Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33322e302f32332d3233203d3e20323638383337.roa
File: 34352e3137342e33322e302f32332d3233203d3e20323638383337.roa (raw, json)
Hash identifier: gwt780zm09KVXHRRvOLmyWKKRtbPrUOY1Rc1Oq1CFRw=
Subject key identifier: 15:6C:37:23:7D:06:E0:3E:B8:69:2E:39:10:76:A9:72:8C:3C:7E:51
Certificate issuer: /CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Certificate serial: 4A842A0FF410CDBDC0C73332DFDA2B2502A03B40
Authority key identifier: D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33322e302f32332d3233203d3e20323638383337.roa
Signing time: Thu 03 Apr 2025 12:39:17 +0000
ROA not before: Thu 03 Apr 2025 12:34:17 +0000
ROA not after: Thu 02 Apr 2026 12:39:17 +0000
asID: 268837
IP address blocks: 45.174.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:84:2a:0f:f4:10:cd:bd:c0:c7:33:32:df:da:2b:25:02:a0:3b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Validity
Not Before: Apr 3 12:34:17 2025 GMT
Not After : Apr 2 12:39:17 2026 GMT
Subject: CN=156C37237D06E03EB8692E391076A9728C3C7E51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:26:e8:8a:ac:68:e9:8b:eb:16:f6:d3:d4:0c:
8c:7f:56:09:11:eb:ff:2c:3a:db:74:45:43:e7:e4:
4e:30:ec:3d:2b:2c:e3:06:5c:59:a4:56:9d:d3:df:
b4:f5:84:50:a2:b3:e3:3e:31:99:86:1f:2b:1d:b5:
bd:d9:10:37:d1:e4:30:82:99:27:3a:46:a0:8a:53:
9e:2d:9c:d8:e6:03:7e:28:58:e2:ac:ec:2d:2f:a4:
73:d0:6e:f6:eb:c0:66:65:56:e5:d1:8d:6d:8f:b2:
3b:89:ed:d9:fd:27:19:4d:11:a4:22:cb:c9:ff:e1:
68:b9:bd:0f:8b:35:56:ac:db:60:87:7e:5e:45:0b:
5a:75:eb:7e:6c:5c:36:15:7e:1d:ad:db:3f:43:f3:
29:ba:ed:5a:dd:ef:cf:95:fd:94:33:cd:21:b3:8a:
79:1d:e2:dc:77:88:a3:86:60:26:91:8e:e2:36:6a:
d1:ca:57:b5:b5:cb:15:db:6c:c5:24:a6:7e:4f:76:
81:e8:24:e5:14:99:c6:7d:c8:59:6e:79:3e:5f:80:
57:e3:a5:c4:a2:74:77:78:02:78:ff:23:3b:3c:b6:
a6:9a:7f:ae:c4:94:2c:b3:05:e1:63:36:e7:8f:f2:
d4:f7:d0:8c:d1:97:17:99:cc:57:9d:d6:bb:99:ce:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:6C:37:23:7D:06:E0:3E:B8:69:2E:39:10:76:A9:72:8C:3C:7E:51
X509v3 Authority Key Identifier:
keyid:D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/D42A166806CE2D015B2B090F188263BB4BB4BC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33322e302f32332d3233203d3e20323638383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.32.0/23
Signature Algorithm: sha256WithRSAEncryption
90:1b:e0:88:4e:8b:df:c5:ef:5f:2c:90:d5:52:a9:07:83:26:
df:ae:f6:58:28:ce:91:9e:f4:c9:ad:e2:8b:4f:ee:56:d8:8c:
3b:4c:d3:12:62:62:3c:45:a9:1f:46:8a:ab:e6:7f:55:36:4a:
4a:89:dd:cc:08:2d:c9:bd:14:2f:76:4f:a6:7e:96:c6:1e:9c:
d4:7d:3c:e2:ef:2b:92:44:83:fe:21:cc:36:ea:55:5f:d8:e8:
11:ff:96:75:4a:79:69:b2:fc:8b:de:47:57:6b:49:8b:17:a1:
d5:96:78:71:3a:e1:b6:34:85:91:b0:04:db:77:90:66:2f:ac:
7d:dc:3f:e1:15:1c:a9:6f:47:14:7b:d5:a4:ba:f0:45:25:1e:
80:80:ce:b7:ef:64:4e:f3:e1:ad:1b:62:e2:4a:88:2c:ac:cb:
b7:fe:29:f6:50:22:af:a2:44:1e:d5:a9:27:0d:af:60:19:41:
77:b6:1d:d9:90:cf:50:bf:88:9c:43:c0:1c:53:27:9e:95:6d:
2b:3d:56:73:e4:0e:65:52:c5:df:bf:83:bc:4b:a5:dc:d4:1e:
cd:40:da:d8:34:5a:f5:3d:10:c3:74:41:4f:67:83:c6:0c:5b:
45:2a:99:b7:90:92:70:fd:86:52:99:7b:67:e7:90:eb:02:d8:
70:04:0a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:30:38 2025 by rpki-client