Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132312e302f32342d3332203d3e203631373132.roa
File: 34352e3137342e3132312e302f32342d3332203d3e203631373132.roa (raw, json)
Hash identifier: ihWcUuDY2ZfvCgcdH40ovmRwhT6KLR2K7/MH5TyBufM=
Subject key identifier: AC:C5:39:7A:33:55:84:1E:E3:5B:87:3A:BF:A9:9A:5C:AE:47:6D:C2
Certificate issuer: /CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Certificate serial: 2DFC5C9DEE3BCD6BD6D1E10A0410C164E728A6C0
Authority key identifier: 1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132312e302f32342d3332203d3e203631373132.roa
Signing time: Sat 01 Mar 2025 12:45:13 +0000
ROA not before: Sat 01 Mar 2025 12:40:13 +0000
ROA not after: Sat 28 Feb 2026 12:45:13 +0000
asID: 61712
IP address blocks: 45.174.121.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:fc:5c:9d:ee:3b:cd:6b:d6:d1:e1:0a:04:10:c1:64:e7:28:a6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4
Validity
Not Before: Mar 1 12:40:13 2025 GMT
Not After : Feb 28 12:45:13 2026 GMT
Subject: CN=ACC5397A3355841EE35B873ABFA99A5CAE476DC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6d:71:1a:b8:a6:91:75:96:ce:53:0e:77:5a:
b1:a3:9c:52:4d:07:b3:92:82:a8:cc:64:0e:e9:4b:
eb:2f:6f:d3:aa:3b:cd:e1:c6:57:d6:98:a3:03:fd:
2b:c1:43:13:00:e9:44:ae:02:73:87:da:df:90:e6:
fe:41:ea:fc:e1:79:1e:7c:1a:6e:70:ab:97:9f:ab:
dd:b0:4a:24:cf:7c:64:fe:17:35:23:4a:02:6b:6c:
aa:bb:5c:56:9f:6a:44:8f:22:bf:b1:3b:1a:cd:3d:
04:33:ba:d3:b1:7b:f2:86:c0:1b:da:3f:cd:c3:e7:
1b:66:f9:f3:df:6f:99:74:4b:d4:dc:8b:21:4a:20:
55:3b:26:ac:35:51:a2:58:fd:26:9c:f8:a0:90:bb:
53:4c:d5:4c:fd:e2:8e:c7:f2:08:80:0c:7c:40:82:
da:41:4c:42:0b:47:24:3f:96:14:98:b1:07:84:bc:
24:f2:00:ee:58:ec:b0:3f:59:38:45:4d:4d:0c:2d:
9e:8d:e4:4b:4b:95:4d:0f:df:e5:a1:88:08:74:59:
fa:4d:0c:1f:4b:34:7b:98:dd:9f:e6:c7:ab:17:d8:
41:8b:21:ec:22:21:36:1c:13:b2:28:13:a5:57:50:
d5:aa:e7:68:1e:d9:02:6a:5d:92:3c:c1:bf:48:8c:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C5:39:7A:33:55:84:1E:E3:5B:87:3A:BF:A9:9A:5C:AE:47:6D:C2
X509v3 Authority Key Identifier:
keyid:1B:4F:7D:2D:BF:96:AE:DC:02:CE:1B:01:93:F9:64:E6:26:C1:8D:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1B4F7D2DBF96AEDC02CE1B0193F964E626C18DC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/34352e3137342e3132312e302f32342d3332203d3e203631373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.121.0/24
Signature Algorithm: sha256WithRSAEncryption
23:08:67:2f:9d:73:0d:0b:01:8e:83:c8:e3:b9:16:03:b8:96:
cd:94:0d:e0:55:14:70:c8:b8:31:10:77:34:4a:ee:a8:d4:ca:
db:ff:c1:95:de:e6:83:70:d7:d4:22:d1:20:32:d6:7c:7e:88:
d7:43:80:85:98:d5:a8:28:b5:54:e1:e5:4a:ab:8d:f5:e5:22:
1d:ec:d6:40:93:4c:d5:1d:59:9e:4b:8f:68:38:82:60:0b:47:
36:56:c5:18:d6:df:97:35:6e:96:41:ad:35:07:ff:3e:17:64:
08:a1:73:f4:47:42:7d:c9:19:8e:74:a9:54:be:4b:a6:2a:a5:
9d:86:b8:cb:78:00:89:83:5b:14:22:bb:1a:b2:a7:67:82:06:
77:13:c1:82:77:6c:e2:7b:b3:35:c0:09:ee:68:b3:be:d3:8c:
b4:4b:96:32:d1:ce:68:e0:0c:33:7b:74:54:03:bd:53:8a:82:
6e:26:d5:4f:ef:90:be:0c:f8:07:c4:fb:ca:89:c6:f1:38:ae:
2b:44:75:07:6f:32:a8:4a:f5:f2:47:ce:d7:bb:d1:46:fa:89:
a4:f0:62:85:d3:c7:16:b4:56:01:21:d5:3c:68:f3:c1:a6:c5:
96:18:cf:bb:45:89:52:b0:12:05:af:94:7f:8a:37:8c:a6:d7:
83:40:4b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:26 2025 by rpki-client