Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa
File: 34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa (raw, json)
Hash identifier: 8QKvVA6aLf4KKxbu5W+qK8uzB5+fEEmuM12CHUif00Y=
Subject key identifier: 44:37:88:6E:AE:94:96:D0:46:A0:DA:4A:EB:69:10:4F:B1:7D:4E:34
Certificate issuer: /CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
Certificate serial: 42E2496B5AAE94D2152E803732234BB820928C28
Authority key identifier: 98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa
Signing time: Mon 03 Feb 2025 14:29:46 +0000
ROA not before: Mon 03 Feb 2025 14:24:46 +0000
ROA not after: Mon 02 Feb 2026 14:29:46 +0000
asID: 268390
IP address blocks: 45.239.236.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:e2:49:6b:5a:ae:94:d2:15:2e:80:37:32:23:4b:b8:20:92:8c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C2536481F88290C749C7A40FF5C23C6A4B2B29
Validity
Not Before: Feb 3 14:24:46 2025 GMT
Not After : Feb 2 14:29:46 2026 GMT
Subject: CN=4437886EAE9496D046A0DA4AEB69104FB17D4E34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:0a:16:0c:cd:ea:5c:95:e9:f8:55:f9:cd:
da:90:92:d4:8a:bf:15:b2:47:f5:97:07:ea:0b:16:
8d:90:f3:e8:83:90:15:87:88:70:c8:a3:31:29:ee:
9d:1b:91:b3:64:b4:59:3f:25:a5:ac:78:a8:10:44:
af:e0:22:e4:35:fe:eb:98:3d:8a:b3:bb:c4:ae:bb:
fb:57:8e:aa:cb:81:f0:ce:e3:8e:a3:88:38:e2:14:
40:67:a4:b1:70:c0:aa:58:ae:f9:aa:90:cb:52:e2:
21:a8:37:1c:1d:0b:7b:ca:c2:11:d0:6f:ee:4e:2c:
35:f9:ef:e7:1e:ce:6a:5b:dd:5e:b0:4d:bd:8e:77:
bf:3b:29:7a:92:eb:2c:33:b8:d6:af:3e:66:1f:d6:
05:9c:07:31:33:c0:bc:0f:42:60:7d:b9:0b:7b:ce:
da:d8:ed:d0:5d:c9:24:e8:2f:64:9a:6f:35:42:39:
f2:a8:4f:20:8c:34:25:ca:84:3f:50:38:91:c2:cd:
b9:97:3f:87:75:bd:d6:8c:2c:83:ba:74:8d:89:7c:
3e:1c:86:1c:5a:3e:c1:41:02:32:78:93:31:ea:c2:
7d:69:80:6d:e7:12:59:c9:f3:65:77:6c:dd:28:5a:
95:24:20:e3:f0:e4:9a:38:2d:d4:e8:ab:54:a5:db:
a8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:37:88:6E:AE:94:96:D0:46:A0:DA:4A:EB:69:10:4F:B1:7D:4E:34
X509v3 Authority Key Identifier:
keyid:98:C2:53:64:81:F8:82:90:C7:49:C7:A4:0F:F5:C2:3C:6A:4B:2B:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/98C2536481F88290C749C7A40FF5C23C6A4B2B29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98C2536481F88290C749C7A40FF5C23C6A4B2B29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fqq3ejmpdjV8Vs4zjGBZHEgqVGijvyy2kXgHiwXunfWQ/0/34352e3233392e3233362e302f32332d3234203d3e20323638333930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.239.236.0/23
Signature Algorithm: sha256WithRSAEncryption
86:63:71:ef:a0:5b:58:a8:1c:ab:9f:05:7f:c1:d6:e1:ea:69:
1d:bd:86:1a:39:dd:f3:52:a4:d9:d1:5e:51:77:a9:90:f2:93:
10:95:95:c4:d5:cd:04:fb:f5:68:42:f3:41:bd:7f:5c:dd:2c:
6e:dd:c1:95:a6:ab:89:4b:8f:1c:51:08:92:93:c7:83:ef:e5:
98:06:ae:0c:0b:3c:94:94:f8:e3:d4:6b:49:24:86:c9:83:d7:
9d:8d:36:d6:c2:f3:78:28:f8:ff:aa:f4:58:f1:89:17:21:1d:
ef:f0:a2:3d:a1:d3:8f:72:a5:86:b1:a6:f3:79:69:9e:3e:30:
d6:5c:a7:96:50:6e:45:0e:10:72:2f:18:d3:91:00:a0:a1:8e:
c2:c4:eb:d4:60:0f:04:31:21:9e:d8:3d:cd:5a:05:0d:c3:4f:
45:c2:1e:df:dc:bd:2b:43:16:bb:fa:0a:b7:c6:3d:02:f8:32:
23:6c:4e:b1:9d:8e:db:df:9b:ca:46:00:e4:f2:38:02:c1:4a:
5e:7d:d4:ba:09:50:31:c7:65:91:ab:5f:9d:69:4a:90:43:b2:
9b:0c:e6:45:b2:bd:28:87:fc:59:47:ec:fa:0a:fe:5c:ac:26:
ec:e2:60:0b:96:fb:3e:37:7a:a3:1e:fa:5f:fb:20:07:65:76:
51:82:f2:53
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQuJJa1qulNIVLoA3MiNLuCCSjCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOThDMjUzNjQ4MUY4ODI5MEM3NDlDN0E0MEZGNUMyM0M2
QTRCMkIyOTAeFw0yNTAyMDMxNDI0NDZaFw0yNjAyMDIxNDI5NDZaMDMxMTAvBgNV
BAMTKDQ0Mzc4ODZFQUU5NDk2RDA0NkEwREE0QUVCNjkxMDRGQjE3RDRFMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzWwoWDM3qXJXp+FX5zdqQktSK
vxWyR/WXB+oLFo2Q8+iDkBWHiHDIozEp7p0bkbNktFk/JaWseKgQRK/gIuQ1/uuY
PYqzu8Suu/tXjqrLgfDO446jiDjiFEBnpLFwwKpYrvmqkMtS4iGoNxwdC3vKwhHQ
b+5OLDX57+cezmpb3V6wTb2Od787KXqS6ywzuNavPmYf1gWcBzEzwLwPQmB9uQt7
ztrY7dBdySToL2SabzVCOfKoTyCMNCXKhD9QOJHCzbmXP4d1vdaMLIO6dI2JfD4c
hhxaPsFBAjJ4kzHqwn1pgG3nElnJ82V3bN0oWpUkIOPw5Jo4LdToq1Sl26jrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURDeIbq6UltBGoNpK62kQT7F9TjQwHwYDVR0j
BBgwFoAUmMJTZIH4gpDHScekD/XCPGpLKykwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRnFxM2VqbXBkalY4VnM0empHQlpIRWdxVkdpanZ5eTJrWGdIaXdYdW5m
V1EvMC85OEMyNTM2NDgxRjg4MjkwQzc0OUM3QTQwRkY1QzIzQzZBNEIyQjI5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4QzI1MzY0ODFGODgyOTBD
NzQ5QzdBNDBGRjVDMjNDNkE0QjJCMjkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0ZxcTNlam1wZGpWOFZzNHpqR0JaSEVncVZHaWp2eXkya1hnSGl3WHVuZldRLzAv
MzQzNTJlMzIzMzM5MmUzMjMzMzYyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMzM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEt7+wwDQYJKoZIhvcNAQELBQADggEBAIZjce+g
W1ioHKufBX/B1uHqaR29hho53fNSpNnRXlF3qZDykxCVlcTVzQT79WhC80G9f1zd
LG7dwZWmq4lLjxxRCJKTx4Pv5ZgGrgwLPJSU+OPUa0kkhsmD152NNtbC83go+P+q
9FjxiRchHe/woj2h049ypYaxpvN5aZ4+MNZcp5ZQbkUOEHIvGNORAKChjsLE69Rg
DwQxIZ7YPc1aBQ3DT0XCHt/cvStDFrv6CrfGPQL4MiNsTrGdjtvfm8pGAOTyOALB
Sl591LoJUDHHZZGrX51pSpBDspsM5kWyvSiH/FlH7PoK/lysJuziYAuW+z43eqMe
+l/7IAdldlGC8lM=
-----END CERTIFICATE-----
Generated at Wed May 14 10:27:22 2025 by rpki-client