Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
File: 34352e3233322e34392e302f32342d3234203d3e20323637323536.roa (raw, json)
Hash identifier: nBfmXuw+UdeUvgNK8IrObYPIyzn2DlFBwQhXfmkY/m0=
Subject key identifier: E6:8D:DA:4B:80:35:1D:F9:BD:16:4D:7B:EE:1C:94:90:DE:19:03:CF
Certificate issuer: /CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Certificate serial: 438F00A46059A77C48620F6597E6A424ECE0CAA5
Authority key identifier: B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
Signing time: Thu 06 Mar 2025 18:59:20 +0000
ROA not before: Thu 06 Mar 2025 18:54:20 +0000
ROA not after: Thu 05 Mar 2026 18:59:20 +0000
asID: 267256
IP address blocks: 45.232.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:8f:00:a4:60:59:a7:7c:48:62:0f:65:97:e6:a4:24:ec:e0:ca:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4F54174CAB335222D5C3A179199900DBAC503F6
Validity
Not Before: Mar 6 18:54:20 2025 GMT
Not After : Mar 5 18:59:20 2026 GMT
Subject: CN=E68DDA4B80351DF9BD164D7BEE1C9490DE1903CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:14:45:1d:3d:d3:0e:14:4b:a2:a7:3e:03:
61:45:cf:29:cb:b0:11:df:34:0b:c4:95:cd:86:13:
19:4a:3a:ca:21:52:cf:6e:95:47:1f:69:89:1b:5b:
74:aa:db:46:0a:16:88:ca:d1:96:c7:ba:35:aa:1d:
06:d0:01:c6:0c:41:84:d3:75:23:fb:a6:16:45:ee:
81:64:25:1c:45:c9:5e:71:e2:61:be:81:d5:ed:f3:
fc:6e:1e:5f:d3:98:c7:05:2e:67:58:56:72:af:96:
55:21:d6:80:32:b1:66:9e:2e:e1:90:67:fd:6d:11:
a2:09:66:c5:e5:27:c0:27:c1:11:1e:16:39:c0:9f:
cb:51:bc:49:46:b6:76:f8:93:7e:32:f6:ca:4d:5a:
66:35:b1:69:b1:4d:be:37:c9:83:92:30:5b:ef:3b:
9e:18:92:e3:45:56:c5:d4:ec:a9:e4:d0:a5:ac:47:
65:e2:6a:39:93:16:70:1e:18:da:47:3e:36:55:17:
89:7c:78:97:32:cd:ec:66:12:4f:bd:62:86:9b:a4:
1d:b4:5f:bd:fc:ba:17:b8:75:bf:d5:41:b4:fc:89:
59:a5:e1:ff:a4:9f:41:87:0e:b9:b4:fe:76:73:81:
4a:07:85:2d:f6:3c:bf:8d:fc:24:ef:b9:8a:91:17:
99:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8D:DA:4B:80:35:1D:F9:BD:16:4D:7B:EE:1C:94:90:DE:19:03:CF
X509v3 Authority Key Identifier:
keyid:B4:F5:41:74:CA:B3:35:22:2D:5C:3A:17:91:99:90:0D:BA:C5:03:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/B4F54174CAB335222D5C3A179199900DBAC503F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4F54174CAB335222D5C3A179199900DBAC503F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/1/34352e3233322e34392e302f32342d3234203d3e20323637323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.49.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:f8:08:da:89:82:eb:cb:1d:0a:f0:09:dd:c9:e2:3a:22:83:
09:15:62:1e:14:bd:64:c5:42:dc:70:87:b1:37:31:92:6d:e4:
dc:5c:45:36:36:94:fa:49:6b:88:48:7a:f6:bf:80:e7:07:3d:
85:dd:37:f3:d0:18:9a:3e:8b:bb:a1:7a:20:bc:f9:c3:27:03:
ae:e6:69:1c:95:3a:88:b3:87:1a:46:7b:5c:05:b8:9e:a4:ff:
98:99:55:f3:9a:cd:26:5b:af:04:63:6f:b9:ad:5d:24:a6:2b:
e5:da:23:9f:7d:49:e2:23:1e:fb:ea:7e:cd:50:01:4c:4f:78:
68:ba:c8:ea:1a:d7:ea:f4:15:cc:93:c9:26:25:0e:8b:84:41:
bc:be:45:4a:84:d9:2b:b8:96:97:5c:ac:5a:6d:74:94:0d:8c:
67:9d:3e:15:04:b4:d7:4a:37:e9:bc:26:52:35:5a:2f:a9:5a:
1b:b3:81:69:de:42:db:ef:62:90:b4:37:bb:ef:ac:29:89:b7:
2c:a1:84:9a:1c:35:0c:36:63:54:85:84:37:87:31:09:59:63:
4a:11:7e:5d:30:9a:61:f1:6b:d0:3a:67:40:f8:3d:68:8b:87:
83:5e:5d:9f:4f:b3:c2:bd:3f:0e:0f:fe:27:57:bb:f2:ef:a4:
4b:64:97:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:42:30 2025 by rpki-client