Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132302e302f32322d3332203d3e203631373132.roa
File: 34352e3137342e3132302e302f32322d3332203d3e203631373132.roa (raw, json)
Hash identifier: C0dM83QETC1/zqQQ421Ec503pu+a9WiI7bPPH9ZyQNo=
Subject key identifier: BC:ED:DA:58:A2:6E:17:34:B1:F6:80:E9:6F:83:E0:9F:DF:7C:DD:D1
Certificate issuer: /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial: 55F77C749B2C94B9B2FC3DF362F2323835E1FFB5
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132302e302f32322d3332203d3e203631373132.roa
Signing time: Sat 01 Mar 2025 12:44:16 +0000
ROA not before: Sat 01 Mar 2025 12:39:16 +0000
ROA not after: Sat 28 Feb 2026 12:44:16 +0000
asID: 61712
IP address blocks: 45.174.120.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f7:7c:74:9b:2c:94:b9:b2:fc:3d:f3:62:f2:32:38:35:e1:ff:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Validity
Not Before: Mar 1 12:39:16 2025 GMT
Not After : Feb 28 12:44:16 2026 GMT
Subject: CN=BCEDDA58A26E1734B1F680E96F83E09FDF7CDDD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:eb:e4:d2:52:e1:f7:bf:ef:10:73:3f:b4:
31:c1:01:c3:eb:41:34:91:1e:3c:7b:ee:d4:e8:35:
88:f8:42:ae:68:88:cf:df:df:65:9c:1a:bf:ea:bf:
93:47:25:82:34:9e:ba:68:64:7b:cb:9f:67:dc:5e:
b8:34:b5:c6:3f:01:49:a9:8f:04:73:98:53:ee:9c:
17:54:8d:7b:73:b4:0b:51:55:be:f0:c8:6b:04:a0:
7a:21:e7:52:ce:64:9b:f5:7c:d7:a7:5f:33:46:6c:
95:9f:8e:e8:e7:5d:c3:c7:ea:bd:2c:53:3d:35:17:
3e:a8:d9:5d:2b:4a:b6:d6:ca:5a:c6:f6:17:f0:a6:
35:fa:c0:2b:f5:c2:e4:6a:4b:33:28:b6:c6:f7:8c:
cf:8e:da:79:6e:7c:c8:c6:78:59:fb:6e:0a:f9:b7:
bd:11:5c:26:29:1f:19:e5:a1:f1:82:46:45:09:53:
b8:71:8a:f6:ad:04:7a:6b:40:5f:b8:c3:e2:2b:ab:
ae:57:f8:1d:21:90:7f:80:54:99:6f:ce:01:f4:4d:
4e:aa:38:d9:f8:99:dc:05:cf:e7:07:64:42:ab:21:
d6:76:fe:6c:1b:a9:f1:ba:7e:05:ce:05:95:f0:e5:
e6:b1:a4:45:78:79:99:32:58:0d:73:f1:aa:44:77:
d1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:ED:DA:58:A2:6E:17:34:B1:F6:80:E9:6F:83:E0:9F:DF:7C:DD:D1
X509v3 Authority Key Identifier:
keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132302e302f32322d3332203d3e203631373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:27:67:1b:0d:37:55:3b:19:d3:1e:fe:7e:7b:69:f9:85:37:
7c:43:74:33:22:13:f4:cf:da:c0:11:2b:ff:69:3d:2e:be:9f:
b8:71:50:1c:b1:48:7a:e2:4b:64:1d:33:28:5e:cb:04:1b:bf:
5f:a3:ed:97:ed:9f:25:59:25:07:29:b2:18:83:9e:24:cf:18:
6c:b2:20:f2:55:61:2c:3d:52:26:fd:e7:e7:7e:b5:9b:99:33:
3d:35:f8:d0:c6:a4:77:0e:fb:a8:db:10:ed:83:68:34:cc:96:
11:74:0c:9f:53:82:d2:a7:d1:46:05:4e:6b:68:27:03:d0:fe:
3c:a0:b3:d4:53:d0:43:34:05:5e:14:e8:02:42:87:19:6f:af:
8d:2c:52:f8:bd:25:2f:96:20:36:2b:bd:0f:23:4a:54:49:b5:
7f:a8:f4:b8:84:21:92:b6:fe:ba:b9:ee:b0:6a:e1:7a:32:bb:
66:36:59:21:bf:43:91:4e:41:90:6e:54:63:a8:0b:88:79:c6:
48:c0:c5:a1:db:db:33:75:ed:95:5b:6f:a2:ae:18:22:12:cd:
62:c1:85:2f:4d:c5:41:5a:de:97:be:99:bc:58:59:46:e2:8d:
2c:75:7b:66:3c:a2:86:c8:b7:44:0e:15:67:d1:16:e1:6f:48:
a2:b1:9f:4d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUVfd8dJsslLmy/D3zYvIyODXh/7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0RjdEMkRCRjk2QUVEQzAyQ0UxQjAxOTNGOTY0RTYy
NkMxOERDNDAeFw0yNTAzMDExMjM5MTZaFw0yNjAyMjgxMjQ0MTZaMDMxMTAvBgNV
BAMTKEJDRUREQTU4QTI2RTE3MzRCMUY2ODBFOTZGODNFMDlGREY3Q0RERDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfhevk0lLh97/vEHM/tDHBAcPr
QTSRHjx77tToNYj4Qq5oiM/f32WcGr/qv5NHJYI0nrpoZHvLn2fcXrg0tcY/AUmp
jwRzmFPunBdUjXtztAtRVb7wyGsEoHoh51LOZJv1fNenXzNGbJWfjujnXcPH6r0s
Uz01Fz6o2V0rSrbWylrG9hfwpjX6wCv1wuRqSzMotsb3jM+O2nlufMjGeFn7bgr5
t70RXCYpHxnlofGCRkUJU7hxivatBHprQF+4w+Irq65X+B0hkH+AVJlvzgH0TU6q
ONn4mdwFz+cHZEKrIdZ2/mwbqfG6fgXOBZXw5eaxpEV4eZkyWA1z8apEd9FvAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvO3aWKJuFzSx9oDpb4Pgn9983dEwHwYDVR0j
BBgwFoAUG099Lb+WrtwCzhsBk/lk5ibBjcQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjV4djVmOHZzdWhvV1l0c3NxcW9lS1M3ODV2WW9Fa2Y0eWZEam5HN2ZM
eGIvMC8xQjRGN0QyREJGOTZBRURDMDJDRTFCMDE5M0Y5NjRFNjI2QzE4REM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzFCNEY3RDJEQkY5NkFFREMw
MkNFMUIwMTkzRjk2NEU2MjZDMThEQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzI1eHY1Zjh2c3Vob1dZdHNzcXFvZUtTNzg1dllvRWtmNHlmRGpuRzdmTHhiLzAv
MzQzNTJlMzEzNzM0MmUzMTMyMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNjMx
MzczMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLa54MA0GCSqGSIb3DQEBCwUAA4IBAQAcJ2cbDTdV
OxnTHv5+e2n5hTd8Q3QzIhP0z9rAESv/aT0uvp+4cVAcsUh64ktkHTMoXssEG79f
o+2X7Z8lWSUHKbIYg54kzxhssiDyVWEsPVIm/efnfrWbmTM9NfjQxqR3Dvuo2xDt
g2g0zJYRdAyfU4LSp9FGBU5raCcD0P48oLPUU9BDNAVeFOgCQocZb6+NLFL4vSUv
liA2K70PI0pUSbV/qPS4hCGStv66ue6wauF6MrtmNlkhv0ORTkGQblRjqAuIecZI
wMWh29szde2VW2+irhgiEs1iwYUvTcVBWt6Xvpm8WFlG4o0sdXtmPKKGyLdEDhVn
0Rbhb0iisZ9N
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:27 2025 by rpki-client