Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33332e302f32342d3234203d3e20323638383337.roa
File: 34352e3137342e33332e302f32342d3234203d3e20323638383337.roa (raw, json)
Hash identifier: zG4pfdMRL9Yt89Mcll6UVUUJvBszt3jNwERE3GHYl/o=
Subject key identifier: D9:6F:83:CA:CC:48:7C:11:96:36:E0:64:F2:B1:10:EF:CD:C4:D3:D3
Certificate issuer: /CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Certificate serial: 42BF5BC4D15040FB05E011088CD2CFE98C807E0F
Authority key identifier: D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33332e302f32342d3234203d3e20323638383337.roa
Signing time: Thu 03 Apr 2025 12:39:17 +0000
ROA not before: Thu 03 Apr 2025 12:34:17 +0000
ROA not after: Thu 02 Apr 2026 12:39:17 +0000
asID: 268837
IP address blocks: 45.174.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:bf:5b:c4:d1:50:40:fb:05:e0:11:08:8c:d2:cf:e9:8c:80:7e:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Validity
Not Before: Apr 3 12:34:17 2025 GMT
Not After : Apr 2 12:39:17 2026 GMT
Subject: CN=D96F83CACC487C119636E064F2B110EFCDC4D3D3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e8:cd:d2:77:a5:81:59:d8:d0:63:32:0e:c3:
b0:a4:da:74:fc:62:ff:cc:99:b1:1d:aa:24:01:7b:
80:f0:c2:2e:6f:a2:2c:35:52:26:f4:31:4e:3b:45:
67:8e:0a:44:02:3f:84:98:b9:57:89:49:d3:d9:61:
38:7c:92:1f:ef:d8:4f:38:ee:30:d4:b2:9d:2e:7b:
c1:5b:e1:ae:5b:35:e7:03:fe:71:c8:44:0f:97:40:
e9:e4:5c:6c:e5:9c:1b:48:3e:8c:a5:ed:c5:9b:94:
cc:92:df:3d:4e:4b:8d:32:38:66:76:32:b2:50:be:
15:52:8b:24:94:7b:96:02:0e:ce:9e:2b:4f:e5:da:
61:f6:50:a8:ea:99:58:51:19:74:03:0d:e2:61:13:
2a:ae:d3:8e:f0:d7:93:89:0b:e1:03:da:74:29:f5:
b7:7d:fc:a4:06:6b:4d:00:84:5a:a1:a4:04:c8:5b:
1d:94:cd:5d:f7:7b:3d:11:78:6d:1a:1b:06:40:21:
a2:0c:c7:42:04:0a:8e:ed:82:17:4f:05:18:23:10:
18:d6:8b:7e:93:e2:46:1b:2d:27:57:96:62:7b:fb:
98:fb:7d:9f:91:8e:4a:fe:29:e3:a2:d2:1e:26:f3:
6b:44:b9:86:de:4a:f1:fb:23:c1:37:32:e9:94:79:
c9:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:6F:83:CA:CC:48:7C:11:96:36:E0:64:F2:B1:10:EF:CD:C4:D3:D3
X509v3 Authority Key Identifier:
keyid:D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/D42A166806CE2D015B2B090F188263BB4BB4BC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33332e302f32342d3234203d3e20323638383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.33.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:69:e8:80:ae:2a:60:01:ae:45:62:b4:f9:0c:72:b5:a8:24:
66:0d:d1:a1:d3:f7:6a:4a:fc:3b:f8:ef:67:c6:63:a3:4a:48:
07:89:d6:35:17:40:27:fa:58:b6:b7:8b:56:47:9c:40:b4:6e:
66:a4:93:c5:c3:42:ad:ca:79:60:ea:b6:fe:2b:3b:62:b3:dc:
3b:f2:85:54:fb:63:69:23:12:56:93:18:ae:93:4a:c0:d0:72:
dc:62:ad:86:5b:11:aa:16:7e:5c:a7:a2:0b:b5:d8:3a:15:21:
7c:09:d1:2e:62:11:72:88:56:f1:47:c1:e0:1f:8e:a2:2f:65:
bf:95:ea:94:39:c1:2a:c1:c8:e5:66:38:46:97:e5:db:96:d8:
46:5d:aa:37:69:0d:b0:d3:db:82:02:41:80:19:9e:9c:e6:cf:
de:14:21:19:ea:4f:39:74:02:14:24:50:63:33:f0:74:4c:c0:
3f:5f:d7:08:4f:70:57:4c:2f:ed:13:42:f5:6a:35:5f:ac:e0:
93:92:74:fb:5e:ad:63:9d:65:8b:40:0b:12:c0:a4:dc:89:dc:
52:51:88:67:ea:f5:e3:84:14:72:3a:5e:67:7b:2b:9b:38:ce:
18:c9:d3:b6:7e:37:0e:55:8f:bb:2f:36:03:b7:19:48:cd:12:
fc:7e:2f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:30:20 2025 by rpki-client