Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa
File: 34352e3136372e36382e302f32332d3233203d3e20323637393932.roa (raw, json)
Hash identifier: +/Bi4Iv+dPTJCKhZMBgzhzZdWaLAP6z2eKpGaqlxYps=
Subject key identifier: C9:EB:D1:02:AE:18:A8:1F:21:31:CC:B7:3A:86:ED:8A:00:96:03:84
Certificate issuer: /CN=F241E143F0F3AEFE61D034C829AC452A653FD855
Certificate serial: 39C9D1528FA2D23111350CD61F6C98DE2636BB97
Authority key identifier: F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa
Signing time: Tue 15 Apr 2025 16:55:56 +0000
ROA not before: Tue 15 Apr 2025 16:50:56 +0000
ROA not after: Tue 14 Apr 2026 16:55:56 +0000
asID: 267992
IP address blocks: 45.167.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:c9:d1:52:8f:a2:d2:31:11:35:0c:d6:1f:6c:98:de:26:36:bb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F241E143F0F3AEFE61D034C829AC452A653FD855
Validity
Not Before: Apr 15 16:50:56 2025 GMT
Not After : Apr 14 16:55:56 2026 GMT
Subject: CN=C9EBD102AE18A81F2131CCB73A86ED8A00960384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:19:2b:b7:67:04:12:aa:96:13:5c:2e:4e:ac:
3f:9c:39:84:3c:77:46:43:bf:cf:6a:11:5a:87:02:
ad:1c:61:21:c5:df:4d:ab:68:c9:a4:e7:64:c6:d4:
4a:28:0d:cd:5a:09:fc:41:09:84:59:ed:cc:23:89:
36:b3:d0:af:41:a3:34:1a:29:6f:ef:a0:b6:ff:e1:
a4:1c:ea:89:6b:7f:ed:63:a2:18:11:51:63:11:b4:
bf:88:e1:35:90:9c:e7:3f:0c:c5:a2:ea:e2:ad:56:
0e:07:68:8a:8c:0e:21:ad:01:17:6c:12:1e:11:8b:
4f:23:80:d1:1e:6d:9a:08:1f:f6:1f:7e:0e:36:5e:
12:6c:12:a2:b9:9a:bd:da:f7:e5:b1:71:4b:18:07:
dc:30:e5:ac:ec:e5:9d:8f:41:6c:a7:db:81:b8:44:
29:a5:ad:32:20:e5:6f:de:95:59:c8:e9:31:ae:a7:
f8:ea:5d:78:17:ba:dc:97:50:74:db:10:35:c5:76:
38:2c:d6:58:dc:e4:70:f8:80:91:92:e7:ee:8d:2b:
a8:8c:ff:9e:a7:d9:ba:7f:de:02:bf:10:50:62:c7:
28:9e:cd:c8:14:bd:a0:9d:db:a8:7b:80:7d:ff:af:
18:7f:59:6e:fb:a7:3d:55:a0:2f:20:75:9f:9b:b6:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EB:D1:02:AE:18:A8:1F:21:31:CC:B7:3A:86:ED:8A:00:96:03:84
X509v3 Authority Key Identifier:
keyid:F2:41:E1:43:F0:F3:AE:FE:61:D0:34:C8:29:AC:45:2A:65:3F:D8:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/F241E143F0F3AEFE61D034C829AC452A653FD855.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F241E143F0F3AEFE61D034C829AC452A653FD855.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e36382e302f32332d3233203d3e20323637393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.68.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:3f:ce:a0:4c:c3:20:a8:89:38:ae:1e:f7:2a:22:62:73:66:
e4:06:d4:2d:83:3c:e9:53:a7:33:f9:d5:2a:79:de:0c:af:b2:
92:de:20:3d:10:b1:a6:4c:8e:05:7f:74:84:77:d1:d1:be:ee:
80:6f:84:1d:fd:45:27:d7:d9:23:1c:64:eb:bd:12:7a:20:0e:
c6:ff:c0:13:05:98:67:5d:c2:91:41:f6:93:87:d2:39:c6:b3:
4c:c5:61:bf:8b:58:5e:32:d2:84:59:17:3f:0d:a5:9a:96:09:
67:21:f2:da:c3:7c:64:f9:7c:20:df:0f:b8:da:ff:ea:40:38:
c4:58:d1:1c:9c:f2:3f:d5:fb:11:3e:5b:c6:a1:5e:fd:a1:84:
b7:15:df:44:8e:d9:46:b9:17:3a:24:b9:ef:7b:74:f1:c0:e2:
08:2f:c3:c4:c5:2b:33:2c:d1:43:29:53:ba:c6:1a:cd:6e:3e:
a0:74:3e:6a:96:10:ba:25:b0:34:cc:84:80:05:c2:9a:e4:66:
36:dc:49:6a:69:d4:e0:82:65:54:24:2b:10:a2:81:c0:1d:29:
94:cd:f3:06:b8:b3:78:04:bd:8d:b1:21:3c:d3:e6:a9:00:c3:
70:94:d1:11:2d:30:88:f5:9e:85:c4:26:1c:bb:dc:05:2f:5f:
91:bc:03:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 01:06:49 2025 by rpki-client