Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33352e302f32342d3234203d3e20323638383337.roa
File: 34352e3137342e33352e302f32342d3234203d3e20323638383337.roa (raw, json)
Hash identifier: Ih+XJ+qeOAVz57CrDJRl0ZfkAJZQu/RazFEc1xHk/Zo=
Subject key identifier: CF:C1:D4:93:15:F8:37:16:BD:AF:B9:01:06:30:A1:D7:13:D0:1F:2D
Certificate issuer: /CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Certificate serial: 59BF687CCCEEA1FAED53A486FB067ABCB27AE3D7
Authority key identifier: D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33352e302f32342d3234203d3e20323638383337.roa
Signing time: Thu 03 Apr 2025 12:39:18 +0000
ROA not before: Thu 03 Apr 2025 12:34:18 +0000
ROA not after: Thu 02 Apr 2026 12:39:18 +0000
asID: 268837
IP address blocks: 45.174.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:bf:68:7c:cc:ee:a1:fa:ed:53:a4:86:fb:06:7a:bc:b2:7a:e3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Validity
Not Before: Apr 3 12:34:18 2025 GMT
Not After : Apr 2 12:39:18 2026 GMT
Subject: CN=CFC1D49315F83716BDAFB9010630A1D713D01F2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:26:45:06:55:65:e4:71:7a:49:c1:2d:bd:
73:22:57:0c:3a:31:0b:bc:ee:e8:90:5c:09:4a:31:
8f:6b:24:95:fe:95:06:0f:91:c3:e5:a7:7f:09:1e:
a4:37:30:87:23:a9:b8:6d:5a:de:92:20:22:96:93:
96:49:d8:11:3e:69:4f:44:63:27:d7:7b:6d:12:0e:
fe:57:1c:7c:f3:ce:66:99:b9:dd:4a:da:6b:a7:59:
8d:63:e1:ad:a4:fe:3d:7d:52:21:d1:af:2a:4e:9a:
c8:dd:bb:3a:67:83:a5:86:76:a7:13:e6:27:f8:b3:
ed:8d:a0:af:ed:fe:ad:e5:62:57:02:4e:19:a0:b8:
82:ba:04:25:c4:dd:be:e9:7d:51:c1:00:ad:9f:f7:
f2:d8:de:46:23:8d:80:4e:bc:43:f5:16:21:1e:e4:
7d:0a:5f:3d:d5:f1:a8:75:94:f2:41:8b:61:16:7c:
19:1a:a2:be:9f:72:3d:01:51:a0:c0:80:b3:bb:b7:
47:6c:d7:ac:ad:ce:25:60:a3:32:4f:66:0e:11:92:
2b:39:eb:7c:11:99:8a:84:66:ab:4f:51:63:88:dd:
bc:91:50:5d:b5:65:fa:36:aa:d9:08:83:e1:3c:e8:
54:8f:8f:5a:f9:26:eb:9d:3f:56:f0:37:ca:b8:ae:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:D4:93:15:F8:37:16:BD:AF:B9:01:06:30:A1:D7:13:D0:1F:2D
X509v3 Authority Key Identifier:
keyid:D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/D42A166806CE2D015B2B090F188263BB4BB4BC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/34352e3137342e33352e302f32342d3234203d3e20323638383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:83:86:09:88:8e:41:5a:45:8b:7c:73:52:e9:d7:e8:2f:f4:
85:0c:fc:62:92:40:79:bc:ca:87:3f:35:4e:48:e2:b7:42:b6:
5a:37:06:a7:6e:bc:d1:07:02:f5:dc:de:5c:9b:12:f7:79:b1:
f9:98:6a:5f:91:72:31:86:ae:d0:3a:dd:19:40:3e:a1:1a:30:
70:ee:88:ca:3b:f1:00:bb:4a:03:23:5f:0f:37:f6:b9:5e:ab:
30:d3:93:be:e0:fb:98:48:6f:5c:87:9e:8f:d6:c6:f8:e7:0d:
64:67:47:28:80:67:48:0d:98:43:d8:82:97:bc:b9:c7:54:10:
63:90:47:9b:45:b2:da:54:2e:c5:af:e3:4b:ae:83:ec:82:43:
2c:fe:e1:81:18:0d:bc:22:bf:12:07:89:e3:92:8d:36:32:e5:
28:63:5d:ae:47:fc:fd:16:e0:54:7c:7a:ff:46:c9:04:ad:21:
6c:49:3c:1d:c8:8e:92:fe:a2:4d:52:4f:9d:1c:04:fe:6b:a2:
e7:b9:b1:38:10:93:f9:10:a6:4f:a0:72:d7:59:18:06:39:00:
2d:97:25:1d:f9:e5:03:cc:a3:7a:c8:3a:76:0e:45:2c:83:a8:
af:a0:69:1d:91:b7:40:64:0e:1f:08:f3:f6:00:0f:f3:3a:0e:
f9:28:1f:5d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUWb9ofMzuofrtU6SG+wZ6vLJ649cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQyQTE2NjgwNkNFMkQwMTVCMkIwOTBGMTg4MjYzQkI0
QkI0QkM0MzAeFw0yNTA0MDMxMjM0MThaFw0yNjA0MDIxMjM5MThaMDMxMTAvBgNV
BAMTKENGQzFENDkzMTVGODM3MTZCREFGQjkwMTA2MzBBMUQ3MTNEMDFGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkSZFBlVl5HF6ScEtvXMiVww6
MQu87uiQXAlKMY9rJJX+lQYPkcPlp38JHqQ3MIcjqbhtWt6SICKWk5ZJ2BE+aU9E
YyfXe20SDv5XHHzzzmaZud1K2munWY1j4a2k/j19UiHRrypOmsjduzpng6WGdqcT
5if4s+2NoK/t/q3lYlcCThmguIK6BCXE3b7pfVHBAK2f9/LY3kYjjYBOvEP1FiEe
5H0KXz3V8ah1lPJBi2EWfBkaor6fcj0BUaDAgLO7t0ds16ytziVgozJPZg4Rkis5
63wRmYqEZqtPUWOI3byRUF21Zfo2qtkIg+E86FSPj1r5JuudP1bwN8q4rlAnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUz8HUkxX4Nxa9r7kBBjCh1xPQHy0wHwYDVR0j
BBgwFoAU1CoWaAbOLQFbKwkPGIJju0u0vEMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOVR4dlpEY25kWndjRHgyMVlKZVhTN1ljbW9QTll6QW1WUnR2NFhranMz
QWovMC9ENDJBMTY2ODA2Q0UyRDAxNUIyQjA5MEYxODgyNjNCQjRCQjRCQzQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q0MkExNjY4MDZDRTJEMDE1
QjJCMDkwRjE4ODI2M0JCNEJCNEJDNDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzlUeHZaRGNuZFp3Y0R4MjFZSmVYUzdZY21vUE5ZekFtVlJ0djRYa2pzM0FqLzAv
MzQzNTJlMzEzNzM0MmUzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzgzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALa4jMA0GCSqGSIb3DQEBCwUAA4IBAQCxg4YJiI5B
WkWLfHNS6dfoL/SFDPxikkB5vMqHPzVOSOK3QrZaNwanbrzRBwL13N5cmxL3ebH5
mGpfkXIxhq7QOt0ZQD6hGjBw7ojKO/EAu0oDI18PN/a5Xqsw05O+4PuYSG9ch56P
1sb45w1kZ0cogGdIDZhD2IKXvLnHVBBjkEebRbLaVC7Fr+NLroPsgkMs/uGBGA28
Ir8SB4njko02MuUoY12uR/z9FuBUfHr/RskErSFsSTwdyI6S/qJNUk+dHAT+a6Ln
ubE4EJP5EKZPoHLXWRgGOQAtlyUd+eUDzKN6yDp2DkUsg6ivoGkdkbdAZA4fCPP2
AA/zOg75KB9d
-----END CERTIFICATE-----
Generated at Wed Jun 18 18:53:33 2025 by rpki-client