Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3232203d3e20323638383038.roa
File: 34352e3137332e33322e302f32322d3232203d3e20323638383038.roa (raw, json)
Hash identifier: MEPxMVpBO3VLYov6iVhYFlWFh6O9nVi5+waxilgLnSQ=
Subject key identifier: 40:A4:D0:41:BB:60:8D:19:B3:1C:FD:5C:97:28:F9:30:D8:D2:72:F2
Certificate issuer: /CN=F4C414A29F49C807B0E502CA249FB7E23D9F2ED7
Certificate serial: 47F5FEFC3C2B59E12FAFB5048011FA303E34852F
Authority key identifier: F4:C4:14:A2:9F:49:C8:07:B0:E5:02:CA:24:9F:B7:E2:3D:9F:2E:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3232203d3e20323638383038.roa
Signing time: Thu 17 Apr 2025 17:42:38 +0000
ROA not before: Thu 17 Apr 2025 17:37:38 +0000
ROA not after: Thu 16 Apr 2026 17:42:38 +0000
asID: 268808
IP address blocks: 45.173.32.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:f5:fe:fc:3c:2b:59:e1:2f:af:b5:04:80:11:fa:30:3e:34:85:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F4C414A29F49C807B0E502CA249FB7E23D9F2ED7
Validity
Not Before: Apr 17 17:37:38 2025 GMT
Not After : Apr 16 17:42:38 2026 GMT
Subject: CN=40A4D041BB608D19B31CFD5C9728F930D8D272F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:69:36:2e:c7:27:32:d6:4c:d6:42:a1:56:57:
cf:18:23:bf:b7:29:3f:3f:00:a1:b2:62:55:7f:c2:
dc:f8:a8:64:2f:06:2b:07:06:8d:d1:e1:28:cd:55:
b3:9c:28:b7:ed:11:40:de:05:2a:f2:66:df:6e:52:
bb:5e:c2:80:f1:34:5d:b8:cf:90:af:11:3c:6f:8e:
6e:73:e2:75:31:e7:11:12:98:06:e5:22:4c:e9:e3:
05:52:93:a1:cb:5c:8a:6a:6a:56:b3:c4:6c:43:6a:
d6:14:a3:a5:f5:75:cc:cb:06:b8:e7:f5:b3:98:73:
67:05:f2:6c:12:e4:0f:3b:68:f7:95:7f:71:55:54:
fb:53:36:f4:0b:7c:6e:73:28:58:69:6d:cd:a3:ec:
a2:93:b1:3f:17:8a:71:aa:92:21:41:dc:c5:2d:5e:
0f:87:ce:52:33:ad:ee:f5:4e:4e:49:2c:e5:fb:14:
52:4b:f0:99:f0:11:d2:f6:cc:f7:3a:1a:0b:38:80:
c7:1d:c2:ba:10:ea:17:b3:d6:bc:01:48:3e:9b:a1:
8c:86:c0:a5:2d:84:6b:83:c3:bb:f2:63:9c:2f:43:
9f:00:7c:7c:b7:23:0c:06:54:70:8c:f4:8f:1d:a5:
73:7d:8c:35:4d:8a:fe:6e:fb:23:f1:05:47:96:56:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:D0:41:BB:60:8D:19:B3:1C:FD:5C:97:28:F9:30:D8:D2:72:F2
X509v3 Authority Key Identifier:
keyid:F4:C4:14:A2:9F:49:C8:07:B0:E5:02:CA:24:9F:B7:E2:3D:9F:2E:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F4C414A29F49C807B0E502CA249FB7E23D9F2ED7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5HRYxhUYxLXEy2rdi2482so6B5UiNFznvTWst79Fujr/0/34352e3137332e33322e302f32322d3232203d3e20323638383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.173.32.0/22
Signature Algorithm: sha256WithRSAEncryption
9c:f0:a5:61:43:58:1c:12:ea:f4:a2:dd:53:f5:c3:d0:5c:8d:
5a:f8:0f:b7:ee:93:72:8c:94:a2:f7:57:c4:b9:a6:e7:27:15:
fd:5a:b0:d0:fa:41:79:3a:77:10:10:e4:3d:16:8a:54:e9:83:
d7:a0:58:e9:44:25:35:bf:2b:82:80:d4:11:6e:45:2b:31:8f:
f5:ed:53:d2:be:59:22:7a:44:51:55:28:91:59:d1:d7:7a:73:
c6:ce:6e:20:d4:38:7d:cd:a4:ca:dd:fc:00:71:e8:50:6f:0c:
5c:06:e6:db:89:e1:0d:c0:97:45:44:7c:d9:71:61:2a:12:8a:
2a:32:7a:b0:d5:7f:78:53:ef:00:ff:d6:43:2f:52:6a:89:23:
41:a0:9b:16:34:22:ab:ab:06:3e:f2:14:cf:bc:cd:33:1d:86:
7e:5d:4e:58:58:d3:e4:93:94:35:8b:97:9b:77:79:b8:90:55:
38:68:71:2e:30:21:78:0b:aa:cb:4b:a8:83:a7:cb:7b:d8:22:
56:e8:df:67:4c:a8:23:e4:c7:28:fb:2d:d4:e0:7b:cf:0b:2e:
11:61:ee:37:23:4c:bd:a5:75:fa:f6:51:17:09:d5:05:49:b1:
c0:80:b5:15:96:a7:81:13:48:d8:67:20:fb:8c:66:1c:7b:5b:
b9:66:c5:ec
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUR/X+/DwrWeEvr7UEgBH6MD40hS8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjRDNDE0QTI5RjQ5QzgwN0IwRTUwMkNBMjQ5RkI3RTIz
RDlGMkVENzAeFw0yNTA0MTcxNzM3MzhaFw0yNjA0MTYxNzQyMzhaMDMxMTAvBgNV
BAMTKDQwQTREMDQxQkI2MDhEMTlCMzFDRkQ1Qzk3MjhGOTMwRDhEMjcyRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9aTYuxycy1kzWQqFWV88YI7+3
KT8/AKGyYlV/wtz4qGQvBisHBo3R4SjNVbOcKLftEUDeBSryZt9uUrtewoDxNF24
z5CvETxvjm5z4nUx5xESmAblIkzp4wVSk6HLXIpqalazxGxDatYUo6X1dczLBrjn
9bOYc2cF8mwS5A87aPeVf3FVVPtTNvQLfG5zKFhpbc2j7KKTsT8XinGqkiFB3MUt
Xg+HzlIzre71Tk5JLOX7FFJL8JnwEdL2zPc6Ggs4gMcdwroQ6hez1rwBSD6boYyG
wKUthGuDw7vyY5wvQ58AfHy3IwwGVHCM9I8dpXN9jDVNiv5u+yPxBUeWVitNAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQKTQQbtgjRmzHP1clyj5MNjScvIwHwYDVR0j
BBgwFoAU9MQUop9JyAew5QLKJJ+34j2fLtcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQzVIUll4aFVZeExYRXkycmRpMjQ4MnNvNkI1VWlORnpudlRXc3Q3OUZ1
anIvMC9GNEM0MTRBMjlGNDlDODA3QjBFNTAyQ0EyNDlGQjdFMjNEOUYyRUQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y0QzQxNEEyOUY0OUM4MDdC
MEU1MDJDQTI0OUZCN0UyM0Q5RjJFRDcuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0M1SFJZeGhVWXhMWEV5MnJkaTI0ODJzbzZCNVVpTkZ6bnZUV3N0NzlGdWpyLzAv
MzQzNTJlMzEzNzMzMmUzMzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzgzMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa0gMA0GCSqGSIb3DQEBCwUAA4IBAQCc8KVhQ1gc
Eur0ot1T9cPQXI1a+A+37pNyjJSi91fEuabnJxX9WrDQ+kF5OncQEOQ9FopU6YPX
oFjpRCU1vyuCgNQRbkUrMY/17VPSvlkiekRRVSiRWdHXenPGzm4g1Dh9zaTK3fwA
cehQbwxcBubbieENwJdFRHzZcWEqEooqMnqw1X94U+8A/9ZDL1JqiSNBoJsWNCKr
qwY+8hTPvM0zHYZ+XU5YWNPkk5Q1i5ebd3m4kFU4aHEuMCF4C6rLS6iDp8t72CJW
6N9nTKgj5Mco+y3U4HvPCy4RYe43I0y9pXX69lEXCdUFSbHAgLUVlqeBE0jYZyD7
jGYce1u5ZsXs
-----END CERTIFICATE-----
Generated at Wed Jun 18 03:57:31 2025 by rpki-client