Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
File: 34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (raw, json)
Hash identifier: tmAwqMhIhrFuqc+nYdV33Pa6/YiDFGZ4qnEWgs1O00c=
Subject key identifier: BA:7C:7F:39:15:B7:A4:A7:16:74:97:E5:3E:82:47:E9:68:0D:BA:C0
Certificate issuer: /CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
Certificate serial: 2C84F9FD15FD21334E27014B886A796C712EBBC1
Authority key identifier: 4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
Signing time: Thu 06 Mar 2025 15:43:40 +0000
ROA not before: Thu 06 Mar 2025 15:38:40 +0000
ROA not after: Thu 05 Mar 2026 15:43:40 +0000
asID: 269153
IP address blocks: 45.180.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:84:f9:fd:15:fd:21:33:4e:27:01:4b:88:6a:79:6c:71:2e:bb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E
Validity
Not Before: Mar 6 15:38:40 2025 GMT
Not After : Mar 5 15:43:40 2026 GMT
Subject: CN=BA7C7F3915B7A4A7167497E53E8247E9680DBAC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:a8:e5:d3:1a:29:fc:cc:ce:1f:d8:72:f0:
8c:40:87:28:2d:eb:fe:94:1e:2d:f1:fc:3a:f3:02:
9c:71:27:e3:25:cb:11:41:fb:2f:d6:8d:e5:af:09:
8a:ae:c3:dc:a5:eb:aa:13:0f:d8:73:0c:71:43:6b:
dc:a2:02:58:c8:8b:75:ee:15:46:fc:91:14:17:ae:
d0:51:03:83:63:73:1c:a4:99:a5:87:07:d1:83:b3:
74:80:e8:15:0c:9e:c1:ee:e7:13:c1:ac:66:f4:c5:
66:a5:50:cb:c3:35:1c:b2:1f:b7:fc:0f:11:f8:7b:
3a:1d:4c:6b:3a:aa:0c:56:0a:df:d7:be:8a:f6:10:
5c:e5:3a:11:9f:ea:69:e8:ae:7f:6e:d2:ab:d8:1f:
dc:09:0f:83:15:9d:06:62:ca:f2:c3:6c:45:c8:91:
b3:4d:11:0c:fb:0b:aa:cb:2d:8c:ab:c2:5a:78:68:
ff:1b:68:10:2e:e3:01:34:98:c5:30:46:12:bd:c2:
ed:85:9d:8e:a4:3d:73:8f:20:23:97:89:17:ab:69:
7a:2a:7d:61:e3:74:22:4c:ba:90:11:07:35:06:5b:
4a:81:c1:16:01:aa:19:a1:dd:37:02:03:54:63:af:
35:e4:f5:98:1c:74:ad:71:97:00:57:61:90:3d:dc:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:7C:7F:39:15:B7:A4:A7:16:74:97:E5:3E:82:47:E9:68:0D:BA:C0
X509v3 Authority Key Identifier:
keyid:4B:FC:C6:54:DB:42:48:ED:9C:C8:AF:C7:D6:1B:71:F7:0A:48:70:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BFCC654DB4248ED9CC8AFC7D61B71F70A48707E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/1/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.236.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:c8:5c:c6:16:54:06:26:2a:31:5a:ab:3c:87:71:81:a6:38:
f2:5d:61:54:37:cd:68:f2:1d:1d:c6:87:9a:20:1c:63:42:62:
d9:f7:1e:1e:9d:28:82:4d:a7:c7:52:2c:c8:c1:3e:49:23:27:
9f:2b:d7:35:a8:7f:54:0b:71:1f:58:5c:19:8d:41:83:6f:8b:
8d:4f:3f:40:53:91:05:e1:48:d3:c5:21:25:7d:e5:7b:8e:09:
e4:a3:3c:0d:05:30:b2:7a:92:ff:74:2a:fd:55:d0:a3:c9:8a:
c2:91:e4:80:f2:e1:22:f8:85:72:3f:9d:38:62:3d:b0:cb:8b:
51:5a:c5:af:da:bb:9b:75:2e:11:a3:4a:47:d1:08:01:47:e4:
36:e1:1c:da:00:b6:7d:60:97:44:37:9d:cc:d8:59:5f:80:7e:
67:25:bc:a4:c1:85:f2:30:a6:94:ef:af:6d:b2:5f:46:1f:82:
ec:3f:5e:8f:97:92:38:2c:89:8b:2f:63:2f:77:99:69:5d:b1:
d3:08:19:7d:4c:e9:6e:df:91:51:06:b4:6f:fe:01:b9:4e:5d:
5e:0d:ff:4e:46:1f:89:6e:60:1d:f0:41:4a:fc:af:11:f1:3c:
88:ea:46:5f:eb:fb:c6:db:a2:1d:91:da:b4:cb:32:8b:18:a2:
8b:b4:5e:09
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULIT5/RX9ITNOJwFLiGp5bHEuu8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGQ0M2NTREQjQyNDhFRDlDQzhBRkM3RDYxQjcxRjcw
QTQ4NzA3RTAeFw0yNTAzMDYxNTM4NDBaFw0yNjAzMDUxNTQzNDBaMDMxMTAvBgNV
BAMTKEJBN0M3RjM5MTVCN0E0QTcxNjc0OTdFNTNFODI0N0U5NjgwREJBQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZH6jl0xop/MzOH9hy8IxAhygt
6/6UHi3x/DrzApxxJ+MlyxFB+y/WjeWvCYquw9yl66oTD9hzDHFDa9yiAljIi3Xu
FUb8kRQXrtBRA4NjcxykmaWHB9GDs3SA6BUMnsHu5xPBrGb0xWalUMvDNRyyH7f8
DxH4ezodTGs6qgxWCt/Xvor2EFzlOhGf6mnorn9u0qvYH9wJD4MVnQZiyvLDbEXI
kbNNEQz7C6rLLYyrwlp4aP8baBAu4wE0mMUwRhK9wu2FnY6kPXOPICOXiReraXoq
fWHjdCJMupARBzUGW0qBwRYBqhmh3TcCA1RjrzXk9ZgcdK1xlwBXYZA93BjhAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUunx/ORW3pKcWdJflPoJH6WgNusAwHwYDVR0j
BBgwFoAUS/zGVNtCSO2cyK/H1htx9wpIcH4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3JaWHpmd2EyUDFpQzJVNmVNTVlGU1VrQnJmQzRDc2JVUjZ3QTJQVFZa
QWgvMS80QkZDQzY1NERCNDI0OEVEOUNDOEFGQzdENjFCNzFGNzBBNDg3MDdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCRkNDNjU0REI0MjQ4RUQ5
Q0M4QUZDN0Q2MUI3MUY3MEE0ODcwN0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dyWlh6ZndhMlAxaUMyVTZlTU1ZRlNVa0JyZkM0Q3NiVVI2d0EyUFRWWkFoLzEv
MzQzNTJlMzEzODMwMmUzMjMzMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIttOwwDQYJKoZIhvcNAQELBQADggEBAFrIXMYW
VAYmKjFaqzyHcYGmOPJdYVQ3zWjyHR3Gh5ogHGNCYtn3Hh6dKIJNp8dSLMjBPkkj
J58r1zWof1QLcR9YXBmNQYNvi41PP0BTkQXhSNPFISV95XuOCeSjPA0FMLJ6kv90
Kv1V0KPJisKR5IDy4SL4hXI/nThiPbDLi1Faxa/au5t1LhGjSkfRCAFH5DbhHNoA
tn1gl0Q3nczYWV+AfmclvKTBhfIwppTvr22yX0Yfguw/Xo+XkjgsiYsvYy93mWld
sdMIGX1M6W7fkVEGtG/+AblOXV4N/05GH4luYB3wQUr8rxHxPIjqRl/r+8bboh2R
2rTLMosYoou0Xgk=
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:38:27 2025 by rpki-client