxVJxLTLsnFYfbXbza1hyYky4jekHOxoMl2xLVia+mZWHFPn0
jqa+Wz60VPgMr00=
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:33:02 2025 by rpki-client