Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/34352e3136372e34392e302f32342d3234203d3e20323637393935.roa
File: 34352e3136372e34392e302f32342d3234203d3e20323637393935.roa (raw, json)
Hash identifier: iLuePZWvpCW/VfRbPaxyrt5lzM3QqzFx73RqNp0nWNA=
Subject key identifier: BD:6E:B0:80:D1:EC:65:C6:AE:31:EB:1F:96:62:A9:43:60:3B:6D:72
Certificate issuer: /CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
Certificate serial: 1D5C997334D3A773CFA44D209F41E96EC69F7E88
Authority key identifier: AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/34352e3136372e34392e302f32342d3234203d3e20323637393935.roa
Signing time: Tue 26 Dec 2023 14:54:26 +0000
ROA not before: Tue 26 Dec 2023 14:49:26 +0000
ROA not after: Tue 24 Dec 2024 14:54:26 +0000
asID: 267995
IP address blocks: 45.167.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5c:99:73:34:d3:a7:73:cf:a4:4d:20:9f:41:e9:6e:c6:9f:7e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3C1DB427F9CE37E3F5083F4418419B6961377F
Validity
Not Before: Dec 26 14:49:26 2023 GMT
Not After : Dec 24 14:54:26 2024 GMT
Subject: CN=BD6EB080D1EC65C6AE31EB1F9662A943603B6D72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:d3:84:ba:86:b4:07:63:77:0a:44:d6:46:
6a:51:18:85:99:d7:23:89:1b:2f:75:d7:46:46:fb:
19:b1:6a:38:6b:bb:61:c9:d1:82:45:a5:99:d7:0d:
a7:e5:11:e6:9c:5e:1d:5b:1d:16:58:a4:1c:10:f7:
b1:e4:43:4b:44:ad:e6:2a:f1:df:00:db:9e:79:4c:
fd:c3:07:30:42:dd:75:16:58:43:fa:a7:0c:5b:c6:
ef:72:64:68:4f:a8:5f:9f:c7:f3:d3:1a:60:87:3e:
60:cd:1e:de:eb:6c:f4:f8:98:ee:20:07:fd:b7:7c:
78:07:cd:36:a7:f8:00:82:af:e0:1f:f1:68:eb:e5:
64:73:30:43:3f:40:1a:e3:6b:ad:b7:82:f3:40:d7:
64:28:c1:e0:9c:b2:de:e7:9c:e9:25:8b:15:c3:e2:
4c:fe:f6:c4:51:98:c2:c0:78:3e:60:14:1f:03:a9:
74:2d:76:4c:eb:5e:25:b2:07:d7:75:74:d9:ff:52:
8e:99:b7:00:cd:27:6a:ec:78:3f:8b:4e:17:e2:34:
51:c0:22:06:22:27:4c:c5:1c:e0:05:bc:77:0c:eb:
2a:b2:dd:0f:79:00:85:24:22:7a:fd:01:b5:ab:57:
82:ab:a1:a5:c7:14:36:a2:fd:52:66:7d:a7:68:b8:
67:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6E:B0:80:D1:EC:65:C6:AE:31:EB:1F:96:62:A9:43:60:3B:6D:72
X509v3 Authority Key Identifier:
keyid:AF:3C:1D:B4:27:F9:CE:37:E3:F5:08:3F:44:18:41:9B:69:61:37:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF3C1DB427F9CE37E3F5083F4418419B6961377F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPxoXaCbUg4zv2JvR7AmGSpvGfB911Emy5QjmBPqdLeH/0/34352e3136372e34392e302f32342d3234203d3e20323637393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.49.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:97:07:c0:7b:1f:f3:aa:d4:4c:6f:dc:f0:da:df:b1:c1:85:
1d:f0:dd:cf:d5:53:4a:e7:e9:f1:55:cf:91:9f:25:38:53:26:
52:ef:35:e6:2d:95:e5:7d:1e:4c:5a:37:07:ca:c3:74:92:3a:
db:84:c0:0e:4a:c6:6a:25:e1:6e:a0:f9:03:df:26:2a:cc:21:
62:35:3d:4d:24:9a:71:55:27:12:26:43:49:87:d4:06:24:08:
98:20:83:88:5a:1f:ea:2c:1f:92:fd:60:4d:d7:db:a6:85:4e:
e8:af:72:35:a7:7e:4c:ba:b4:3f:00:11:ff:68:03:8e:9c:5a:
ac:cc:fa:25:31:c2:86:d3:ac:5b:c9:93:f8:e5:1e:c9:14:15:
44:8e:12:dd:7d:22:67:e4:38:0d:ff:e5:97:b7:ff:a3:77:d3:
2e:9e:57:db:d7:d5:c8:26:9d:83:10:b6:4e:ea:e3:de:65:18:
7e:6e:85:29:a1:55:ff:8a:be:e7:07:fc:41:66:3a:47:21:df:
17:62:18:d0:95:22:94:0f:35:6e:72:a8:bb:d2:1a:ee:7d:df:
28:e1:80:b6:2a:93:01:6d:0f:ae:bf:2d:cd:7d:84:2e:60:b0:
43:52:97:ab:f9:91:bf:fb:08:e2:67:fb:7e:1b:82:97:b8:2f:
80:d8:48:70
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHVyZczTTp3PPpE0gn0HpbsaffogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzQzFEQjQyN0Y5Q0UzN0UzRjUwODNGNDQxODQxOUI2
OTYxMzc3RjAeFw0yMzEyMjYxNDQ5MjZaFw0yNDEyMjQxNDU0MjZaMDMxMTAvBgNV
BAMTKEJENkVCMDgwRDFFQzY1QzZBRTMxRUIxRjk2NjJBOTQzNjAzQjZENzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wtOEuoa0B2N3CkTWRmpRGIWZ
1yOJGy9110ZG+xmxajhru2HJ0YJFpZnXDaflEeacXh1bHRZYpBwQ97HkQ0tEreYq
8d8A2555TP3DBzBC3XUWWEP6pwxbxu9yZGhPqF+fx/PTGmCHPmDNHt7rbPT4mO4g
B/23fHgHzTan+ACCr+Af8Wjr5WRzMEM/QBrja623gvNA12QoweCcst7nnOklixXD
4kz+9sRRmMLAeD5gFB8DqXQtdkzrXiWyB9d1dNn/Uo6ZtwDNJ2rseD+LThfiNFHA
IgYiJ0zFHOAFvHcM6yqy3Q95AIUkInr9AbWrV4KroaXHFDai/VJmfadouGfJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvW6wgNHsZcauMesflmKpQ2A7bXIwHwYDVR0j
BBgwFoAUrzwdtCf5zjfj9Qg/RBhBm2lhN38wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1B4b1hhQ2JVZzR6djJKdlI3QW1HU3B2R2ZCOTExRW15NVFqbUJQcWRM
ZUgvMC9BRjNDMURCNDI3RjlDRTM3RTNGNTA4M0Y0NDE4NDE5QjY5NjEzNzdGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0FGM0MxREI0MjdGOUNFMzdF
M0Y1MDgzRjQ0MTg0MTlCNjk2MTM3N0YuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dQeG9YYUNiVWc0enYySnZSN0FtR1NwdkdmQjkxMUVteTVRam1CUHFkTGVILzAv
MzQzNTJlMzEzNjM3MmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALacxMA0GCSqGSIb3DQEBCwUAA4IBAQA7lwfAex/z
qtRMb9zw2t+xwYUd8N3P1VNK5+nxVc+RnyU4UyZS7zXmLZXlfR5MWjcHysN0kjrb
hMAOSsZqJeFuoPkD3yYqzCFiNT1NJJpxVScSJkNJh9QGJAiYIIOIWh/qLB+S/WBN
19umhU7or3I1p35MurQ/ABH/aAOOnFqszPolMcKG06xbyZP45R7JFBVEjhLdfSJn
5DgN/+WXt/+jd9Munlfb19XIJp2DELZO6uPeZRh+boUpoVX/ir7nB/xBZjpHId8X
YhjQlSKUDzVucqi70hrufd8o4YC2KpMBbQ+uvy3NfYQuYLBDUper+ZG/+wjiZ/t+
G4KXuC+A2Ehw
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:40:07 2025 by rpki-client