Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
File: 3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa (raw, json)
Hash identifier: Sf78mjIIFNHEX+KrjMMiN8rVlDC9zv9Le/KET2sIJfM=
Subject key identifier: 4E:A1:E4:69:02:1D:CE:6E:2C:A5:D0:65:CE:FE:D7:FB:13:9B:6A:D2
Certificate issuer: /CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Certificate serial: 431C7C34884AB9E9ED2A349F3E65CDD514937B13
Authority key identifier: 35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
Signing time: Thu 06 Mar 2025 02:06:27 +0000
ROA not before: Thu 06 Mar 2025 02:01:27 +0000
ROA not after: Thu 05 Mar 2026 02:06:27 +0000
asID: 52545
IP address blocks: 168.121.168.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1c:7c:34:88:4a:b9:e9:ed:2a:34:9f:3e:65:cd:d5:14:93:7b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3525DEC2C298F98A0A0CC888E805E01C39FD63D7
Validity
Not Before: Mar 6 02:01:27 2025 GMT
Not After : Mar 5 02:06:27 2026 GMT
Subject: CN=4EA1E469021DCE6E2CA5D065CEFED7FB139B6AD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:5c:4f:00:7f:4c:03:77:ce:a6:e4:39:21:
2d:37:e6:67:65:ed:b2:ee:37:d0:73:80:9f:6f:f1:
5a:91:94:dd:e1:1a:2c:32:66:6e:e2:78:8c:9e:43:
81:37:83:e6:2d:39:ce:a9:a6:15:ef:73:de:72:70:
45:8e:42:e8:1d:88:2e:72:58:aa:14:0b:62:1e:c9:
89:0b:c3:bd:04:da:cd:ba:c2:ef:0c:a6:0e:9c:61:
b8:3d:da:d9:ba:82:37:92:cb:8a:e9:b5:90:aa:bf:
ff:b3:2d:9a:76:03:92:e1:b8:2f:78:d7:6f:a3:e0:
2f:4f:0a:34:3c:03:43:3e:4c:c1:e3:c7:71:5d:4f:
04:28:0e:fd:5d:83:3b:f0:7c:76:f5:11:49:14:87:
d8:55:c7:9c:ed:ce:dc:b8:aa:b7:b4:a6:c4:f4:e3:
8e:15:ab:09:bc:97:ee:54:55:fa:fa:43:49:d6:fe:
4a:35:0a:df:8e:19:57:9d:59:1d:9a:b4:2b:a5:78:
2a:b1:ae:99:78:52:8c:26:1f:49:3d:ad:54:68:67:
9a:16:ab:7e:9f:55:45:37:d7:da:0a:c8:0a:7a:4e:
f5:bf:ce:f5:c5:84:08:91:19:da:02:23:ba:84:e8:
2f:e4:1c:d8:78:e0:14:8e:2d:42:85:31:54:79:28:
27:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A1:E4:69:02:1D:CE:6E:2C:A5:D0:65:CE:FE:D7:FB:13:9B:6A:D2
X509v3 Authority Key Identifier:
keyid:35:25:DE:C2:C2:98:F9:8A:0A:0C:C8:88:E8:05:E0:1C:39:FD:63:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3525DEC2C298F98A0A0CC888E805E01C39FD63D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GALQ2GjDQSsYQm7CSXtHewQHfQF8QqtBHvs4MgHm1qxx/3/3136382e3132312e3136382e302f32322d3234203d3e203532353435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:c8:65:5c:e4:b3:79:46:bd:c5:e2:f8:8c:ca:f6:33:c5:eb:
01:21:cb:90:82:b2:5d:e5:2e:07:ae:4e:ff:65:e9:9e:36:6b:
f7:74:63:b1:83:44:58:5e:fc:a0:ef:b0:6e:94:1e:18:a7:5d:
10:23:45:3b:ee:4d:47:51:74:3a:8e:77:13:0c:5e:b5:ec:75:
ea:b6:95:9f:6d:bd:67:d7:68:f6:33:4f:7e:c1:5e:d3:ec:7a:
4b:fd:fe:ca:4d:7d:73:d8:1f:59:c6:e4:e8:c8:bd:7e:dc:b5:
47:0b:5a:19:0b:31:fc:46:06:17:eb:85:a8:8f:0a:72:9f:6d:
17:ec:76:bd:ea:87:f9:6e:98:f1:b3:98:80:4d:6d:0c:39:11:
62:7b:25:dd:b2:6b:00:9f:e4:46:c2:78:65:ae:16:c2:38:58:
a5:aa:2a:3b:9c:2d:20:8e:af:8e:71:8c:27:da:0c:4c:4b:6d:
d2:fe:af:94:b8:b5:18:ec:3c:f6:db:b1:51:52:d2:ca:7e:a4:
21:e3:8a:65:34:0d:50:5e:18:46:0d:86:8d:c2:39:aa:cc:76:
44:ec:6d:a8:a1:ab:30:b5:47:96:3b:c4:cf:e8:40:57:43:e9:
f3:4a:0d:9f:31:70:f9:98:da:cf:0e:5b:41:57:1b:b8:b5:de:
64:d2:64:a8
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUQxx8NIhKuentKjSfPmXN1RSTexMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUyNURFQzJDMjk4Rjk4QTBBMENDODg4RTgwNUUwMUMz
OUZENjNENzAeFw0yNTAzMDYwMjAxMjdaFw0yNjAzMDUwMjA2MjdaMDMxMTAvBgNV
BAMTKDRFQTFFNDY5MDIxRENFNkUyQ0E1RDA2NUNFRkVEN0ZCMTM5QjZBRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4nVxPAH9MA3fOpuQ5IS035mdl
7bLuN9BzgJ9v8VqRlN3hGiwyZm7ieIyeQ4E3g+YtOc6pphXvc95ycEWOQugdiC5y
WKoUC2IeyYkLw70E2s26wu8Mpg6cYbg92tm6gjeSy4rptZCqv/+zLZp2A5LhuC94
12+j4C9PCjQ8A0M+TMHjx3FdTwQoDv1dgzvwfHb1EUkUh9hVx5ztzty4qre0psT0
444Vqwm8l+5UVfr6Q0nW/ko1Ct+OGVedWR2atCuleCqxrpl4UowmH0k9rVRoZ5oW
q36fVUU319oKyAp6TvW/zvXFhAiRGdoCI7qE6C/kHNh44BSOLUKFMVR5KCcFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTqHkaQIdzm4spdBlzv7X+xObatIwHwYDVR0j
BBgwFoAUNSXewsKY+YoKDMiI6AXgHDn9Y9cwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0FMUTJHakRRU3NZUW03Q1NYdEhld1FIZlFGOFFxdEJIdnM0TWdIbTFx
eHgvMy8zNTI1REVDMkMyOThGOThBMEEwQ0M4ODhFODA1RTAxQzM5RkQ2M0Q3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzM1MjVERUMyQzI5OEY5OEEw
QTBDQzg4OEU4MDVFMDFDMzlGRDYzRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dBTFEyR2pEUVNzWVFtN0NTWHRIZXdRSGZRRjhRcXRCSHZzNE1nSG0xcXh4LzMv
MzEzNjM4MmUzMTMyMzEyZTMxMzYzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDM1
MzIzNTM0MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKoeagwDQYJKoZIhvcNAQELBQADggEBAF3IZVzk
s3lGvcXi+IzK9jPF6wEhy5CCsl3lLgeuTv9l6Z42a/d0Y7GDRFhe/KDvsG6UHhin
XRAjRTvuTUdRdDqOdxMMXrXsdeq2lZ9tvWfXaPYzT37BXtPsekv9/spNfXPYH1nG
5OjIvX7ctUcLWhkLMfxGBhfrhaiPCnKfbRfsdr3qh/lumPGzmIBNbQw5EWJ7Jd2y
awCf5EbCeGWuFsI4WKWqKjucLSCOr45xjCfaDExLbdL+r5S4tRjsPPbbsVFS0sp+
pCHjimU0DVBeGEYNho3COarMdkTsbaihqzC1R5Y7xM/oQFdD6fNKDZ8xcPmY2s8O
W0FXG7i13mTSZKg=
-----END CERTIFICATE-----
Generated at Wed May 14 23:39:34 2025 by rpki-client