Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa
File: 34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa (raw, json)
Hash identifier: PW6qNzk9jv3G7oO2joSEUZBS+e8FVMLauoHOaBa3kL4=
Subject key identifier: 69:52:1B:70:C9:6F:09:1A:5B:66:C0:D3:20:92:24:38:9C:13:72:CD
Certificate issuer: /CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Certificate serial: 1289D69095A24F1E5DE241BD70580165F0BC5550
Authority key identifier: 6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa
Signing time: Thu 06 Mar 2025 09:31:55 +0000
ROA not before: Thu 06 Mar 2025 09:26:55 +0000
ROA not after: Thu 05 Mar 2026 09:31:55 +0000
asID: 268296
IP address blocks: 45.237.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:89:d6:90:95:a2:4f:1e:5d:e2:41:bd:70:58:01:65:f0:bc:55:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6FBB408034D86AB411C8C8B5E5FA96780D0C5466
Validity
Not Before: Mar 6 09:26:55 2025 GMT
Not After : Mar 5 09:31:55 2026 GMT
Subject: CN=69521B70C96F091A5B66C0D3209224389C1372CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:90:72:8d:df:a5:56:82:52:7e:d0:63:fb:52:
60:3f:6d:83:9c:a6:e9:97:21:5a:d7:29:7a:86:f8:
59:67:51:46:27:48:1c:db:63:57:c8:5f:89:ae:10:
3e:24:ad:21:8b:2a:90:d4:64:8f:16:f3:64:5b:f0:
ea:02:24:9a:c4:59:65:e5:3f:67:71:12:70:d3:01:
79:f5:90:83:b9:f3:e8:26:db:50:2c:4b:7b:34:88:
65:1a:46:a2:92:95:7c:5b:d8:1f:dc:c2:59:93:09:
7e:70:86:ff:0d:43:0a:34:17:63:60:d1:05:1a:b5:
70:af:c8:65:c5:4b:68:c6:39:c4:d7:cd:18:c1:c4:
d6:b5:67:0e:94:fa:96:57:04:42:51:67:23:fb:ad:
50:ef:f3:2f:7f:56:6f:6d:4d:87:85:4f:a4:4d:fe:
5c:ba:e9:35:6a:e2:5d:5a:86:fb:1d:91:49:07:c3:
52:06:18:bd:4e:24:6c:56:3d:de:4f:02:a1:64:a5:
2e:a6:8e:eb:9e:0f:01:8d:db:ca:4a:fc:43:00:8d:
e9:bc:03:16:8d:51:5f:53:83:a5:be:59:46:f3:de:
83:ba:4c:4d:32:29:5c:71:d0:74:b3:13:0e:6f:90:
be:9c:fc:e4:8c:f1:4a:92:2f:6d:40:3a:eb:eb:c0:
ad:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:52:1B:70:C9:6F:09:1A:5B:66:C0:D3:20:92:24:38:9C:13:72:CD
X509v3 Authority Key Identifier:
keyid:6F:BB:40:80:34:D8:6A:B4:11:C8:C8:B5:E5:FA:96:78:0D:0C:54:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6FBB408034D86AB411C8C8B5E5FA96780D0C5466.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9W4ohaAvwFsdA7vujKWPEpSSK5y5gMuGkYsvUXxjCPJr/1/34352e3233372e3234372e302f32342d3234203d3e20323638323936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.247.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:6f:16:33:f0:cc:c8:83:57:e4:3d:ca:17:0c:39:65:aa:8f:
4b:8c:2a:64:96:08:a3:36:5a:e6:5e:eb:24:b6:31:2c:8e:2a:
d4:ff:9b:6d:42:82:a4:b9:26:eb:f7:c4:ce:00:34:8f:d6:c1:
f0:2e:26:fd:e4:4c:de:43:c6:c8:b7:40:03:4d:83:c4:f9:9d:
a7:75:73:65:8d:b8:f1:53:0d:8d:4c:46:33:fc:36:b8:f1:a0:
91:24:2b:15:44:5b:d7:3e:66:00:1d:2a:6d:29:b8:2d:87:3d:
40:a9:92:08:06:44:dd:55:a2:d6:14:fc:82:c8:ed:13:25:2b:
9d:c9:b1:3b:56:13:e6:67:10:b1:f8:05:2d:09:28:77:ca:85:
98:c0:a5:71:a6:14:4f:02:97:7c:de:a4:ce:ee:ab:e8:57:72:
f8:b9:dc:b8:ef:50:db:57:80:c0:be:17:86:7e:e0:40:9c:98:
37:1c:44:c5:cf:df:c2:9a:d2:4e:d4:4d:79:6c:5e:bc:08:b3:
38:43:03:25:2f:eb:46:34:f4:51:18:96:d6:5b:12:d2:77:45:
ae:9a:1e:13:5c:2a:7e:15:40:87:c1:28:90:57:9d:0a:50:f2:
ab:06:4f:5e:97:cf:c9:4b:e3:ba:08:ce:6c:1d:36:3b:ef:51:
9b:ab:a7:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUEonWkJWiTx5d4kG9cFgBZfC8VVAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkZCQjQwODAzNEQ4NkFCNDExQzhDOEI1RTVGQTk2Nzgw
RDBDNTQ2NjAeFw0yNTAzMDYwOTI2NTVaFw0yNjAzMDUwOTMxNTVaMDMxMTAvBgNV
BAMTKDY5NTIxQjcwQzk2RjA5MUE1QjY2QzBEMzIwOTIyNDM4OUMxMzcyQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOkHKN36VWglJ+0GP7UmA/bYOc
pumXIVrXKXqG+FlnUUYnSBzbY1fIX4muED4krSGLKpDUZI8W82Rb8OoCJJrEWWXl
P2dxEnDTAXn1kIO58+gm21AsS3s0iGUaRqKSlXxb2B/cwlmTCX5whv8NQwo0F2Ng
0QUatXCvyGXFS2jGOcTXzRjBxNa1Zw6U+pZXBEJRZyP7rVDv8y9/Vm9tTYeFT6RN
/ly66TVq4l1ahvsdkUkHw1IGGL1OJGxWPd5PAqFkpS6mjuueDwGN28pK/EMAjem8
AxaNUV9Tg6W+WUbz3oO6TE0yKVxx0HSzEw5vkL6c/OSM8UqSL21AOuvrwK1PAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaVIbcMlvCRpbZsDTIJIkOJwTcs0wHwYDVR0j
BBgwFoAUb7tAgDTYarQRyMi15fqWeA0MVGYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVc0b2hhQXZ3RnNkQTd2dWpLV1BFcFNTSzV5NWdNdUdrWXN2VVh4akNQ
SnIvMS82RkJCNDA4MDM0RDg2QUI0MTFDOEM4QjVFNUZBOTY3ODBEMEM1NDY2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZGQkI0MDgwMzREODZBQjQx
MUM4QzhCNUU1RkE5Njc4MEQwQzU0NjYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlXNG9oYUF2d0ZzZEE3dnVqS1dQRXBTU0s1eTVnTXVHa1lzdlVYeGpDUEpyLzEv
MzQzNTJlMzIzMzM3MmUzMjM0MzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzgzMjM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt7fcwDQYJKoZIhvcNAQELBQADggEBAD5vFjPw
zMiDV+Q9yhcMOWWqj0uMKmSWCKM2WuZe6yS2MSyOKtT/m21CgqS5Juv3xM4ANI/W
wfAuJv3kTN5Dxsi3QANNg8T5nad1c2WNuPFTDY1MRjP8NrjxoJEkKxVEW9c+ZgAd
Km0puC2HPUCpkggGRN1VotYU/ILI7RMlK53JsTtWE+ZnELH4BS0JKHfKhZjApXGm
FE8Cl3zepM7uq+hXcvi53LjvUNtXgMC+F4Z+4ECcmDccRMXP38Ka0k7UTXlsXrwI
szhDAyUv60Y09FEYltZbEtJ3Ra6aHhNcKn4VQIfBKJBXnQpQ8qsGT16Xz8lL47oI
zmwdNjvvUZurp3M=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:05:52 2025 by rpki-client