Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33342e302f32342d3234203d3e20323638383337.roa
File: 34352e3137342e33342e302f32342d3234203d3e20323638383337.roa (raw, json)
Hash identifier: /BgjNRAark+4WZywoHKXUN9TT6jA0qBtyR4/JQg2cLU=
Subject key identifier: 45:68:12:7C:40:F3:60:A2:2F:4C:FD:68:D7:5E:B8:1D:AB:22:10:7F
Certificate issuer: /CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Certificate serial: 506478C1DE1C7C82E0682575B29FB014227BD027
Authority key identifier: D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33342e302f32342d3234203d3e20323638383337.roa
Signing time: Thu 03 Apr 2025 12:39:16 +0000
ROA not before: Thu 03 Apr 2025 12:34:16 +0000
ROA not after: Thu 02 Apr 2026 12:39:16 +0000
asID: 268837
IP address blocks: 45.174.34.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:64:78:c1:de:1c:7c:82:e0:68:25:75:b2:9f:b0:14:22:7b:d0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Validity
Not Before: Apr 3 12:34:16 2025 GMT
Not After : Apr 2 12:39:16 2026 GMT
Subject: CN=4568127C40F360A22F4CFD68D75EB81DAB22107F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:2e:d8:42:00:31:e3:1e:03:52:75:d0:3f:
c6:02:88:42:2b:ed:59:8b:54:2d:4a:91:cc:0d:7d:
11:06:50:c5:d3:4c:69:38:35:3e:67:95:77:6d:b5:
6e:65:fc:18:d5:2d:2c:46:c5:ce:0b:8f:2e:4e:89:
e5:07:64:8a:a5:9f:13:d8:a9:59:11:d1:4e:bb:e5:
ac:00:e5:a3:b9:5f:3a:50:cc:d2:a0:a4:b4:07:f2:
1d:96:dc:c2:80:63:12:23:39:84:9d:25:96:40:1a:
ab:db:1c:7a:a9:80:e0:44:c2:79:b5:94:c7:bb:27:
d6:b8:22:3b:0d:52:66:51:ef:fd:6b:d6:66:24:4f:
05:f7:96:7f:d8:68:81:12:2a:fd:29:7b:fc:1d:b6:
b6:12:73:df:19:3c:a7:b6:69:20:74:62:85:7c:03:
6a:3e:2b:2e:81:ad:91:aa:c5:ce:da:31:37:e5:53:
8e:03:58:15:03:e9:a0:8d:30:07:b1:45:c2:83:21:
4b:72:8a:02:14:a6:1d:52:2f:df:c7:97:69:05:ac:
99:88:6b:49:67:e4:bc:c8:1f:a9:ce:48:a6:60:5e:
6c:8f:f9:db:85:91:e6:44:c7:f6:ae:af:f7:a5:6c:
b5:e3:41:a8:3c:f6:32:3d:2b:37:e1:4f:a1:e7:8f:
a0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:12:7C:40:F3:60:A2:2F:4C:FD:68:D7:5E:B8:1D:AB:22:10:7F
X509v3 Authority Key Identifier:
keyid:D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/D42A166806CE2D015B2B090F188263BB4BB4BC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33342e302f32342d3234203d3e20323638383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.34.0/24
Signature Algorithm: sha256WithRSAEncryption
64:cb:b6:ae:30:05:46:91:b0:67:e5:e9:00:d2:18:d3:66:00:
78:72:fa:cc:8b:d1:5a:34:ec:b9:d4:32:d5:ea:d7:ee:11:94:
55:f4:49:df:82:76:db:41:35:40:d0:b6:12:7d:b0:5b:59:c6:
eb:14:16:28:57:ab:13:75:d7:9f:27:4a:5c:e4:0b:79:cf:81:
dd:89:b3:08:b3:45:fd:20:c5:c3:a5:18:98:14:d7:ec:d8:8e:
3a:0b:d2:95:53:29:35:56:e6:73:52:38:5a:04:c8:3e:60:66:
af:36:a7:41:8b:eb:66:23:27:1d:25:4e:70:45:fc:4e:fb:0e:
2c:16:7d:d7:e5:d0:82:ff:9e:0f:02:ae:8a:f1:55:40:5e:01:
6c:00:35:5c:f4:20:e7:78:14:d1:e6:32:e9:75:8a:a0:cd:60:
bc:14:66:bc:cf:32:70:55:54:dc:91:05:91:46:07:15:2d:e2:
73:bb:f8:5b:c7:72:4f:64:f6:03:30:d3:4c:5d:1a:e1:b5:5d:
90:0d:bd:ff:5e:aa:44:fa:16:4d:c5:f8:b4:b4:0a:13:c8:ee:
4b:b1:c1:90:2d:62:8e:c1:0e:87:b0:1b:ac:d5:53:7d:dc:5c:
ce:55:ff:0c:a3:7e:08:04:47:a4:68:73:b2:df:02:97:c1:2e:
09:b0:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 00:52:52 2025 by rpki-client