Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa
File: 34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa (raw, json)
Hash identifier: 0YsTjeqlNRVyQvgwlwqrsgilyPHmCf1iPKM6xbeuc78=
Subject key identifier: 46:B4:C1:43:F9:B2:71:69:4D:8C:01:93:BD:5C:DA:55:48:62:9B:5A
Certificate issuer: /CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Certificate serial: 245AA0DA0DD4C8718E1730F9955A57688E684931
Authority key identifier: 01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa
Signing time: Wed 05 Mar 2025 20:08:33 +0000
ROA not before: Wed 05 Mar 2025 20:03:33 +0000
ROA not after: Wed 04 Mar 2026 20:08:33 +0000
asID: 268824
IP address blocks: 45.172.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5a:a0:da:0d:d4:c8:71:8e:17:30:f9:95:5a:57:68:8e:68:49:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01CB7108BBCA29F554D421ACE032B977AA1BF67C
Validity
Not Before: Mar 5 20:03:33 2025 GMT
Not After : Mar 4 20:08:33 2026 GMT
Subject: CN=46B4C143F9B271694D8C0193BD5CDA5548629B5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:94:7b:89:b4:ca:b9:55:38:eb:d6:c1:90:df:
a6:80:91:c2:59:94:ce:2a:86:c5:6b:5f:5f:5c:3c:
95:71:af:dd:a7:94:50:59:37:e8:82:75:a8:02:fa:
b9:06:04:b9:63:77:ff:14:1e:ea:e1:8e:7c:c3:d8:
1c:ea:01:66:93:49:8d:2e:ec:fa:77:af:29:a8:2e:
cc:b5:00:07:25:93:3c:f3:f4:da:6f:8a:8f:39:55:
45:f2:6c:c6:f6:c8:08:3f:e5:f0:6b:8e:0d:0f:db:
b0:2f:0b:97:86:68:52:57:0a:b9:5d:af:5a:99:8f:
04:40:8c:04:1c:1e:39:62:a7:c6:0a:7e:4e:d4:18:
dc:52:a1:1c:28:c2:72:e7:bb:0b:4b:94:f6:3d:76:
1a:ac:ce:3a:3c:f6:35:e5:cb:ec:47:e0:ed:0c:17:
81:38:58:8d:5f:d8:25:84:71:80:dc:d0:3f:f4:79:
70:00:f1:cd:88:a5:8a:d5:53:b8:62:ed:4f:34:e4:
c1:39:3f:58:69:d2:8b:94:59:ee:5e:c9:d3:2c:71:
d1:82:ef:5e:73:c0:a8:88:e6:5c:8d:ef:9d:24:05:
9f:1e:c5:48:8b:cf:84:63:98:f0:3f:ad:fe:d7:2d:
1d:26:35:f4:71:51:57:a5:71:19:97:76:7f:db:bb:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B4:C1:43:F9:B2:71:69:4D:8C:01:93:BD:5C:DA:55:48:62:9B:5A
X509v3 Authority Key Identifier:
keyid:01:CB:71:08:BB:CA:29:F5:54:D4:21:AC:E0:32:B9:77:AA:1B:F6:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/01CB7108BBCA29F554D421ACE032B977AA1BF67C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9E4cGwzTuWmkMhmjB4zpcWgzWbYVTJEyd5M6GbFSfUiB/1/34352e3137322e3230302e302f32322d3234203d3e20323638383234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.200.0/22
Signature Algorithm: sha256WithRSAEncryption
08:95:20:e4:ab:6b:2b:d9:1f:ea:2e:43:7d:cb:1f:7a:7d:54:
e8:a4:2e:fb:13:2c:2c:cc:5d:aa:7d:29:68:33:3f:f4:05:fd:
03:9d:78:1d:f5:b4:06:17:fc:4d:c2:bb:65:03:8b:95:81:53:
93:58:49:65:46:f8:a1:eb:b6:24:f1:4c:32:04:20:f1:df:bc:
02:b6:68:91:d3:bb:c7:88:13:24:83:f9:4d:31:93:be:2d:5c:
e3:4c:7e:f2:bb:68:e0:47:ee:9d:97:e3:b1:30:94:b5:aa:34:
36:5d:e6:63:3f:a1:e3:59:c3:98:64:96:3b:88:39:d4:02:3c:
ad:ee:a1:e3:d4:0f:85:c3:df:04:b3:05:9d:ad:3b:88:fb:af:
bd:13:2b:f9:53:0a:26:41:0c:56:82:a3:bd:27:c3:b6:6f:09:
b7:d8:90:72:fe:17:39:cb:d7:4e:d5:79:cb:a7:40:65:94:9d:
00:76:d3:2b:a3:ec:a5:c5:d2:b8:af:95:13:a8:29:cc:34:e0:
db:08:16:1a:e4:42:dc:9c:e0:48:bd:c7:a3:ed:10:80:4c:57:
ec:7c:83:4f:cd:c6:6c:85:82:31:de:05:ff:7f:dd:5d:28:86:
07:79:7e:0a:f1:a0:26:02:2e:98:f5:9f:e2:e9:4f:bf:5b:85:
93:f3:0f:5f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJFqg2g3UyHGOFzD5lVpXaI5oSTEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFDQjcxMDhCQkNBMjlGNTU0RDQyMUFDRTAzMkI5NzdB
QTFCRjY3QzAeFw0yNTAzMDUyMDAzMzNaFw0yNjAzMDQyMDA4MzNaMDMxMTAvBgNV
BAMTKDQ2QjRDMTQzRjlCMjcxNjk0RDhDMDE5M0JENUNEQTU1NDg2MjlCNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQlHuJtMq5VTjr1sGQ36aAkcJZ
lM4qhsVrX19cPJVxr92nlFBZN+iCdagC+rkGBLljd/8UHurhjnzD2BzqAWaTSY0u
7Pp3rymoLsy1AAclkzzz9Npvio85VUXybMb2yAg/5fBrjg0P27AvC5eGaFJXCrld
r1qZjwRAjAQcHjlip8YKfk7UGNxSoRwownLnuwtLlPY9dhqszjo89jXly+xH4O0M
F4E4WI1f2CWEcYDc0D/0eXAA8c2IpYrVU7hi7U805ME5P1hp0ouUWe5eydMscdGC
715zwKiI5lyN750kBZ8exUiLz4RjmPA/rf7XLR0mNfRxUVelcRmXdn/bu7x5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURrTBQ/mycWlNjAGTvVzaVUhim1owHwYDVR0j
BBgwFoAUActxCLvKKfVU1CGs4DK5d6ob9nwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOUU0Y0d3elR1V21rTWhtakI0enBjV2d6V2JZVlRKRXlkNU02R2JGU2ZV
aUIvMS8wMUNCNzEwOEJCQ0EyOUY1NTRENDIxQUNFMDMyQjk3N0FBMUJGNjdDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzAxQ0I3MTA4QkJDQTI5RjU1
NEQ0MjFBQ0UwMzJCOTc3QUExQkY2N0MuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlFNGNHd3pUdVdta01obWpCNHpwY1dneldiWVZUSkV5ZDVNNkdiRlNmVWlCLzEv
MzQzNTJlMzEzNzMyMmUzMjMwMzAyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzODMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAItrMgwDQYJKoZIhvcNAQELBQADggEBAAiVIOSr
ayvZH+ouQ33LH3p9VOikLvsTLCzMXap9KWgzP/QF/QOdeB31tAYX/E3Cu2UDi5WB
U5NYSWVG+KHrtiTxTDIEIPHfvAK2aJHTu8eIEySD+U0xk74tXONMfvK7aOBH7p2X
47EwlLWqNDZd5mM/oeNZw5hkljuIOdQCPK3uoePUD4XD3wSzBZ2tO4j7r70TK/lT
CiZBDFaCo70nw7ZvCbfYkHL+FznL107VecunQGWUnQB20yuj7KXF0rivlROoKcw0
4NsIFhrkQtyc4Ei9x6PtEIBMV+x8g0/NxmyFgjHeBf9/3V0ohgd5fgrxoCYCLpj1
n+LpT79bhZPzD18=
-----END CERTIFICATE-----
Generated at Mon Apr 7 04:46:58 2025 by rpki-client