Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134352e302f32342d3234203d3e20323636303439.roa
File: 34352e342e3134352e302f32342d3234203d3e20323636303439.roa (raw, json)
Hash identifier: oCNVbgZ22SXNHSEK++iv3b5TDf4NQWAO6sJfs9l6/Is=
Subject key identifier: 1C:4A:40:29:63:00:25:C9:2B:76:A1:A7:D0:86:71:33:8C:A3:E0:A4
Certificate issuer: /CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Certificate serial: 037B547E2E6349B21B33053D72F9E4EB3BAC84BF
Authority key identifier: F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134352e302f32342d3234203d3e20323636303439.roa
Signing time: Mon 10 Mar 2025 13:56:52 +0000
ROA not before: Mon 10 Mar 2025 13:51:52 +0000
ROA not after: Mon 09 Mar 2026 13:56:52 +0000
asID: 266049
IP address blocks: 45.4.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:7b:54:7e:2e:63:49:b2:1b:33:05:3d:72:f9:e4:eb:3b:ac:84:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Validity
Not Before: Mar 10 13:51:52 2025 GMT
Not After : Mar 9 13:56:52 2026 GMT
Subject: CN=1C4A4029630025C92B76A1A7D08671338CA3E0A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c9:67:c2:bc:84:95:88:c9:3d:0d:f9:3e:0b:
72:f9:b0:52:40:9e:35:ab:6d:a8:b6:9a:73:e0:b3:
ce:b2:b9:34:7d:cf:41:c0:84:ec:59:5d:4c:56:fe:
e9:cc:60:31:ba:fb:30:03:15:3d:a4:e9:d4:e1:e4:
14:f6:53:9d:2c:30:48:29:6b:93:a8:97:9e:d4:5c:
c5:6f:e7:c8:8b:2d:ed:29:04:76:f1:7c:3e:65:05:
ed:83:c9:9f:6d:bb:8d:eb:9d:02:d7:dd:07:bb:1b:
a1:4a:7f:bb:de:bf:27:11:2b:79:75:4f:a8:6d:34:
e3:5d:07:f0:d5:7a:9e:2a:50:2c:b8:fe:7d:37:a2:
00:2d:4e:c9:7d:03:02:32:23:88:9a:3e:46:0e:b2:
85:6d:3c:01:3b:38:75:d3:52:71:9d:79:ef:72:7f:
bc:32:74:90:d1:ca:d7:02:84:32:e3:da:5c:c3:7c:
45:d1:9d:e5:82:5b:11:8b:69:94:16:14:6c:25:1e:
43:db:cc:b7:2e:a8:b4:50:54:f5:fb:b0:21:c4:58:
ae:a9:82:c3:81:ed:a7:ea:6f:57:5e:f0:51:a0:43:
d6:d4:d1:ea:22:00:2d:71:99:69:54:ec:83:e2:01:
25:82:3f:f3:4d:49:25:ca:00:38:ec:df:f0:de:16:
94:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4A:40:29:63:00:25:C9:2B:76:A1:A7:D0:86:71:33:8C:A3:E0:A4
X509v3 Authority Key Identifier:
keyid:F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/34352e342e3134352e302f32342d3234203d3e20323636303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.145.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e2:d7:d3:73:49:b4:ab:84:38:15:f6:c8:b4:7f:09:0c:e7:
c2:aa:9c:be:70:ff:d0:9c:ab:68:88:6c:b0:3f:0d:ab:f6:07:
e4:74:24:e2:f9:d8:e7:74:78:5c:b4:0e:50:55:28:a1:80:fb:
b8:37:0c:80:c1:00:18:c5:69:cc:55:00:dc:92:9f:3a:b1:a9:
e7:f4:02:38:07:52:c6:3b:3c:67:41:f8:d6:42:94:aa:87:86:
55:64:3d:04:61:07:e7:ef:bc:8b:e5:a1:f5:b7:5f:aa:fe:74:
6c:23:2d:8d:aa:4f:76:67:f0:40:23:41:12:c5:b0:db:97:cf:
08:c2:3b:f9:56:2e:b2:a6:93:85:0a:59:7a:13:bb:2d:c1:03:
05:dd:e5:13:ce:d5:58:7e:08:b6:76:8f:06:22:f5:7b:b9:60:
7d:72:da:9f:10:2a:ec:8d:16:3a:85:8d:e2:d4:86:f8:74:1c:
9b:7f:c6:a4:fc:5e:74:a8:d5:f1:3e:9c:9b:7a:40:66:ae:a8:
08:26:2e:a6:97:93:25:92:5d:c4:a5:3c:1b:bc:05:98:1b:d7:
26:29:59:e4:8c:95:24:81:3e:e7:42:96:8d:04:b3:18:d4:2a:
4d:69:8c:97:ae:71:90:33:3e:82:66:75:12:00:ef:9c:ac:8e:
5b:4a:55:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:40 2025 by rpki-client