Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32322d3232203d3e20323638343437.roa
File: 34352e3136312e34382e302f32322d3232203d3e20323638343437.roa (raw, json)
Hash identifier: eJdW+SquBMHxKjxunUGYFXhNtIt44CqyufBec6HKwjA=
Subject key identifier: 3E:51:DD:31:2A:8B:B2:B1:E1:2D:F8:5C:14:0A:6B:11:B8:8D:6D:FE
Certificate issuer: /CN=94D61A37D7CAE2092F2562DEAAD1859AF3611C9D
Certificate serial: 76DC131FF13FE7F244DC30A7ED912BB6E20E2FF1
Authority key identifier: 94:D6:1A:37:D7:CA:E2:09:2F:25:62:DE:AA:D1:85:9A:F3:61:1C:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32322d3232203d3e20323638343437.roa
Signing time: Wed 26 Mar 2025 17:03:17 +0000
ROA not before: Wed 26 Mar 2025 16:58:17 +0000
ROA not after: Wed 25 Mar 2026 17:03:17 +0000
asID: 268447
IP address blocks: 45.161.48.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:dc:13:1f:f1:3f:e7:f2:44:dc:30:a7:ed:91:2b:b6:e2:0e:2f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94D61A37D7CAE2092F2562DEAAD1859AF3611C9D
Validity
Not Before: Mar 26 16:58:17 2025 GMT
Not After : Mar 25 17:03:17 2026 GMT
Subject: CN=3E51DD312A8BB2B1E12DF85C140A6B11B88D6DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:ac:71:77:57:19:93:f6:85:8c:5e:95:9e:
03:3b:03:22:bb:12:48:fc:2e:e5:49:43:96:d2:e8:
e2:f1:a2:e1:ba:3e:90:68:54:db:c6:07:ee:8e:53:
b9:e0:46:28:ec:8f:d7:f7:24:59:22:2f:6d:0c:a6:
7d:e5:fb:f0:c5:0f:bc:0b:90:92:60:2b:7c:90:ca:
94:a1:22:06:74:68:e4:37:65:ec:15:60:b5:56:59:
e6:33:fb:85:ee:9a:b2:18:8e:c9:ca:96:12:b8:1f:
e3:5e:70:d2:e2:0f:10:7c:10:e2:3a:bf:f6:2f:aa:
0d:4a:9d:fb:9b:1d:5e:4a:04:6f:ec:be:24:28:66:
c8:60:cc:2c:3a:a3:d6:17:9e:8d:0c:59:15:e6:4e:
40:6b:8c:d1:d3:c4:bf:23:21:80:cd:5a:eb:3b:91:
89:4d:8f:08:51:9b:40:89:f8:aa:29:eb:b9:cd:bf:
4a:62:e8:e2:e7:f9:8f:ae:be:7a:b9:65:ae:6b:31:
c9:e3:85:88:a7:34:01:25:e8:15:d7:ca:c5:9c:f4:
7b:f7:48:e3:3c:dc:12:51:a8:b8:01:7e:ae:32:ca:
b4:24:53:d7:7a:41:6f:2d:d9:0e:e9:9f:32:75:2c:
78:31:75:bd:0e:29:ed:e5:9e:0c:bb:d2:44:c7:3d:
11:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:51:DD:31:2A:8B:B2:B1:E1:2D:F8:5C:14:0A:6B:11:B8:8D:6D:FE
X509v3 Authority Key Identifier:
keyid:94:D6:1A:37:D7:CA:E2:09:2F:25:62:DE:AA:D1:85:9A:F3:61:1C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32322d3232203d3e20323638343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:e2:9d:01:af:f3:7d:51:ab:aa:9c:a2:f4:15:b8:a9:d8:8e:
a1:53:8d:1c:8b:92:05:6f:ba:90:44:a2:a2:d3:e3:48:50:77:
82:65:db:ad:bd:6c:94:93:a0:1d:5d:9c:97:20:9d:5f:e1:87:
4b:ac:b1:f9:7b:06:e1:68:e3:8a:ae:62:d7:8a:e1:cc:3f:cd:
14:00:eb:58:01:cf:a2:de:51:f8:62:83:02:62:b6:84:df:b2:
1a:d3:9d:63:27:e1:6e:45:3f:a2:70:a4:5b:ca:95:91:7b:5e:
c1:1d:99:0e:99:1b:8b:54:3e:12:a0:72:76:dd:c6:6f:0d:0d:
c5:7e:d2:24:c6:32:12:1d:af:32:d6:c0:58:76:92:0a:95:d3:
ff:f7:51:e0:e5:2c:73:6d:d7:65:07:43:83:14:b8:8d:19:d6:
91:e6:21:4b:b6:4d:18:5f:81:65:61:28:01:5b:2a:36:7d:cb:
1e:82:b7:d6:b1:bd:c6:5a:30:f7:8f:46:d7:35:21:a4:ca:a1:
7b:e8:c9:ba:55:da:f2:81:03:63:a1:9b:54:fd:a3:25:88:8a:
6f:e4:de:8d:fe:51:e1:74:0b:2a:e1:68:5b:4b:d0:c7:49:4b:
0a:2e:6c:bf:c8:20:6a:47:27:70:52:1a:81:e5:25:85:ac:67:
f5:5a:d7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:41:13 2025 by rpki-client