Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3234203d3e20323637333531.roa
File: 34352e3233342e342e302f32322d3234203d3e20323637333531.roa (raw, json)
Hash identifier: Y4fIAChph8do66wHZxxPySGZdvZMK2O62YphFdYdDog=
Subject key identifier: 65:74:FC:8B:FB:C3:62:F4:8A:F8:AA:14:B8:74:AF:5B:2D:29:82:A9
Certificate issuer: /CN=5092FA94D2896359852FB3091B53D54770445896
Certificate serial: 30B7648056A021E5B176AE967FCD782620A4FF2D
Authority key identifier: 50:92:FA:94:D2:89:63:59:85:2F:B3:09:1B:53:D5:47:70:44:58:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5092FA94D2896359852FB3091B53D54770445896.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3234203d3e20323637333531.roa
Signing time: Thu 30 Jan 2025 22:32:41 +0000
ROA not before: Thu 30 Jan 2025 22:27:41 +0000
ROA not after: Thu 29 Jan 2026 22:32:41 +0000
asID: 267351
IP address blocks: 45.234.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b7:64:80:56:a0:21:e5:b1:76:ae:96:7f:cd:78:26:20:a4:ff:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5092FA94D2896359852FB3091B53D54770445896
Validity
Not Before: Jan 30 22:27:41 2025 GMT
Not After : Jan 29 22:32:41 2026 GMT
Subject: CN=6574FC8BFBC362F48AF8AA14B874AF5B2D2982A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:f3:c3:6b:11:e1:ed:98:a7:9d:25:2d:72:
23:0e:1c:18:11:43:07:c2:9d:cd:d2:83:78:f4:ec:
b2:3c:d6:f5:69:89:60:3e:7f:3b:84:46:79:30:e3:
28:79:34:c8:17:06:d6:e3:d8:83:2b:fd:e9:4d:c0:
ea:06:66:f9:1b:b2:40:58:62:56:ef:95:0b:87:fd:
06:71:f5:02:9f:1d:02:f2:d0:76:77:17:f4:24:23:
25:bb:9e:99:11:e8:9a:7e:60:6c:e3:12:43:0c:f7:
21:02:f9:c8:1d:b3:eb:13:13:ef:4f:fd:74:a1:4d:
4b:93:aa:42:93:d2:90:2f:18:91:fd:c2:74:9c:6c:
4b:06:1d:7f:0c:1d:83:2c:9b:f7:d2:07:eb:37:99:
39:16:1b:55:89:dc:bf:7b:cd:df:2b:b5:9d:21:1a:
db:b6:3e:19:db:5d:b2:b0:15:67:24:d1:f5:81:f4:
d0:89:c5:ae:82:b4:cf:fd:2f:2d:1d:1b:16:99:1d:
8f:05:2a:2c:80:f3:2d:ec:05:51:7b:76:e6:22:8d:
54:18:5c:f4:e0:a9:a4:bf:d9:18:fa:37:55:a2:94:
5c:1e:05:81:89:a7:b7:50:25:37:20:83:6a:52:a5:
e3:e1:e3:08:b9:4c:28:70:c3:9a:c7:9d:c3:75:e1:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:74:FC:8B:FB:C3:62:F4:8A:F8:AA:14:B8:74:AF:5B:2D:29:82:A9
X509v3 Authority Key Identifier:
keyid:50:92:FA:94:D2:89:63:59:85:2F:B3:09:1B:53:D5:47:70:44:58:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/5092FA94D2896359852FB3091B53D54770445896.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5092FA94D2896359852FB3091B53D54770445896.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G5NiftsUbup1uTY8jjksAQgUrPz11cnhS3E875cUhEuD/0/34352e3233342e342e302f32322d3234203d3e20323637333531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:ab:81:11:04:39:05:d2:f2:e4:ec:8d:7f:bf:cb:a5:3e:b7:
26:5d:be:fa:94:89:e9:64:d7:a3:5a:75:32:e8:0d:59:56:8e:
ed:ba:7c:d1:06:ad:9f:94:cd:97:4e:58:51:06:db:57:86:09:
2d:cb:2a:4a:b6:60:e5:e4:c2:ba:ca:53:93:18:2e:43:c7:f8:
05:22:f6:54:be:a1:b0:be:85:cc:f2:b1:a1:34:a7:b9:11:ef:
7d:11:c9:24:d4:eb:9d:0d:70:fb:a4:4a:a4:54:fe:42:31:70:
67:65:2f:09:57:ee:96:5f:98:ff:2e:54:62:32:fd:18:5c:3f:
93:1d:74:9f:b3:f4:8a:76:90:4a:7e:9b:58:60:c8:73:2a:48:
d2:c6:e6:b1:d1:7b:a6:08:65:94:a4:53:22:1b:9c:75:bd:ac:
39:e6:52:16:74:b5:83:90:41:54:0e:27:d4:a8:5c:cc:69:b0:
c2:ae:ea:52:1c:a9:22:02:a0:2c:40:d9:fb:58:c2:db:ec:9e:
44:4e:76:e0:17:76:c8:dc:9d:b7:ab:45:e3:38:1a:3b:7f:93:
9a:4e:ce:82:30:de:69:b2:94:2d:86:d0:76:43:43:fe:81:bd:
fc:06:fb:42:74:c5:25:d0:54:df:3b:47:2c:c1:bb:21:7c:36:
84:a8:15:27
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUMLdkgFagIeWxdq6Wf814JiCk/y0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA5MkZBOTREMjg5NjM1OTg1MkZCMzA5MUI1M0Q1NDc3
MDQ0NTg5NjAeFw0yNTAxMzAyMjI3NDFaFw0yNjAxMjkyMjMyNDFaMDMxMTAvBgNV
BAMTKDY1NzRGQzhCRkJDMzYyRjQ4QUY4QUExNEI4NzRBRjVCMkQyOTgyQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKhvPDaxHh7ZinnSUtciMOHBgR
QwfCnc3Sg3j07LI81vVpiWA+fzuERnkw4yh5NMgXBtbj2IMr/elNwOoGZvkbskBY
YlbvlQuH/QZx9QKfHQLy0HZ3F/QkIyW7npkR6Jp+YGzjEkMM9yEC+cgds+sTE+9P
/XShTUuTqkKT0pAvGJH9wnScbEsGHX8MHYMsm/fSB+s3mTkWG1WJ3L97zd8rtZ0h
Gtu2PhnbXbKwFWck0fWB9NCJxa6CtM/9Ly0dGxaZHY8FKiyA8y3sBVF7duYijVQY
XPTgqaS/2Rj6N1WilFweBYGJp7dQJTcgg2pSpePh4wi5TChww5rHncN14T0hAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZXT8i/vDYvSK+KoUuHSvWy0pgqkwHwYDVR0j
BBgwFoAUUJL6lNKJY1mFL7MJG1PVR3BEWJYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRzVOaWZ0c1VidXAxdVRZOGpqa3NBUWdVclB6MTFjbmhTM0U4NzVjVWhF
dUQvMC81MDkyRkE5NEQyODk2MzU5ODUyRkIzMDkxQjUzRDU0NzcwNDQ1ODk2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwOTJGQTk0RDI4OTYzNTk4
NTJGQjMwOTFCNTNENTQ3NzA0NDU4OTYuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0c1TmlmdHNVYnVwMXVUWThqamtzQVFnVXJQejExY25oUzNFODc1Y1VoRXVELzAv
MzQzNTJlMzIzMzM0MmUzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzNzMz
MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi3qBDANBgkqhkiG9w0BAQsFAAOCAQEAjauBEQQ5BdLy
5OyNf7/LpT63Jl2++pSJ6WTXo1p1MugNWVaO7bp80Qatn5TNl05YUQbbV4YJLcsq
SrZg5eTCuspTkxguQ8f4BSL2VL6hsL6FzPKxoTSnuRHvfRHJJNTrnQ1w+6RKpFT+
QjFwZ2UvCVfull+Y/y5UYjL9GFw/kx10n7P0inaQSn6bWGDIcypI0sbmsdF7pghl
lKRTIhucdb2sOeZSFnS1g5BBVA4n1KhczGmwwq7qUhypIgKgLEDZ+1jC2+yeRE52
4Bd2yNydt6tF4zgaO3+Tmk7OgjDeabKULYbQdkND/oG9/Ab7QnTFJdBU3ztHLMG7
IXw2hKgVJw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 16:47:46 2025 by rpki-client