Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/34352e3232352e3133302e302f32342d3234203d3e20323636393337.roa
File: 34352e3232352e3133302e302f32342d3234203d3e20323636393337.roa (raw, json)
Hash identifier: cwXET+GB3M6SKPJhqWoY8kF8VI25uou6lY0tZG4tR74=
Subject key identifier: 69:2B:DA:CA:45:F3:57:23:44:FE:C4:1F:99:16:27:03:41:1F:25:5A
Certificate issuer: /CN=97764746EEB9C90039CB4860CD2FF43664361E0C
Certificate serial: 22E84BDDE0E6D18B2E9DA7624E0DCF895D8A3538
Authority key identifier: 97:76:47:46:EE:B9:C9:00:39:CB:48:60:CD:2F:F4:36:64:36:1E:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97764746EEB9C90039CB4860CD2FF43664361E0C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/34352e3232352e3133302e302f32342d3234203d3e20323636393337.roa
Signing time: Tue 11 Feb 2025 15:15:18 +0000
ROA not before: Tue 11 Feb 2025 15:10:18 +0000
ROA not after: Tue 10 Feb 2026 15:15:18 +0000
asID: 266937
IP address blocks: 45.225.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:e8:4b:dd:e0:e6:d1:8b:2e:9d:a7:62:4e:0d:cf:89:5d:8a:35:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97764746EEB9C90039CB4860CD2FF43664361E0C
Validity
Not Before: Feb 11 15:10:18 2025 GMT
Not After : Feb 10 15:15:18 2026 GMT
Subject: CN=692BDACA45F3572344FEC41F99162703411F255A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:c4:58:21:48:64:52:7b:31:b3:b0:ad:68:
f6:51:fe:e5:f4:08:80:72:d1:88:c9:21:95:ea:13:
ff:ce:65:a5:0c:2e:99:37:47:79:8d:c9:50:95:f9:
46:25:e4:b8:15:c5:2b:de:f5:07:84:73:22:e0:46:
93:74:31:33:10:18:ae:cb:9e:0f:6a:aa:56:97:00:
88:d4:4b:53:ba:72:16:ef:9d:b6:26:89:c1:57:ee:
10:02:c4:07:aa:47:5c:db:4a:88:26:8f:33:cb:ba:
10:66:6f:42:10:e5:c6:02:6f:72:3d:13:bb:b7:f4:
f9:ee:5d:05:93:ff:10:d0:8c:8f:b8:c5:28:27:86:
cb:86:18:4c:be:b1:1e:73:e9:31:36:24:e1:43:aa:
20:14:ab:ee:bd:e5:61:f2:0f:8d:3f:87:2b:27:b4:
27:41:8f:bc:3c:44:8e:b9:b0:f0:b1:95:c1:9d:e2:
60:5e:10:65:ad:f7:2b:f3:3c:3a:d5:63:60:cb:67:
6e:d5:6f:a2:c8:6b:ca:fd:34:9c:27:99:29:98:7a:
46:3e:9a:4d:cf:c1:7a:75:80:6d:9a:05:6a:62:d1:
24:bc:17:21:b3:d2:1d:35:79:66:51:37:ed:48:af:
51:27:e8:85:15:66:d4:0e:3b:32:c4:f5:cf:08:b7:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2B:DA:CA:45:F3:57:23:44:FE:C4:1F:99:16:27:03:41:1F:25:5A
X509v3 Authority Key Identifier:
keyid:97:76:47:46:EE:B9:C9:00:39:CB:48:60:CD:2F:F4:36:64:36:1E:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/97764746EEB9C90039CB4860CD2FF43664361E0C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97764746EEB9C90039CB4860CD2FF43664361E0C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GxBkmi6b8tb9TMBWRhc6Crhn1B5kyQvtRB1LinCEVhuE/0/34352e3232352e3133302e302f32342d3234203d3e20323636393337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.130.0/24
Signature Algorithm: sha256WithRSAEncryption
51:da:e1:c2:08:cb:16:80:89:63:20:64:47:b1:fa:a0:2f:ac:
2b:55:ef:c9:fb:77:76:50:44:8d:aa:1c:22:c1:a6:f4:11:8a:
6b:0f:4f:43:7e:09:d5:6e:29:7a:b8:4d:2b:89:c8:d3:df:3f:
b1:31:14:1a:1b:73:5d:6a:fa:96:c3:90:ef:98:84:b1:70:77:
90:6e:b8:47:48:89:91:63:e4:c0:fd:09:58:df:55:46:da:2b:
5a:6b:04:64:d2:6b:7e:8f:a7:92:78:d7:b8:92:41:e3:c0:50:
2a:88:1c:80:8d:6e:72:a0:c8:2b:96:0e:e7:21:3b:45:2b:54:
30:c1:d2:13:85:4f:1e:c9:c8:75:df:44:5a:87:73:ac:de:46:
aa:8e:44:c2:b8:ae:80:ca:a1:be:ee:dd:78:db:96:cf:77:17:
86:16:a8:53:1a:5f:2a:a9:80:ff:39:68:29:67:52:ba:8f:85:
05:ea:cc:24:37:ff:1f:cd:57:00:a0:13:23:68:32:ec:34:f2:
01:2c:88:dc:c2:b1:49:7a:a4:5a:32:1e:79:11:75:f5:4c:92:
54:7c:27:7d:f9:d8:fc:67:23:69:57:dc:28:a6:20:42:e7:80:
88:8e:fe:56:7c:55:25:48:24:77:c2:02:96:05:39:34:95:1d:
fc:c5:55:ab
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIuhL3eDm0YsunadiTg3PiV2KNTgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc3NjQ3NDZFRUI5QzkwMDM5Q0I0ODYwQ0QyRkY0MzY2
NDM2MUUwQzAeFw0yNTAyMTExNTEwMThaFw0yNjAyMTAxNTE1MThaMDMxMTAvBgNV
BAMTKDY5MkJEQUNBNDVGMzU3MjM0NEZFQzQxRjk5MTYyNzAzNDExRjI1NUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtMsRYIUhkUnsxs7CtaPZR/uX0
CIBy0YjJIZXqE//OZaUMLpk3R3mNyVCV+UYl5LgVxSve9QeEcyLgRpN0MTMQGK7L
ng9qqlaXAIjUS1O6chbvnbYmicFX7hACxAeqR1zbSogmjzPLuhBmb0IQ5cYCb3I9
E7u39PnuXQWT/xDQjI+4xSgnhsuGGEy+sR5z6TE2JOFDqiAUq+695WHyD40/hysn
tCdBj7w8RI65sPCxlcGd4mBeEGWt9yvzPDrVY2DLZ27Vb6LIa8r9NJwnmSmYekY+
mk3PwXp1gG2aBWpi0SS8FyGz0h01eWZRN+1Ir1En6IUVZtQOOzLE9c8It1NfAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUaSvaykXzVyNE/sQfmRYnA0EfJVowHwYDVR0j
BBgwFoAUl3ZHRu65yQA5y0hgzS/0NmQ2HgwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR3hCa21pNmI4dGI5VE1CV1JoYzZDcmhuMUI1a3lRdnRSQjFMaW5DRVZo
dUUvMC85Nzc2NDc0NkVFQjlDOTAwMzlDQjQ4NjBDRDJGRjQzNjY0MzYxRTBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk3NzY0NzQ2RUVCOUM5MDAz
OUNCNDg2MENEMkZGNDM2NjQzNjFFMEMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0d4QmttaTZiOHRiOVRNQldSaGM2Q3JobjFCNWt5UXZ0UkIxTGluQ0VWaHVFLzAv
MzQzNTJlMzIzMjM1MmUzMTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4YIwDQYJKoZIhvcNAQELBQADggEBAFHa4cII
yxaAiWMgZEex+qAvrCtV78n7d3ZQRI2qHCLBpvQRimsPT0N+CdVuKXq4TSuJyNPf
P7ExFBobc11q+pbDkO+YhLFwd5BuuEdIiZFj5MD9CVjfVUbaK1prBGTSa36Pp5J4
17iSQePAUCqIHICNbnKgyCuWDuchO0UrVDDB0hOFTx7JyHXfRFqHc6zeRqqORMK4
roDKob7u3Xjbls93F4YWqFMaXyqpgP85aClnUrqPhQXqzCQ3/x/NVwCgEyNoMuw0
8gEsiNzCsUl6pFoyHnkRdfVMklR8J3352PxnI2lX3CimIELngIiO/lZ8VSVIJHfC
ApYFOTSVHfzFVas=
-----END CERTIFICATE-----
Generated at Sun Apr 13 17:21:51 2025 by rpki-client