Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/34352e352e3131322e302f32322d3234203d3e20323636303934.roa
File: 34352e352e3131322e302f32322d3234203d3e20323636303934.roa (raw, json)
Hash identifier: Psq20IGRjZywQWISSGOrvpxornCdWACIOtz8sSaSRNs=
Subject key identifier: 3B:52:87:31:57:71:4E:5F:98:5B:E6:B6:CE:71:0D:52:37:ED:04:3E
Certificate issuer: /CN=44193E585B74C4D75B7FE4725353647532369A29
Certificate serial: 3998872BEC3B55DCFB01DDCCD8CED9C8DEA8D5A6
Authority key identifier: 44:19:3E:58:5B:74:C4:D7:5B:7F:E4:72:53:53:64:75:32:36:9A:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44193E585B74C4D75B7FE4725353647532369A29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/34352e352e3131322e302f32322d3234203d3e20323636303934.roa
Signing time: Thu 27 Mar 2025 14:28:34 +0000
ROA not before: Thu 27 Mar 2025 14:23:34 +0000
ROA not after: Thu 26 Mar 2026 14:28:34 +0000
asID: 266094
IP address blocks: 45.5.112.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:98:87:2b:ec:3b:55:dc:fb:01:dd:cc:d8:ce:d9:c8:de:a8:d5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44193E585B74C4D75B7FE4725353647532369A29
Validity
Not Before: Mar 27 14:23:34 2025 GMT
Not After : Mar 26 14:28:34 2026 GMT
Subject: CN=3B52873157714E5F985BE6B6CE710D5237ED043E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:49:4a:4c:22:63:6b:e6:3e:c3:fd:d4:17:08:
c5:a6:99:13:aa:d9:f8:d5:7a:3f:bb:77:fe:d7:ea:
5c:ff:a8:0c:f2:b6:46:31:1f:9e:da:3f:c0:3a:ce:
8b:20:e3:bf:61:41:1b:6d:9f:13:72:9f:77:5b:f5:
22:7b:42:57:3b:2d:47:b7:22:a9:28:b5:28:fe:17:
7f:17:d9:39:86:89:c0:20:0a:8d:47:b8:45:ce:21:
f4:b1:d0:22:17:83:70:9d:da:e7:2e:66:8f:c3:3e:
8e:14:ab:d0:b0:f4:56:16:f9:0d:d0:e3:bc:59:53:
b5:5e:c4:5e:81:49:fa:aa:80:48:79:0e:3a:18:31:
82:55:d8:82:58:e6:c9:55:84:7a:45:5a:a0:88:02:
9b:c8:8f:81:32:97:41:8e:8e:e2:29:7e:2e:34:bc:
64:e6:5f:12:fd:7e:5c:8a:4d:b0:15:4e:e3:5e:18:
14:1b:83:c7:07:d8:a0:12:24:c1:55:ed:48:4e:1a:
b4:80:b8:eb:b2:58:93:69:90:79:4e:21:61:ab:74:
ce:7a:b1:43:eb:d9:96:1a:e0:45:18:b5:2a:d1:61:
ca:c8:d1:58:8c:75:5e:39:4d:cb:8e:fa:87:23:e9:
19:2d:26:ac:75:e1:05:89:68:e0:79:6f:a7:e5:5c:
2f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:52:87:31:57:71:4E:5F:98:5B:E6:B6:CE:71:0D:52:37:ED:04:3E
X509v3 Authority Key Identifier:
keyid:44:19:3E:58:5B:74:C4:D7:5B:7F:E4:72:53:53:64:75:32:36:9A:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/44193E585B74C4D75B7FE4725353647532369A29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44193E585B74C4D75B7FE4725353647532369A29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUuGHcVvX8Q4Kvkdji7XGwfV2JcNrpFvo31h7VY83dPn/0/34352e352e3131322e302f32322d3234203d3e20323636303934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.112.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d7:22:5a:a4:27:d4:3a:fd:fd:37:1d:b9:89:db:09:df:59:
bc:f0:0b:d7:f4:3e:97:61:0f:ae:d0:b3:dd:16:d7:5f:b5:10:
12:f5:96:48:1d:79:d5:72:6d:86:55:ea:32:3e:79:f9:a6:2d:
31:86:b7:a3:b4:57:b7:b7:e8:e1:d5:aa:47:2f:75:51:de:0e:
43:7f:18:d0:dc:56:e3:65:e0:d8:da:d7:e1:6e:4b:0d:bb:ab:
dc:05:8c:f5:58:e9:00:c6:4f:e0:45:70:6f:37:75:ea:9b:00:
54:3f:1a:99:28:39:fc:ee:89:13:06:13:f4:e1:3c:9b:41:a9:
76:27:6e:11:10:c1:9e:fb:53:11:f5:0f:37:18:63:b7:87:74:
0b:c3:8d:95:f6:e6:bf:1b:e9:74:c2:b8:06:32:e3:b8:2c:5f:
50:60:0b:e8:56:c6:c8:c2:a1:68:80:ab:05:6c:0a:12:2e:b6:
7e:71:61:80:58:24:15:0b:20:11:35:56:6f:b4:03:95:11:7c:
3b:48:59:fa:60:2e:4f:66:28:d3:27:46:d4:74:d8:84:1d:6b:
33:92:d0:ed:ef:a1:8a:fc:4d:1d:79:55:e0:92:bc:6c:09:43:
b4:4a:96:79:01:eb:72:e6:ca:72:97:78:80:71:2e:46:0a:a7:
65:23:7c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 21:25:54 2025 by rpki-client