Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa
File: 34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa (raw, json)
Hash identifier: +7OsYGFLLE34axyXqZZtr1ynea15VxwjyS1k6vQ9Zsw=
Subject key identifier: DA:69:67:ED:A4:3C:D6:42:EB:C9:31:D3:2E:09:4A:82:56:6C:E7:66
Certificate issuer: /CN=B325121E804B0FC95B1063C1102CA90077C97D97
Certificate serial: 2DAB0F6473DFFC528C92C984ED6D2B10B4C0E4CC
Authority key identifier: B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa
Signing time: Sun 02 Feb 2025 00:02:52 +0000
ROA not before: Sat 01 Feb 2025 23:57:52 +0000
ROA not after: Sun 01 Feb 2026 00:02:52 +0000
asID: 269014
IP address blocks: 45.176.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:ab:0f:64:73:df:fc:52:8c:92:c9:84:ed:6d:2b:10:b4:c0:e4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B325121E804B0FC95B1063C1102CA90077C97D97
Validity
Not Before: Feb 1 23:57:52 2025 GMT
Not After : Feb 1 00:02:52 2026 GMT
Subject: CN=DA6967EDA43CD642EBC931D32E094A82566CE766
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1f:45:d6:59:74:fc:45:e9:32:4e:17:94:d0:
f8:31:45:12:11:53:33:47:9a:33:0e:7a:68:11:51:
b0:26:07:08:73:04:40:c8:40:ff:35:1e:75:d9:39:
45:ec:0d:76:95:38:a4:d6:1d:8a:63:3d:20:d6:64:
ec:79:b6:f1:c9:69:1d:7f:89:1e:02:2e:f9:72:e1:
73:70:66:ff:5d:38:e6:72:99:ca:e2:86:dd:ad:4b:
2d:94:60:0d:7f:6c:f7:da:c4:3f:b6:a8:1e:c8:44:
f7:74:2d:a6:23:98:e1:46:39:d9:4b:9e:fe:6f:47:
82:cf:7f:7e:18:f2:ad:92:6a:71:10:ca:0d:09:37:
1d:9f:2e:40:a5:72:31:16:f4:35:ee:3b:2f:aa:ef:
f5:97:8e:41:53:10:85:5e:99:9d:3f:43:4d:c8:e9:
ac:37:41:05:90:e0:96:01:71:11:8d:68:25:74:c3:
ec:67:50:b5:75:21:f9:ff:d4:1d:99:0a:8a:b5:30:
cf:4d:bc:02:4b:4b:38:89:82:6b:f7:99:db:cf:ca:
79:1e:72:73:ba:53:22:31:2f:35:b1:4d:99:8a:3e:
b2:21:06:65:1a:a1:a9:58:7f:71:3c:93:f1:13:ac:
b4:44:75:99:1b:7c:04:dc:55:3c:34:77:b1:87:b8:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:69:67:ED:A4:3C:D6:42:EB:C9:31:D3:2E:09:4A:82:56:6C:E7:66
X509v3 Authority Key Identifier:
keyid:B3:25:12:1E:80:4B:0F:C9:5B:10:63:C1:10:2C:A9:00:77:C9:7D:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/B325121E804B0FC95B1063C1102CA90077C97D97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B325121E804B0FC95B1063C1102CA90077C97D97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANdqJtCdJ5AUHEtoPgkKMzZdyKA9tZYsUxLWs8K3a61F/0/34352e3137362e3232312e302f32342d3234203d3e20323639303134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.221.0/24
Signature Algorithm: sha256WithRSAEncryption
91:db:00:9a:82:5b:37:08:d5:b5:36:cd:4d:b5:fb:a5:2d:36:
a0:6a:35:00:08:b2:0a:e8:c6:ec:6b:2f:fd:a8:2c:e5:a5:37:
2a:9e:f9:03:61:80:23:e3:36:34:81:aa:90:1a:24:61:09:01:
99:69:ae:dd:01:77:18:97:d2:36:09:ed:ce:64:3f:26:d1:d1:
8c:25:73:32:16:4a:8f:2c:99:d9:91:71:dc:aa:bc:2e:3e:0e:
7e:57:78:f9:26:b2:00:5c:a8:5a:f8:bc:b9:66:5c:c4:4d:d3:
e2:ed:93:10:2d:fb:7f:ac:7f:f0:e5:0a:22:77:aa:aa:94:2c:
88:7b:c7:e4:c4:01:3f:48:8c:ba:41:ff:6d:dd:e6:96:56:42:
91:3f:48:18:dc:7d:a8:cd:4d:0a:63:ec:c1:fd:3a:9b:71:d9:
03:b6:9b:c1:e7:e7:ef:f6:7d:c8:09:9a:00:99:1d:26:bb:53:
38:dd:81:86:e7:62:a4:fa:6a:cd:1d:1a:57:40:09:73:29:10:
40:6d:49:ca:34:92:49:ca:b8:69:a5:82:24:a5:d6:69:29:31:
1b:96:a6:03:2e:94:df:f6:0d:01:8c:10:b2:0d:cc:b7:37:ee:
4c:7e:2b:41:0e:12:64:f8:bb:87:21:03:11:fd:b1:c9:31:54:
89:1f:1d:f1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULasPZHPf/FKMksmE7W0rELTA5MwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjMyNTEyMUU4MDRCMEZDOTVCMTA2M0MxMTAyQ0E5MDA3
N0M5N0Q5NzAeFw0yNTAyMDEyMzU3NTJaFw0yNjAyMDEwMDAyNTJaMDMxMTAvBgNV
BAMTKERBNjk2N0VEQTQzQ0Q2NDJFQkM5MzFEMzJFMDk0QTgyNTY2Q0U3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrH0XWWXT8RekyTheU0PgxRRIR
UzNHmjMOemgRUbAmBwhzBEDIQP81HnXZOUXsDXaVOKTWHYpjPSDWZOx5tvHJaR1/
iR4CLvly4XNwZv9dOOZymcriht2tSy2UYA1/bPfaxD+2qB7IRPd0LaYjmOFGOdlL
nv5vR4LPf34Y8q2SanEQyg0JNx2fLkClcjEW9DXuOy+q7/WXjkFTEIVemZ0/Q03I
6aw3QQWQ4JYBcRGNaCV0w+xnULV1Ifn/1B2ZCoq1MM9NvAJLSziJgmv3mdvPynke
cnO6UyIxLzWxTZmKPrIhBmUaoalYf3E8k/ETrLREdZkbfATcVTw0d7GHuK4BAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU2mln7aQ81kLryTHTLglKglZs52YwHwYDVR0j
BBgwFoAUsyUSHoBLD8lbEGPBECypAHfJfZcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQU5kcUp0Q2RKNUFVSEV0b1Bna0tNelpkeUtBOXRaWXNVeExXczhLM2E2
MUYvMC9CMzI1MTIxRTgwNEIwRkM5NUIxMDYzQzExMDJDQTkwMDc3Qzk3RDk3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzMjUxMjFFODA0QjBGQzk1
QjEwNjNDMTEwMkNBOTAwNzdDOTdEOTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FOZHFKdENkSjVBVUhFdG9QZ2tLTXpaZHlLQTl0WllzVXhMV3M4SzNhNjFGLzAv
MzQzNTJlMzEzNzM2MmUzMjMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtsN0wDQYJKoZIhvcNAQELBQADggEBAJHbAJqC
WzcI1bU2zU21+6UtNqBqNQAIsgroxuxrL/2oLOWlNyqe+QNhgCPjNjSBqpAaJGEJ
AZlprt0BdxiX0jYJ7c5kPybR0YwlczIWSo8smdmRcdyqvC4+Dn5XePkmsgBcqFr4
vLlmXMRN0+LtkxAt+3+sf/DlCiJ3qqqULIh7x+TEAT9IjLpB/23d5pZWQpE/SBjc
fajNTQpj7MH9Optx2QO2m8Hn5+/2fcgJmgCZHSa7UzjdgYbnYqT6as0dGldACXMp
EEBtSco0kknKuGmlgiSl1mkpMRuWpgMulN/2DQGMELINzLc37kx+K0EOEmT4u4ch
AxH9sckxVIkfHfE=
-----END CERTIFICATE-----
Generated at Wed Apr 23 11:54:46 2025 by rpki-client