Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa
File: 34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa (raw, json)
Hash identifier: t0cQ4pAASDWWvCaj06SDRNuxYzkv19LszMrFKHtOvR0=
Subject key identifier: CF:9B:E1:38:EA:A7:09:57:A0:68:A2:72:23:BC:12:0B:0C:90:30:41
Certificate issuer: /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial: 54D36AC068A613F029A9DEF3DAF78CF0A3C75F44
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access: rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa
Signing time: Wed 05 Mar 2025 19:00:01 +0000
ROA not before: Wed 05 Mar 2025 18:55:01 +0000
ROA not after: Wed 04 Mar 2026 19:00:01 +0000
asID: 268732
IP address blocks: 45.171.216.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:d3:6a:c0:68:a6:13:f0:29:a9:de:f3:da:f7:8c:f0:a3:c7:5f:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
Validity
Not Before: Mar 5 18:55:01 2025 GMT
Not After : Mar 4 19:00:01 2026 GMT
Subject: CN=CF9BE138EAA70957A068A27223BC120B0C903041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:13:3e:e0:6e:ee:29:e3:5f:c1:de:11:a9:ac:
96:b7:38:f4:f4:60:bc:9d:4b:92:5f:8c:35:de:1d:
ea:47:6d:3b:6d:c0:d4:12:3c:fa:5b:39:91:03:47:
e7:11:d2:9f:1c:c0:f4:75:64:69:1a:83:fc:cb:e2:
cd:39:4e:5c:c3:c5:a3:0b:73:de:3e:4d:18:76:84:
32:5c:df:fa:1d:3d:01:9e:11:18:70:62:cb:62:9e:
59:54:ec:cb:15:a0:19:67:43:96:cd:14:bb:de:89:
34:a7:71:ed:19:cf:be:3f:f0:21:aa:9a:a8:bf:d1:
75:f5:6d:85:9e:08:d6:13:07:87:92:07:95:a3:03:
72:fe:aa:4b:c3:59:71:00:bd:08:bd:93:6a:cd:e8:
e1:b1:9d:f6:70:eb:7b:be:90:cd:d4:09:dd:5d:0b:
60:9c:fb:ae:69:46:c9:9d:c4:aa:fc:a4:c4:f5:e8:
1d:c2:91:0b:f4:68:53:47:9c:b5:a5:8e:bb:aa:d8:
ac:d9:80:3e:33:1b:1c:33:86:1f:68:a2:f2:22:ea:
3f:55:09:5f:7c:6b:c1:77:44:17:9d:6b:79:0d:14:
b5:8e:a3:d6:36:57:9b:d0:b0:72:80:55:1b:8f:1d:
07:2d:9a:fe:5f:83:9b:73:15:a7:58:48:4a:3c:2c:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:9B:E1:38:EA:A7:09:57:A0:68:A2:72:23:BC:12:0B:0C:90:30:41
X509v3 Authority Key Identifier:
keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231362e302f32332d3233203d3e20323638373332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.216.0/23
Signature Algorithm: sha256WithRSAEncryption
01:af:5b:9f:76:3a:43:dd:88:a8:6f:70:d3:3a:ff:01:61:d4:
76:97:9a:d1:54:a9:07:cf:9f:55:f8:0a:4e:a8:c9:a3:1b:15:
d6:98:8d:de:dc:cd:0b:c6:09:1a:48:99:c9:6c:e0:44:25:79:
87:fe:e4:1a:6a:0c:54:c7:3a:64:64:78:3e:2f:b9:a3:1c:d1:
43:c3:07:da:40:0e:61:14:22:f1:a6:c0:dd:3e:e6:b2:de:45:
35:e1:5b:85:e0:cd:d5:48:ac:32:4c:ea:60:aa:d6:32:27:9d:
d8:af:85:87:4d:ef:39:8e:90:85:e0:e5:e7:b6:84:27:95:44:
cb:fa:4f:72:b9:05:b5:0e:6f:b3:4f:b5:5d:69:96:bd:76:64:
a3:7a:80:75:c3:f0:72:7b:86:6b:8b:2d:df:de:ce:2a:ce:6a:
a5:6d:bf:8f:ed:e0:80:6f:56:77:90:14:9c:e7:25:bc:44:52:
05:88:f2:a6:d9:67:41:5c:3f:a8:ac:ee:13:73:41:cb:99:5f:
4e:db:89:b7:38:41:b9:37:77:25:9d:63:df:52:77:30:ab:5b:
63:8b:b7:e2:e8:07:0d:2f:0b:14:17:ec:ab:32:5e:b6:0f:7e:
a0:5e:3b:ea:86:52:db:2c:d4:0b:3c:d1:b0:df:1a:a4:59:17:
8f:7f:0d:f4
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUVNNqwGimE/Apqd7z2veM8KPHX0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjcxMjQ2NTFEMTlEMTMyNTQzRTk5MUI3QTc0REQ0QTY4
MDc2OEEwOTAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV
BAMTKENGOUJFMTM4RUFBNzA5NTdBMDY4QTI3MjIzQkMxMjBCMEM5MDMwNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Ez7gbu4p41/B3hGprJa3OPT0
YLydS5JfjDXeHepHbTttwNQSPPpbOZEDR+cR0p8cwPR1ZGkag/zL4s05TlzDxaML
c94+TRh2hDJc3/odPQGeERhwYstinllU7MsVoBlnQ5bNFLveiTSnce0Zz74/8CGq
mqi/0XX1bYWeCNYTB4eSB5WjA3L+qkvDWXEAvQi9k2rN6OGxnfZw63u+kM3UCd1d
C2Cc+65pRsmdxKr8pMT16B3CkQv0aFNHnLWljruq2KzZgD4zGxwzhh9oovIi6j9V
CV98a8F3RBeda3kNFLWOo9Y2V5vQsHKAVRuPHQctmv5fg5tzFadYSEo8LA5fAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUz5vhOOqnCVegaKJyI7wSCwyQMEEwHwYDVR0j
BBgwFoAUtxJGUdGdEyVD6ZG3p03UpoB2igkwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9uMTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNN
LzEvQjcxMjQ2NTFEMTlEMTMyNTQzRTk5MUI3QTc0REQ0QTY4MDc2OEEwOS5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9CNzEyNDY1MUQxOUQxMzI1NDNF
OTkxQjdBNzRERDRBNjgwNzY4QTA5LmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9u
MTZ5MUxVTFlrS3lYem1ObVlnUXNDZTlzdjl2d2k0M1BRTHpyUXBLalNNLzEvMzQz
NTJlMzEzNzMxMmUzMjMxMzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2Mzgz
NzMzMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAEtq9gwDQYJKoZIhvcNAQELBQADggEBAAGvW592OkPd
iKhvcNM6/wFh1HaXmtFUqQfPn1X4Ck6oyaMbFdaYjd7czQvGCRpImcls4EQleYf+
5BpqDFTHOmRkeD4vuaMc0UPDB9pADmEUIvGmwN0+5rLeRTXhW4XgzdVIrDJM6mCq
1jInndivhYdN7zmOkIXg5ee2hCeVRMv6T3K5BbUOb7NPtV1plr12ZKN6gHXD8HJ7
hmuLLd/ezirOaqVtv4/t4IBvVneQFJznJbxEUgWI8qbZZ0FcP6is7hNzQcuZX07b
ibc4Qbk3dyWdY99SdzCrW2OLt+LoBw0vCxQX7KsyXrYPfqBeO+qGUtss1As80bDf
GqRZF49/DfQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:17:37 2025 by rpki-client