Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa
File: 34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa (raw, json)
Hash identifier: wvgfoY9AETz9twOBRuB94S/gLya+Kwk8MDPlUDwjElA=
Subject key identifier: FA:56:13:D6:3F:96:DC:FC:CE:00:DD:99:40:9E:B0:7E:DA:50:D7:7D
Certificate issuer: /CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
Certificate serial: 26BE667DBC4430E8B81B2EC218B9639BFA991012
Authority key identifier: 96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa
Signing time: Wed 09 Apr 2025 18:17:00 +0000
ROA not before: Wed 09 Apr 2025 18:12:00 +0000
ROA not after: Wed 08 Apr 2026 18:17:00 +0000
asID: 269194
IP address blocks: 45.238.236.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:be:66:7d:bc:44:30:e8:b8:1b:2e:c2:18:b9:63:9b:fa:99:10:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112
Validity
Not Before: Apr 9 18:12:00 2025 GMT
Not After : Apr 8 18:17:00 2026 GMT
Subject: CN=FA5613D63F96DCFCCE00DD99409EB07EDA50D77D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:54:95:60:e0:92:fb:63:e5:8e:57:2c:39:
74:9a:7d:e4:f8:22:b8:9e:97:4c:91:81:75:09:e1:
9a:ec:51:0a:18:81:c8:87:2c:76:c7:44:17:3b:93:
8c:4e:d0:a6:b3:d4:7f:e1:66:ee:74:16:ec:ea:c3:
64:a3:4a:0d:c3:e4:9b:40:b6:fc:ad:39:0c:35:76:
69:cc:f7:75:64:e2:54:56:4b:0a:e8:8a:e6:c1:52:
37:46:65:39:0e:6b:da:fe:86:bc:58:39:f7:94:20:
1c:4f:73:cc:3f:aa:8d:a3:11:b8:61:ea:ad:17:07:
df:03:d0:45:e4:ac:4c:bf:74:ae:21:cf:a4:88:64:
be:b4:df:db:ad:55:22:c0:7f:fd:e2:35:b4:54:0a:
7d:bd:33:b7:38:a3:ba:fb:ce:c4:7f:97:4a:02:67:
9e:51:a8:47:75:fb:f6:44:7e:90:b7:83:f6:85:66:
5a:52:27:1a:d5:b0:6b:d6:8a:bc:64:d6:12:2b:a5:
c3:d7:4b:37:9f:7a:87:e5:8d:21:f9:dd:e5:a8:cc:
82:1a:7f:76:ac:9e:f3:56:ce:32:a3:0c:f4:56:2b:
64:fe:dc:9a:45:b9:28:2c:26:57:c0:7c:8c:fe:c1:
0e:6b:7e:8a:9f:61:3b:10:d7:f6:f0:bf:a2:9b:2c:
4b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:56:13:D6:3F:96:DC:FC:CE:00:DD:99:40:9E:B0:7E:DA:50:D7:7D
X509v3 Authority Key Identifier:
keyid:96:0C:CA:2B:42:F8:9A:2A:9A:BD:CC:54:6D:E2:2E:BB:9B:DB:41:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/960CCA2B42F89A2A9ABDCC546DE22EBB9BDB4112.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5rxVeDABpz7xnXhRcoZbm3SGV5C1pJ2htZyt6ASVeL4/0/34352e3233382e3233362e302f32322d3332203d3e20323639313934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.236.0/22
Signature Algorithm: sha256WithRSAEncryption
12:43:d4:3c:30:4e:e3:a7:3b:3a:fb:89:91:71:58:39:3e:76:
13:0b:f9:22:f4:8b:23:8d:70:6a:9e:12:98:c3:ca:99:93:86:
89:3e:46:e3:44:32:31:31:1d:26:f2:2a:f9:f5:71:b5:0a:8d:
e1:0f:ca:e1:2c:1d:2e:28:e5:b6:fb:86:23:70:c2:e2:5a:ba:
f5:4e:d5:5b:fb:88:58:48:3f:44:2f:00:0c:b6:82:64:37:3a:
76:1b:c1:06:9f:49:59:26:c7:ff:a2:1d:95:e5:49:0e:d9:44:
6d:4c:6d:99:97:8e:2a:59:d5:19:16:96:01:e9:91:69:43:e7:
e5:d0:69:7f:c4:45:75:2f:77:59:83:b4:f6:00:2e:81:9d:4e:
f1:3a:10:1b:ae:53:c5:d6:f3:f4:74:7b:8e:07:42:34:ad:42:
40:01:bd:9d:ab:8d:da:ea:89:bb:35:65:07:2c:f0:bf:72:12:
d9:13:21:4c:8f:5a:0e:e6:ea:b2:bd:da:fa:fe:6b:2d:54:6f:
88:d8:3f:6f:84:ed:17:32:e2:e9:63:15:44:07:13:a7:39:ff:
5b:36:0f:5c:0d:f3:5e:6b:0e:2e:68:8a:bc:6f:66:43:91:c1:
ce:79:b5:ef:69:6c:2f:8c:ef:d8:21:16:f3:8e:86:a6:c9:8f:
ad:f7:81:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:40:54 2025 by rpki-client