Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa
File: 34352e3232392e35322e302f32332d3234203d3e20323637313234.roa (raw, json)
Hash identifier: Q49+Ib817ie0KyGeR4wh39fKnXdMQWV/H4zp2jxzikI=
Subject key identifier: D2:47:B1:6D:8F:E5:92:34:2E:61:5C:BE:D0:28:0D:80:65:E0:82:81
Certificate issuer: /CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
Certificate serial: 6410AE954831CCDA4725D7E10F6F94DFD50CFEB7
Authority key identifier: DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa
Signing time: Fri 08 Mar 2024 14:15:37 +0000
ROA not before: Fri 08 Mar 2024 14:10:37 +0000
ROA not after: Fri 07 Mar 2025 14:15:37 +0000
asID: 267124
IP address blocks: 45.229.52.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:10:ae:95:48:31:cc:da:47:25:d7:e1:0f:6f:94:df:d5:0c:fe:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA644F4C6FB419A941C003A03AB9EF864AA72A1F
Validity
Not Before: Mar 8 14:10:37 2024 GMT
Not After : Mar 7 14:15:37 2025 GMT
Subject: CN=D247B16D8FE592342E615CBED0280D8065E08281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ca:c8:74:3c:5c:dc:85:dc:97:fb:08:fe:6a:
fd:be:06:b7:21:42:7a:cf:a1:c1:bd:1f:82:d1:0b:
c2:08:42:cf:33:dc:29:3c:58:4a:19:15:7c:29:e2:
7d:94:93:d1:ae:81:04:24:c1:36:79:b3:79:b0:97:
b9:90:92:e0:5d:d8:25:b0:f4:7b:e6:fa:8f:b4:f4:
bc:45:c6:6d:d9:e3:27:17:5c:6a:3b:d8:dc:66:0d:
fc:17:66:c7:38:04:a6:bf:b3:ff:d1:21:67:66:b1:
01:d8:51:87:4b:a0:6f:2b:00:af:6c:14:73:9d:dc:
96:04:90:9b:64:9a:e2:10:82:40:f2:e7:d9:0b:46:
a6:7c:55:42:09:72:ad:66:f2:b4:86:71:8b:c3:33:
99:d3:7a:ab:c2:01:c5:0a:5c:3d:19:99:11:c7:6e:
51:fb:1c:3e:80:61:6e:a2:0d:97:25:af:ec:af:e1:
c2:8e:66:ce:12:5d:2e:2d:b4:87:3b:00:cf:3e:cb:
2d:18:48:13:4f:f6:b9:e8:09:42:5f:45:49:13:d9:
a1:8d:9a:94:2f:76:5f:e4:b7:92:02:b3:52:2e:51:
9b:48:f4:8d:7f:9a:29:27:a6:53:db:94:36:11:be:
11:6b:a9:f7:e9:e3:14:cb:66:c9:f4:5e:f5:6a:06:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:47:B1:6D:8F:E5:92:34:2E:61:5C:BE:D0:28:0D:80:65:E0:82:81
X509v3 Authority Key Identifier:
keyid:DA:64:4F:4C:6F:B4:19:A9:41:C0:03:A0:3A:B9:EF:86:4A:A7:2A:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DA644F4C6FB419A941C003A03AB9EF864AA72A1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J3fX1xjeh7VGRZqSaAZcu7HrhpbnUdGPKw98H1bNWjW1/0/34352e3232392e35322e302f32332d3234203d3e20323637313234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.52.0/23
Signature Algorithm: sha256WithRSAEncryption
44:5a:9b:13:bf:25:71:9f:66:27:0a:5b:82:60:34:32:38:de:
fa:19:f1:db:d2:16:a7:7e:bc:3e:13:8c:56:57:3d:7a:68:64:
89:a0:38:f8:92:31:f0:7c:20:f2:bd:d0:7c:ea:09:c1:85:23:
3e:eb:a0:1e:bf:1f:0c:04:09:e1:bc:c9:3c:04:25:53:59:a4:
d9:8a:9d:60:28:79:f0:5b:dc:26:9a:2a:8c:1e:9a:54:b0:e9:
ef:e5:5c:6d:9e:ba:7a:95:dc:60:8f:be:ae:0f:53:e8:32:f5:
1b:8f:e5:1c:3d:c7:61:d1:ef:e0:d1:b8:9b:a8:8f:95:18:78:
43:89:f7:4b:fa:b7:45:2a:f6:d1:cb:64:d3:31:a1:fc:3e:2c:
aa:f2:00:13:dd:cf:74:e9:c9:9d:3a:27:cd:3d:00:7d:d7:65:
20:8b:09:28:26:cc:b3:16:06:06:cf:b0:20:27:55:a1:55:43:
e6:d9:a3:6f:47:c7:61:e9:a3:9e:42:9a:0b:be:e0:23:91:c8:
b7:cd:89:b6:da:91:66:c3:f5:2a:c9:3f:c5:62:32:48:36:d1:
fc:9d:a3:ed:7b:f8:ae:8a:9f:f4:d0:d7:aa:ee:c5:7e:63:6a:
8e:e0:aa:c2:69:92:24:ad:68:9a:73:01:5d:d4:a1:34:7e:7c:
01:67:60:3d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZBCulUgxzNpHJdfhD2+U39UM/rcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREE2NDRGNEM2RkI0MTlBOTQxQzAwM0EwM0FCOUVGODY0
QUE3MkExRjAeFw0yNDAzMDgxNDEwMzdaFw0yNTAzMDcxNDE1MzdaMDMxMTAvBgNV
BAMTKEQyNDdCMTZEOEZFNTkyMzQyRTYxNUNCRUQwMjgwRDgwNjVFMDgyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeysh0PFzchdyX+wj+av2+Brch
QnrPocG9H4LRC8IIQs8z3Ck8WEoZFXwp4n2Uk9GugQQkwTZ5s3mwl7mQkuBd2CWw
9Hvm+o+09LxFxm3Z4ycXXGo72NxmDfwXZsc4BKa/s//RIWdmsQHYUYdLoG8rAK9s
FHOd3JYEkJtkmuIQgkDy59kLRqZ8VUIJcq1m8rSGcYvDM5nTeqvCAcUKXD0ZmRHH
blH7HD6AYW6iDZclr+yv4cKOZs4SXS4ttIc7AM8+yy0YSBNP9rnoCUJfRUkT2aGN
mpQvdl/kt5ICs1IuUZtI9I1/miknplPblDYRvhFrqffp4xTLZsn0XvVqBv67AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU0kexbY/lkjQuYVy+0CgNgGXggoEwHwYDVR0j
BBgwFoAU2mRPTG+0GalBwAOgOrnvhkqnKh8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSjNmWDF4amVoN1ZHUlpxU2FBWmN1N0hyaHBiblVkR1BLdzk4SDFiTldq
VzEvMC9EQTY0NEY0QzZGQjQxOUE5NDFDMDAzQTAzQUI5RUY4NjRBQTcyQTFGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0RBNjQ0RjRDNkZCNDE5QTk0
MUMwMDNBMDNBQjlFRjg2NEFBNzJBMUYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ozZlgxeGplaDdWR1JacVNhQVpjdTdIcmhwYm5VZEdQS3c5OEgxYk5XalcxLzAv
MzQzNTJlMzIzMjM5MmUzNTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM3
MzEzMjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLeU0MA0GCSqGSIb3DQEBCwUAA4IBAQBEWpsTvyVx
n2YnCluCYDQyON76GfHb0hanfrw+E4xWVz16aGSJoDj4kjHwfCDyvdB86gnBhSM+
66Aevx8MBAnhvMk8BCVTWaTZip1gKHnwW9wmmiqMHppUsOnv5Vxtnrp6ldxgj76u
D1PoMvUbj+UcPcdh0e/g0bibqI+VGHhDifdL+rdFKvbRy2TTMaH8Piyq8gAT3c90
6cmdOifNPQB912UgiwkoJsyzFgYGz7AgJ1WhVUPm2aNvR8dh6aOeQpoLvuAjkci3
zYm22pFmw/UqyT/FYjJINtH8naPte/iuip/00Neq7sV+Y2qO4KrCaZIkrWiacwFd
1KE0fnwBZ2A9
-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:07 2025 by rpki-client