Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa
File: 34352e3138362e35322e302f32332d3233203d3e20323639343131.roa (raw, json)
Hash identifier: VKIHzMffVy5s78Xyx9ZH/WkiA1hIjXIINhtZm/ysLw8=
Subject key identifier: 09:23:07:08:5D:14:86:DD:03:7E:F3:F0:FE:BC:73:AE:50:78:68:D7
Certificate issuer: /CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Certificate serial: 71B455D18889B739644EE02C6863837E252236C9
Authority key identifier: FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa
Signing time: Sat 22 Mar 2025 05:07:07 +0000
ROA not before: Sat 22 Mar 2025 05:02:07 +0000
ROA not after: Sat 21 Mar 2026 05:07:07 +0000
asID: 269411
IP address blocks: 45.186.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:b4:55:d1:88:89:b7:39:64:4e:e0:2c:68:63:83:7e:25:22:36:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Validity
Not Before: Mar 22 05:02:07 2025 GMT
Not After : Mar 21 05:07:07 2026 GMT
Subject: CN=092307085D1486DD037EF3F0FEBC73AE507868D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ea:ce:91:e8:43:de:45:f8:2d:24:ce:ed:8c:
9c:66:a8:10:35:d3:59:02:e0:9b:64:02:1b:db:eb:
12:8f:b1:04:3f:93:d1:2d:17:54:4f:d5:4e:a7:a0:
15:c8:e0:6a:45:b8:17:76:33:8a:81:49:c7:77:82:
97:51:25:7a:e3:45:97:45:5a:ff:54:de:c8:ea:21:
e6:33:6d:eb:ea:e1:71:99:27:a8:7d:a9:2a:9c:7f:
ab:c8:04:ba:c1:f5:30:60:39:91:8e:b7:ee:e4:43:
1c:4f:5d:94:7a:48:78:3b:43:c1:92:de:66:2e:e6:
7f:bc:70:85:e5:ab:d6:c0:c8:30:7a:58:33:dd:af:
0a:59:4c:b5:6a:c9:4c:7c:7f:0d:1f:5c:a0:6f:dc:
c9:76:48:09:8c:9a:ef:45:e2:49:b6:08:61:b5:aa:
52:27:16:b2:2c:d1:6f:02:2f:cc:bd:30:a7:0b:2c:
59:1a:f7:7e:4c:fa:91:27:ac:59:97:69:61:00:29:
70:83:95:1d:40:4b:21:d9:5d:d2:4f:b0:1c:e5:2e:
55:92:91:5b:c8:64:28:48:04:28:bf:32:71:97:a6:
36:ea:7b:b2:ea:fe:10:4f:fd:41:ce:3c:61:66:d8:
cb:14:07:d2:c1:f4:a3:90:d4:33:1d:4e:c8:c5:d5:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:23:07:08:5D:14:86:DD:03:7E:F3:F0:FE:BC:73:AE:50:78:68:D7
X509v3 Authority Key Identifier:
keyid:FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32332d3233203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:31:b1:7a:cd:9f:2d:4e:ab:5a:60:4f:86:4b:da:5b:4b:db:
c9:6f:7d:e0:c6:c8:3f:b8:7b:25:66:e1:b5:13:fb:a3:34:05:
df:44:d5:1a:7f:37:4d:65:84:9c:b6:87:92:48:36:d7:ba:fd:
8b:cf:8c:2f:86:58:bf:89:2c:e9:42:0f:89:03:a7:1d:38:03:
1d:09:9b:3b:89:0a:4d:90:e4:97:cc:6c:75:5a:fc:c7:0a:70:
d9:1f:83:c3:17:65:50:b2:b7:9b:00:96:31:4b:d5:5b:ee:15:
66:12:5c:99:cc:41:ef:e0:dd:79:4d:b6:98:fa:c1:ba:cd:ef:
4d:34:1d:7a:cf:a9:10:44:57:1d:9f:68:f5:50:b2:de:3b:ee:
f4:30:b8:1e:33:e4:7c:49:72:47:af:16:d9:4e:28:ca:12:d9:
43:3a:8c:8e:4c:ad:1d:4e:02:c5:02:ac:9a:fc:6c:31:29:9a:
4f:32:9d:6e:01:e2:f2:67:6c:7c:90:ef:ab:f9:72:55:2d:9b:
53:c2:74:ad:a5:e9:a3:30:a7:1b:fd:0f:bc:60:a6:c0:8f:9b:
1b:18:51:66:07:89:a6:e8:80:e5:5d:f2:84:de:8b:4c:e1:f4:
fc:4b:52:c5:f3:b5:58:7a:91:51:f3:4b:09:13:8a:01:5f:0b:
b0:31:cc:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcbRV0YiJtzlkTuAsaGODfiUiNskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI2MTJFRTU4MkVBNTlGQjVBMjJDQTBEQzc1OTc0RkFD
QkE1MzMwMzAeFw0yNTAzMjIwNTAyMDdaFw0yNjAzMjEwNTA3MDdaMDMxMTAvBgNV
BAMTKDA5MjMwNzA4NUQxNDg2REQwMzdFRjNGMEZFQkM3M0FFNTA3ODY4RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy6s6R6EPeRfgtJM7tjJxmqBA1
01kC4JtkAhvb6xKPsQQ/k9EtF1RP1U6noBXI4GpFuBd2M4qBScd3gpdRJXrjRZdF
Wv9U3sjqIeYzbevq4XGZJ6h9qSqcf6vIBLrB9TBgOZGOt+7kQxxPXZR6SHg7Q8GS
3mYu5n+8cIXlq9bAyDB6WDPdrwpZTLVqyUx8fw0fXKBv3Ml2SAmMmu9F4km2CGG1
qlInFrIs0W8CL8y9MKcLLFka935M+pEnrFmXaWEAKXCDlR1ASyHZXdJPsBzlLlWS
kVvIZChIBCi/MnGXpjbqe7Lq/hBP/UHOPGFm2MsUB9LB9KOQ1DMdTsjF1SRDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCSMHCF0Uht0DfvPw/rxzrlB4aNcwHwYDVR0j
BBgwFoAU+2Eu5YLqWftaIsoNx1l0+sulMwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1FmWnJ0OUdTb1MySnRCanU0UmlRSDFxQkdrOEdSc0R5U0Q1cjVMMjhR
eEUvMC9GQjYxMkVFNTgyRUE1OUZCNUEyMkNBMERDNzU5NzRGQUNCQTUzMzAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZCNjEyRUU1ODJFQTU5RkI1
QTIyQ0EwREM3NTk3NEZBQ0JBNTMzMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NRZlpydDlHU29TMkp0Qmp1NFJpUUgxcUJHazhHUnNEeVNENXI1TDI4UXhFLzAv
MzQzNTJlMzEzODM2MmUzNTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM5
MzQzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLbo0MA0GCSqGSIb3DQEBCwUAA4IBAQCdMbF6zZ8t
TqtaYE+GS9pbS9vJb33gxsg/uHslZuG1E/ujNAXfRNUafzdNZYSctoeSSDbXuv2L
z4wvhli/iSzpQg+JA6cdOAMdCZs7iQpNkOSXzGx1WvzHCnDZH4PDF2VQsrebAJYx
S9Vb7hVmElyZzEHv4N15TbaY+sG6ze9NNB16z6kQRFcdn2j1ULLeO+70MLgeM+R8
SXJHrxbZTijKEtlDOoyOTK0dTgLFAqya/GwxKZpPMp1uAeLyZ2x8kO+r+XJVLZtT
wnStpemjMKcb/Q+8YKbAj5sbGFFmB4mm6IDlXfKE3otM4fT8S1LF87VYepFR80sJ
E4oBXwuwMcxC
-----END CERTIFICATE-----
Generated at Wed Jun 11 23:12:21 2025 by rpki-client