Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
File: 34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa (raw, json)
Hash identifier: WqWvvXxEMcH7dvYEg93PUod8ZwoKJ9VzHY5o8JA76kU=
Subject key identifier: 45:EE:C4:0F:62:9F:31:60:7A:F4:6D:97:5D:D0:F5:90:3A:DC:69:41
Certificate issuer: /CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Certificate serial: 4E4BBE7A9BBE1A4CDC16D0E99C71A2C1B812E6E7
Authority key identifier: D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
Signing time: Tue 29 Apr 2025 17:45:27 +0000
ROA not before: Tue 29 Apr 2025 17:40:27 +0000
ROA not after: Tue 28 Apr 2026 17:45:27 +0000
asID: 267027
IP address blocks: 45.227.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:4b:be:7a:9b:be:1a:4c:dc:16:d0:e9:9c:71:a2:c1:b8:12:e6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB
Validity
Not Before: Apr 29 17:40:27 2025 GMT
Not After : Apr 28 17:45:27 2026 GMT
Subject: CN=45EEC40F629F31607AF46D975DD0F5903ADC6941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:d3:8d:b3:49:db:3d:51:70:49:70:36:1a:
f6:89:72:1d:f2:f0:15:4d:3c:53:b7:b2:2e:04:91:
af:2d:f7:da:c4:98:c9:e4:0a:65:e9:85:63:ee:64:
b5:a8:c3:33:1e:bb:50:dc:83:1c:21:ce:f1:92:31:
da:79:75:03:01:ad:cc:6d:78:9d:fc:d3:21:c8:43:
2e:8f:16:91:7a:76:11:f0:72:b8:be:ac:a5:29:7f:
3e:d0:ce:e3:de:e0:d6:f1:88:42:98:27:58:61:19:
09:42:7b:29:5c:8b:51:cc:a4:0a:7f:e6:e8:10:68:
9c:b2:44:bd:5f:55:76:5a:93:db:47:f7:04:29:84:
6f:73:0c:0b:81:51:be:7b:bb:6f:bc:0c:89:52:8e:
ba:c9:cf:df:eb:9e:41:ae:fc:ba:d3:57:09:27:7c:
2e:bd:e0:ea:f6:d2:7f:02:8f:c8:c6:08:8b:ac:3d:
1c:d4:07:a6:58:c8:11:6a:85:37:e0:5f:e0:4d:4b:
2a:72:8d:5d:96:2e:42:29:f0:12:36:23:14:fa:1a:
f4:38:db:02:30:de:e1:f3:f5:93:f2:9d:23:0e:a5:
e4:6f:e3:22:3f:84:23:f3:26:4d:45:03:10:4e:0a:
ee:d4:f6:c1:92:52:65:c3:68:ed:18:5c:c4:5d:d8:
77:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:EE:C4:0F:62:9F:31:60:7A:F4:6D:97:5D:D0:F5:90:3A:DC:69:41
X509v3 Authority Key Identifier:
keyid:D5:A9:D3:63:5F:3D:EC:D3:DB:27:7A:C6:7D:C6:A6:AB:D2:E8:3D:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5A9D3635F3DECD3DB277AC67DC6A6ABD2E83DEB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.168.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:d8:89:09:ad:73:87:e6:d1:b1:e0:69:0c:54:a4:a3:ef:b8:
9c:cd:72:5e:55:4b:e1:cd:46:f1:8c:58:7f:55:f7:51:ec:58:
22:d3:63:e0:a8:33:cb:4b:39:ee:7b:54:b4:5e:e7:b7:69:75:
f5:ce:2b:8d:c7:ee:a9:fd:26:25:bb:67:de:1c:5d:1f:f2:93:
23:e4:6e:c9:af:3e:34:7c:71:79:4d:7c:e1:a3:3c:0c:bd:e0:
80:a2:4b:74:72:8f:b1:c9:d8:12:3b:a3:58:27:82:d7:3c:f1:
2d:ce:e8:12:30:73:c5:90:89:37:89:cb:2f:9d:91:91:d9:b8:
ae:d8:17:8d:88:7a:0a:3a:25:ca:92:22:7a:0f:06:63:cc:55:
b8:bb:b2:22:d6:8d:a3:bb:3e:e7:03:1d:fd:2a:bf:3a:33:d1:
61:b7:93:1d:ea:c5:fd:b0:c5:a7:8c:dc:20:08:d3:95:13:b2:
27:31:05:a9:1f:21:32:17:7d:76:ae:6a:e5:68:bb:a6:08:63:
a7:11:a7:7a:18:46:f1:8f:71:59:85:15:7e:3d:fb:44:ef:32:
43:0c:7e:3b:d9:ad:71:46:35:0e:2d:e4:19:3c:f1:74:7b:3a:
01:fa:58:6b:63:91:b2:fe:dd:fb:63:9e:53:9e:2d:b0:36:e0:
05:65:33:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 13:11:10 2025 by rpki-client