Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
File: 34352e3136312e34382e302f32332d3233203d3e20323638343437.roa (raw, json)
Hash identifier: s+RFv+kqDfvXnkiVLXL4eHK5YfMu/BZzoeaxcbVjkxw=
Subject key identifier: FE:A0:F9:4A:49:6C:0B:0B:B6:9A:06:C4:44:6D:8D:60:6D:D7:98:C0
Certificate issuer: /CN=94D61A37D7CAE2092F2562DEAAD1859AF3611C9D
Certificate serial: 0F489EEF30AE77A03E3EBC3234A37CED2F97C6DE
Authority key identifier: 94:D6:1A:37:D7:CA:E2:09:2F:25:62:DE:AA:D1:85:9A:F3:61:1C:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
Signing time: Wed 26 Mar 2025 17:03:29 +0000
ROA not before: Wed 26 Mar 2025 16:58:29 +0000
ROA not after: Wed 25 Mar 2026 17:03:29 +0000
asID: 268447
IP address blocks: 45.161.48.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:48:9e:ef:30:ae:77:a0:3e:3e:bc:32:34:a3:7c:ed:2f:97:c6:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94D61A37D7CAE2092F2562DEAAD1859AF3611C9D
Validity
Not Before: Mar 26 16:58:29 2025 GMT
Not After : Mar 25 17:03:29 2026 GMT
Subject: CN=FEA0F94A496C0B0BB69A06C4446D8D606DD798C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:39:66:2e:57:84:d7:6b:16:6e:49:a4:8b:b0:
03:51:80:d7:23:bf:6c:43:80:23:53:54:db:50:e8:
da:05:ec:72:cc:03:57:0f:26:01:84:a2:c9:4e:55:
55:28:db:b1:60:45:29:a7:2a:46:a6:94:df:cb:70:
02:c8:b1:6e:e1:7e:35:8d:7a:a4:d8:d5:b8:24:27:
47:27:de:99:f1:12:43:71:4b:cb:e5:93:f0:54:32:
c0:99:ed:62:e9:be:72:6d:6d:c1:6b:fc:39:27:e7:
d6:aa:d9:29:14:85:44:63:f4:f0:d9:f5:b9:d5:1f:
6e:76:af:2c:06:2b:20:47:e0:8f:5d:ad:f7:a8:f5:
e5:01:9e:6c:86:6b:d5:13:cf:ac:42:16:05:3f:20:
3e:42:12:5e:59:6b:26:af:23:48:28:ab:d6:74:75:
47:5f:0e:7d:37:d7:00:87:44:82:2b:79:87:53:ef:
91:74:66:cf:c9:61:ba:ce:80:e8:ae:d8:9b:af:d3:
30:85:d3:62:61:9b:ac:f8:3b:6e:91:4e:12:81:32:
fc:0f:b5:7c:d9:69:d6:cf:61:76:3f:06:8b:3e:3e:
d6:80:c0:b1:40:9f:06:61:f8:a0:0f:97:73:73:a6:
c0:a6:37:9d:50:16:d2:68:2a:74:6b:57:3c:93:83:
e0:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A0:F9:4A:49:6C:0B:0B:B6:9A:06:C4:44:6D:8D:60:6D:D7:98:C0
X509v3 Authority Key Identifier:
keyid:94:D6:1A:37:D7:CA:E2:09:2F:25:62:DE:AA:D1:85:9A:F3:61:1C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94D61A37D7CAE2092F2562DEAAD1859AF3611C9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/48k6ifF2kSJfGyjRJW2MPtXUQJYQNeAVTdxK8ELRX4Jk/0/34352e3136312e34382e302f32332d3233203d3e20323638343437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.48.0/23
Signature Algorithm: sha256WithRSAEncryption
54:47:b5:c2:29:34:24:28:41:b3:85:d5:3e:9b:b6:34:7f:9b:
dc:13:d4:61:fe:ac:15:cf:95:e3:c8:98:1e:4f:2d:dc:0b:b0:
d9:0a:2d:f9:7c:ac:ad:8d:29:82:ec:c5:1d:6b:87:4f:84:85:
71:b1:1b:a1:bf:51:ce:e2:7b:67:c5:e3:06:df:61:5f:48:62:
8b:15:73:ef:65:98:7f:4e:8c:e3:83:85:ea:3b:5a:bd:39:64:
ad:71:93:6f:e4:03:69:64:ac:5c:ab:0b:be:d9:6d:a5:8b:c0:
60:43:e4:dd:25:bc:95:9c:b7:d7:51:4e:f3:2a:e3:19:60:13:
05:ba:9f:5e:c5:59:11:0b:b2:53:25:f5:5c:e4:12:82:93:4a:
e4:41:26:76:48:34:2b:f0:00:ab:12:82:f1:56:5d:54:ab:3e:
c5:c0:9f:60:de:53:f7:cb:23:49:03:6f:c5:ad:27:ed:96:3e:
d7:06:88:c8:e3:5a:92:d1:f0:3f:7b:72:1d:91:64:8b:13:df:
98:6d:39:cc:c3:57:3b:78:be:13:ce:c9:9f:b8:d7:c2:df:bb:
49:b4:fd:fa:a4:ff:ab:51:f4:1b:4c:20:45:45:35:ee:86:77:
e6:78:d3:7f:33:38:42:fd:d6:eb:14:25:9a:bc:94:93:f4:a1:
fe:f8:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:39:27 2025 by rpki-client