Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3234203d3e20323637323831.roa
File: 34352e3233322e31302e302f32342d3234203d3e20323637323831.roa (raw, json)
Hash identifier: aTZB1iW4ApWnICNc/iwXZZ7O/KJE3x6AODsj5bbSFxc=
Subject key identifier: 49:6F:92:35:52:39:02:E7:F7:49:4A:FA:29:19:57:D7:6D:0E:1E:02
Certificate issuer: /CN=9C5BC63BC06A6453BAF64823FA913BF1C397832C
Certificate serial: 5827D947C62F318103A27583603C9B9950BADF30
Authority key identifier: 9C:5B:C6:3B:C0:6A:64:53:BA:F6:48:23:FA:91:3B:F1:C3:97:83:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5BC63BC06A6453BAF64823FA913BF1C397832C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3234203d3e20323637323831.roa
Signing time: Wed 09 Jul 2025 16:37:53 +0000
ROA not before: Wed 09 Jul 2025 16:32:53 +0000
ROA not after: Wed 08 Jul 2026 16:37:53 +0000
asID: 267281
IP address blocks: 45.232.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:27:d9:47:c6:2f:31:81:03:a2:75:83:60:3c:9b:99:50:ba:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C5BC63BC06A6453BAF64823FA913BF1C397832C
Validity
Not Before: Jul 9 16:32:53 2025 GMT
Not After : Jul 8 16:37:53 2026 GMT
Subject: CN=496F9235523902E7F7494AFA291957D76D0E1E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9e:72:8f:11:9e:f1:dd:90:da:ce:4a:ca:59:
56:5b:58:2c:bc:e7:3e:06:a4:dc:06:4b:7e:e5:99:
40:a6:f8:ff:89:2d:c5:c0:4e:fc:7a:0b:ea:7d:28:
6c:0c:ea:b1:ff:e6:92:77:b8:92:75:49:f8:59:5d:
d3:cf:4f:9d:31:71:55:cd:42:9c:ec:33:2b:36:94:
c8:45:e2:d3:01:98:e1:d6:87:0a:50:e2:85:da:3f:
32:fa:78:99:6a:e4:9c:93:0e:97:d3:02:76:25:0b:
7b:53:97:6f:8c:fb:b4:bc:88:f4:6c:8c:82:bc:1e:
32:58:35:65:a0:aa:5c:37:e9:99:df:70:60:c3:ea:
bd:82:e1:01:6f:b8:96:c6:07:b5:c8:ff:8b:17:41:
81:8c:6e:df:cc:55:4f:80:a0:07:fa:91:3e:58:6c:
95:bf:df:eb:9d:41:b3:12:a7:a9:90:50:af:7b:d5:
8e:a0:ea:56:6a:ab:3e:b9:21:a3:71:34:fe:7e:6e:
cd:f8:2e:69:50:d3:00:25:ff:ad:a0:f5:96:a7:da:
c7:94:1c:d9:9b:d1:22:9e:b3:67:b6:c8:09:c4:99:
40:d2:4f:8d:e3:bc:c5:8a:0b:d9:44:40:c6:c3:d8:
99:cd:94:80:6d:28:b5:ce:bb:e3:82:15:4a:61:2b:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:92:35:52:39:02:E7:F7:49:4A:FA:29:19:57:D7:6D:0E:1E:02
X509v3 Authority Key Identifier:
keyid:9C:5B:C6:3B:C0:6A:64:53:BA:F6:48:23:FA:91:3B:F1:C3:97:83:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/9C5BC63BC06A6453BAF64823FA913BF1C397832C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C5BC63BC06A6453BAF64823FA913BF1C397832C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3vndxv5K7MDuGyYKsrEBVkLkjog6LtkUqWny4YUMf4Zv/0/34352e3233322e31302e302f32342d3234203d3e20323637323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:76:53:d5:9b:84:92:58:a3:f8:2d:1e:5b:32:f7:3f:74:08:
19:bb:0a:8a:60:65:da:ef:91:e9:b5:2f:18:ab:be:ea:15:59:
d2:2b:ae:80:cf:9e:86:72:10:ee:fd:79:90:05:9e:ce:0f:ac:
35:7b:a0:71:dc:65:7d:5d:6f:a4:ba:4a:23:65:97:b7:2e:9c:
16:6c:f3:5c:e1:78:bf:78:5c:50:4f:64:cf:ca:df:cc:37:ea:
ca:09:29:04:04:3f:57:9f:ad:76:4b:91:9d:6a:c6:6f:61:8a:
42:76:57:63:e9:1e:f4:95:ee:9b:ca:9e:b0:5b:19:14:45:07:
46:66:40:23:bc:52:90:0b:13:a8:8b:b9:2f:32:0c:6f:27:40:
a4:c8:bd:02:69:4d:bc:0c:a3:d0:f7:77:28:ba:4a:a3:2e:90:
d3:f0:34:92:59:cd:d0:c1:1e:b1:b4:f7:41:9d:4b:3d:c0:7a:
43:fc:df:1e:c0:9f:1c:8f:73:aa:44:3c:6f:e7:fe:0c:57:d0:
8c:a0:fe:8b:de:31:43:2a:57:49:4f:23:2a:a5:6f:de:9d:34:
89:d1:04:7c:06:21:9c:89:3b:d4:5b:82:40:f9:1c:e6:96:56:
ee:6c:fc:5e:99:48:08:14:ca:1e:2a:95:bb:14:35:05:bd:84:
d6:9f:fb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:54:20 2025 by rpki-client