Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3232203d3e20323636303439.roa
File: 34352e342e3134342e302f32322d3232203d3e20323636303439.roa (raw, json)
Hash identifier: yJdYpRBzONIMW/peVsgb0/kPZ7tvI4V5MKszUsPnwMc=
Subject key identifier: A3:CA:6A:08:B2:1A:01:00:33:08:65:AA:41:D0:C3:96:0B:E1:C2:B5
Certificate issuer: /CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Certificate serial: 3998C1FDEB0F6ABAD541F247C0DD4006B7A132C8
Authority key identifier: F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3232203d3e20323636303439.roa
Signing time: Mon 10 Mar 2025 13:56:51 +0000
ROA not before: Mon 10 Mar 2025 13:51:51 +0000
ROA not after: Mon 09 Mar 2026 13:56:51 +0000
asID: 266049
IP address blocks: 45.4.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:98:c1:fd:eb:0f:6a:ba:d5:41:f2:47:c0:dd:40:06:b7:a1:32:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Validity
Not Before: Mar 10 13:51:51 2025 GMT
Not After : Mar 9 13:56:51 2026 GMT
Subject: CN=A3CA6A08B21A0100330865AA41D0C3960BE1C2B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:71:46:72:78:dc:3d:21:35:d7:11:4f:f4:
db:09:05:c8:9e:bf:92:2a:f3:d9:a1:0f:d5:7b:02:
c2:14:cb:ab:b8:8a:52:88:0c:1b:c8:b1:47:b4:42:
c0:af:a3:5b:a3:f5:80:41:be:04:a4:2f:14:a5:fa:
37:a3:7c:12:8d:de:3b:7f:9a:29:a4:67:a1:25:37:
ba:ba:e4:f5:36:9b:90:67:0a:5a:41:56:ee:cb:60:
ae:34:dd:6d:c5:27:ff:71:4a:8d:26:91:28:52:70:
03:6e:58:fd:59:02:77:40:7a:39:03:c9:05:bb:4e:
8b:4d:9d:a8:53:2d:b7:8a:2c:dc:82:ce:04:1a:19:
01:7f:a8:f9:e1:6e:fe:7c:8a:31:02:a3:5f:d9:0e:
41:3d:00:96:6c:b9:8f:d0:85:60:2c:7b:1c:8a:30:
25:6d:13:f3:97:de:15:f7:3d:c9:41:e9:ae:d9:8c:
e4:f3:29:05:e7:ba:fb:4c:e0:f5:82:e0:93:54:ba:
a1:45:0d:d8:0d:7e:4d:53:67:15:02:5c:4e:df:b7:
d1:bc:bf:89:f1:c1:ae:bb:e6:2f:21:a4:75:52:0f:
d9:2d:1e:aa:fa:9b:fb:18:d1:24:bd:92:40:75:a9:
96:e8:d3:3a:bf:ba:08:fc:60:7e:07:aa:43:7b:76:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:CA:6A:08:B2:1A:01:00:33:08:65:AA:41:D0:C3:96:0B:E1:C2:B5
X509v3 Authority Key Identifier:
keyid:F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134342e302f32322d3232203d3e20323636303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.144.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:f8:78:ff:68:98:31:cc:47:ac:b2:30:c1:d6:c7:6a:62:44:
eb:25:82:c5:70:2b:04:24:7a:95:cc:f0:4a:c9:7e:f2:3d:69:
38:c7:cf:85:38:76:ea:b5:98:f8:dc:1f:01:f0:1c:5f:68:08:
f1:1d:c0:06:9d:f3:5a:69:12:65:0f:8b:19:9a:ab:50:28:bf:
f3:20:71:ed:0a:ee:13:5a:bf:7f:18:a8:f3:6e:ed:74:53:70:
61:f1:bf:0c:9f:37:e5:bd:f8:0c:1d:74:ef:6b:4a:1a:6f:55:
7a:db:41:08:b9:c9:fa:52:8a:a5:6d:83:d4:d7:5d:ba:94:c6:
b8:c7:ab:b4:28:92:ec:41:04:10:61:63:8e:9b:0c:3a:f2:56:
05:08:98:23:35:92:57:48:f3:41:4a:21:7a:85:d3:96:5c:c3:
9f:de:4b:f9:2b:86:e1:db:bf:45:6d:a8:9e:6e:3b:bd:38:ba:
21:a8:a6:46:16:c7:c9:b1:e3:8d:0c:a9:23:89:e5:5e:a2:e4:
58:36:a8:09:18:a6:ac:fd:27:0a:d2:c8:9b:96:4e:fa:e4:31:
08:35:79:73:77:b7:66:a8:90:8c:35:d3:9a:24:17:e1:a3:20:
63:33:83:42:c9:50:fd:23:28:5a:7f:ef:ff:5c:af:9f:6d:ec:
08:cc:dd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 12:35:10 2025 by rpki-client