Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31362e302f32332d3233203d3e20323638303837.roa
File: 34352e3136392e31362e302f32332d3233203d3e20323638303837.roa (raw, json)
Hash identifier: Kdx7kMHABrkYAyPGs6zynw5vKVyaxhEYROc2Yl7a5bQ=
Subject key identifier: E4:06:48:D8:3D:59:5D:5B:7A:64:5C:45:42:B1:2A:76:18:D8:6D:5D
Certificate issuer: /CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Certificate serial: 454A3EF368663F96DAE73E773FF8FBB00D9A8AD4
Authority key identifier: 45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31362e302f32332d3233203d3e20323638303837.roa
Signing time: Tue 18 Mar 2025 14:38:43 +0000
ROA not before: Tue 18 Mar 2025 14:33:43 +0000
ROA not after: Tue 17 Mar 2026 14:38:43 +0000
asID: 268087
IP address blocks: 45.169.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4a:3e:f3:68:66:3f:96:da:e7:3e:77:3f:f8:fb:b0:0d:9a:8a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45934B0CAE85DBAD4DE018223B107DAECCEB18C6
Validity
Not Before: Mar 18 14:33:43 2025 GMT
Not After : Mar 17 14:38:43 2026 GMT
Subject: CN=E40648D83D595D5B7A645C4542B12A7618D86D5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7d:a3:51:0e:f1:65:6b:1e:82:9b:60:e3:7a:
dc:33:9d:42:9f:e6:60:d4:5b:7c:2f:f5:ba:f3:30:
e7:0e:4b:fe:ca:8b:53:81:3e:4d:02:99:e5:15:dc:
cf:00:e4:28:ab:23:35:de:f1:b7:12:82:8f:4f:66:
99:4b:9e:b1:01:e6:89:c5:bf:07:54:cd:6f:ee:16:
07:02:ee:67:61:c8:25:b3:b8:9a:31:bb:83:93:5a:
8b:e6:17:70:18:a4:d7:37:53:51:9b:52:a2:04:8f:
af:ae:68:be:b0:15:7f:b0:22:4c:47:21:81:97:50:
55:1d:4f:00:4b:66:63:b8:af:6a:01:2c:9f:fd:3c:
b7:95:fd:c4:5d:77:b8:78:e5:a5:ae:09:c5:f2:3e:
19:ea:8f:60:32:c7:05:db:79:a1:68:fb:d8:4d:df:
94:03:12:2b:58:b5:23:67:50:db:34:5e:71:08:f4:
66:de:00:8a:fc:f9:40:44:20:78:94:99:5b:c5:70:
62:e7:3a:eb:f4:dd:8c:66:ff:77:52:d1:7b:49:8e:
45:d5:4a:3a:72:37:7d:a9:d4:d0:56:60:e1:4b:5f:
ef:05:0a:34:43:6e:6a:0a:74:53:5f:9f:62:ab:ee:
be:aa:48:2f:18:33:fd:90:d0:c1:8d:56:3a:f2:f7:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:06:48:D8:3D:59:5D:5B:7A:64:5C:45:42:B1:2A:76:18:D8:6D:5D
X509v3 Authority Key Identifier:
keyid:45:93:4B:0C:AE:85:DB:AD:4D:E0:18:22:3B:10:7D:AE:CC:EB:18:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45934B0CAE85DBAD4DE018223B107DAECCEB18C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2j5jsxVLqtit4zqbT4jEwMMbDfyKTXQhojTFB9Bn18ME/0/34352e3136392e31362e302f32332d3233203d3e20323638303837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.16.0/23
Signature Algorithm: sha256WithRSAEncryption
02:65:ac:48:36:63:5e:28:08:ce:8c:bb:86:cd:9b:7a:59:68:
24:8c:37:79:99:53:61:89:4f:dd:13:d9:c4:69:28:bf:61:9a:
9b:b5:94:68:fc:65:79:ab:e9:dd:e9:6e:e2:6b:ca:26:76:eb:
b3:77:e4:fb:24:7b:e4:0d:b4:db:b3:18:88:cf:33:54:9e:90:
75:cd:bd:b8:8b:ec:e4:6b:bf:73:c3:a3:24:b7:98:08:43:d2:
67:3a:a1:5c:84:29:99:7e:81:0e:74:57:a9:68:b5:54:86:23:
87:2e:a6:7e:89:e4:7c:06:43:f4:8b:6f:ea:53:04:dc:90:72:
c6:c0:46:ff:2c:67:49:60:f1:89:fb:ef:12:c5:64:74:6e:61:
14:4c:89:6d:ea:84:4f:46:fc:07:56:72:33:d9:fe:0c:d8:8b:
a1:1f:67:b7:d7:67:c2:c2:00:35:c6:c4:5a:01:51:a3:d6:05:
89:8f:db:d4:6e:94:0f:fb:de:2d:9b:b4:7a:8c:01:ea:ff:a7:
da:fc:1a:b6:cf:54:da:f1:3a:61:09:af:64:f9:6d:7e:3a:66:
ff:f2:1a:70:24:6c:d8:6b:72:cd:43:95:8b:ca:5b:91:6b:a9:
bf:07:76:cd:35:3d:7e:03:0b:8d:de:d2:29:b4:84:2a:71:b7:
67:4b:45:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:20:14 2025 by rpki-client