Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32332d3233203d3e20323637343039.roa
File: 34352e3233352e37342e302f32332d3233203d3e20323637343039.roa (raw, json)
Hash identifier: 3Fw+miy9x794pAsd6bg1VNJtZVS51gEs09kJ5uja93Q=
Subject key identifier: 00:1A:7B:29:75:2B:F3:E0:CA:0D:2A:52:2E:A7:95:A0:E5:8A:18:58
Certificate issuer: /CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Certificate serial: 0FC10F8520C7E69EBB9B6E28E0521655DBF5302A
Authority key identifier: 52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32332d3233203d3e20323637343039.roa
Signing time: Mon 17 Feb 2025 18:19:26 +0000
ROA not before: Mon 17 Feb 2025 18:14:26 +0000
ROA not after: Mon 16 Feb 2026 18:19:26 +0000
asID: 267409
IP address blocks: 45.235.74.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:c1:0f:85:20:c7:e6:9e:bb:9b:6e:28:e0:52:16:55:db:f5:30:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52E3A728AE6CCA1CEB686AFD28166624B1529CF5
Validity
Not Before: Feb 17 18:14:26 2025 GMT
Not After : Feb 16 18:19:26 2026 GMT
Subject: CN=001A7B29752BF3E0CA0D2A522EA795A0E58A1858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2f:ec:d0:1a:15:3e:71:14:1a:c6:4c:75:eb:
8d:68:36:a2:6b:7b:b2:b8:b8:a5:1e:dc:8a:1c:fa:
3d:66:fe:54:2b:92:c9:f2:47:ae:5c:34:66:00:d1:
e0:b1:4e:ea:00:87:4e:ac:ee:c1:c7:62:14:20:9c:
e6:b5:69:c8:2e:bf:db:c8:18:9f:c1:50:ad:f2:f6:
87:8d:0e:9a:92:08:86:57:29:52:be:7b:ed:11:05:
f4:45:1c:fc:75:84:81:6d:26:b7:5e:1c:3e:39:2a:
9e:11:22:43:b8:63:e0:46:bf:0d:f2:0a:07:ec:0a:
66:9b:1d:e8:3c:50:e2:77:2c:5e:4e:1b:bf:3e:5d:
42:63:dd:4a:66:42:62:d2:7e:30:91:e4:bc:00:69:
e5:8c:17:18:45:48:73:61:df:cb:2b:28:c2:e5:ad:
17:63:63:09:e7:0b:b7:94:bb:c1:91:fa:ab:88:ff:
8d:74:56:9d:28:b2:b5:24:90:95:91:26:e0:a2:1d:
7e:0e:b1:f5:86:00:ce:ea:29:30:03:13:90:70:b8:
81:94:fd:12:b8:29:a4:d8:cb:bd:10:f1:70:19:51:
15:a4:c0:e2:34:79:96:0d:ef:20:b2:c4:02:aa:95:
94:c4:87:d2:25:fe:dc:e5:1b:c9:fd:2f:95:e5:9c:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:1A:7B:29:75:2B:F3:E0:CA:0D:2A:52:2E:A7:95:A0:E5:8A:18:58
X509v3 Authority Key Identifier:
keyid:52:E3:A7:28:AE:6C:CA:1C:EB:68:6A:FD:28:16:66:24:B1:52:9C:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52E3A728AE6CCA1CEB686AFD28166624B1529CF5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37342e302f32332d3233203d3e20323637343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.74.0/23
Signature Algorithm: sha256WithRSAEncryption
97:ac:94:4e:81:16:c4:f5:bb:b5:23:69:b5:f8:14:e5:ac:b3:
07:1b:26:52:57:c1:04:30:4a:9b:60:28:ed:c0:3e:4e:4d:7e:
01:23:32:0b:e9:c3:c1:a6:5c:52:2a:6f:84:7a:b6:2f:b2:72:
ee:80:6c:1a:cd:e0:76:5c:c5:07:83:fe:21:99:3c:fe:24:7f:
b2:7e:3b:eb:b4:87:02:38:5f:fc:00:d0:eb:00:d9:a5:b2:79:
f8:0a:eb:cf:27:98:b5:22:9a:04:20:bb:2a:a4:81:e7:31:c9:
02:1e:90:e6:c7:d3:05:ec:db:88:03:86:81:cb:63:fb:63:2e:
38:8c:e5:82:2a:d5:b9:a2:e6:08:50:5f:c8:42:70:b9:96:40:
47:d1:d7:ae:f5:a9:96:9a:07:b0:ae:fc:15:15:58:c5:de:18:
5a:61:62:cb:e5:3a:f2:c4:1d:27:d4:e8:11:e3:a2:75:b5:f7:
3e:e6:a0:a5:f4:0f:46:4f:3f:10:dd:ff:f0:c9:15:23:9d:26:
ab:48:51:41:cf:2b:ab:b1:94:76:27:0d:bc:64:f6:1e:6f:89:
65:73:84:b5:81:e4:03:9e:a1:95:bf:45:5e:6a:8d:f0:56:4c:
ad:06:f4:b1:ed:ad:11:e0:ba:54:c8:5e:17:f2:e5:35:0c:dc:
b7:d0:bb:cd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUD8EPhSDH5p67m24o4FIWVdv1MCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTJFM0E3MjhBRTZDQ0ExQ0VCNjg2QUZEMjgxNjY2MjRC
MTUyOUNGNTAeFw0yNTAyMTcxODE0MjZaFw0yNjAyMTYxODE5MjZaMDMxMTAvBgNV
BAMTKDAwMUE3QjI5NzUyQkYzRTBDQTBEMkE1MjJFQTc5NUEwRTU4QTE4NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvL+zQGhU+cRQaxkx1641oNqJr
e7K4uKUe3Ioc+j1m/lQrksnyR65cNGYA0eCxTuoAh06s7sHHYhQgnOa1acguv9vI
GJ/BUK3y9oeNDpqSCIZXKVK+e+0RBfRFHPx1hIFtJrdeHD45Kp4RIkO4Y+BGvw3y
CgfsCmabHeg8UOJ3LF5OG78+XUJj3UpmQmLSfjCR5LwAaeWMFxhFSHNh38srKMLl
rRdjYwnnC7eUu8GR+quI/410Vp0osrUkkJWRJuCiHX4OsfWGAM7qKTADE5BwuIGU
/RK4KaTYy70Q8XAZURWkwOI0eZYN7yCyxAKqlZTEh9Il/tzlG8n9L5XlnIt3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUABp7KXUr8+DKDSpSLqeVoOWKGFgwHwYDVR0j
BBgwFoAUUuOnKK5syhzraGr9KBZmJLFSnPUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQkpDNGRmaVNKVURoR0hWc2tYb2tWMXZ4U0toQ1V4Y1c1U25mSmhEaFZT
SFAvMC81MkUzQTcyOEFFNkNDQTFDRUI2ODZBRkQyODE2NjYyNEIxNTI5Q0Y1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUyRTNBNzI4QUU2Q0NBMUNF
QjY4NkFGRDI4MTY2NjI0QjE1MjlDRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0JKQzRkZmlTSlVEaEdIVnNrWG9rVjF2eFNLaENVeGNXNVNuZkpoRGhWU0hQLzAv
MzQzNTJlMzIzMzM1MmUzNzM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM3
MzQzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLetKMA0GCSqGSIb3DQEBCwUAA4IBAQCXrJROgRbE
9bu1I2m1+BTlrLMHGyZSV8EEMEqbYCjtwD5OTX4BIzIL6cPBplxSKm+EerYvsnLu
gGwazeB2XMUHg/4hmTz+JH+yfjvrtIcCOF/8ANDrANmlsnn4CuvPJ5i1IpoEILsq
pIHnMckCHpDmx9MF7NuIA4aBy2P7Yy44jOWCKtW5ouYIUF/IQnC5lkBH0deu9amW
mgewrvwVFVjF3hhaYWLL5TryxB0n1OgR46J1tfc+5qCl9A9GTz8Q3f/wyRUjnSar
SFFBzyursZR2Jw28ZPYeb4llc4S1geQDnqGVv0Veao3wVkytBvSx7a0R4LpUyF4X
8uU1DNy30LvN
-----END CERTIFICATE-----
Generated at Tue Apr 8 21:13:30 2025 by rpki-client