Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
File: 34352e3136352e39322e302f32322d3234203d3e20323638363831.roa (raw, json)
Hash identifier: xkndpxSWLgIvlVDbgR0GBVWnaeOnom0T/C1prhscmG8=
Subject key identifier: 8F:AF:B3:14:70:16:6F:18:F7:04:A2:5C:DC:43:16:59:D0:BE:B8:54
Certificate issuer: /CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49
Certificate serial: 56F7886363678A0071F68F57B6E1CE577D60219F
Authority key identifier: C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
Signing time: Thu 06 Mar 2025 20:34:23 +0000
ROA not before: Thu 06 Mar 2025 20:29:23 +0000
ROA not after: Thu 05 Mar 2026 20:34:23 +0000
asID: 268681
IP address blocks: 45.165.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:f7:88:63:63:67:8a:00:71:f6:8f:57:b6:e1:ce:57:7d:60:21:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C415922F5BDCB2CDCF5C2142D49F80F8789A0F49
Validity
Not Before: Mar 6 20:29:23 2025 GMT
Not After : Mar 5 20:34:23 2026 GMT
Subject: CN=8FAFB31470166F18F704A25CDC431659D0BEB854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:35:d5:51:d6:c0:90:48:11:33:f6:f5:2e:74:
8a:ae:2e:0c:e3:72:5a:40:be:35:0c:f7:3b:96:93:
1f:90:30:e5:39:50:05:68:7c:0b:5b:24:e2:16:2c:
c5:c3:e2:e1:b1:2c:21:ed:f3:02:fc:f8:d7:6a:9b:
42:bf:92:cd:01:8c:25:f4:35:ff:9e:33:b1:e5:32:
cb:b4:10:09:57:9c:c2:48:4c:97:f3:1b:b2:a6:6e:
9f:a4:18:af:9b:9e:68:c2:da:7e:02:77:9c:e8:c5:
76:98:3d:ff:57:e4:bc:91:0a:99:16:5f:0a:0f:48:
df:df:d5:60:63:2f:1d:29:6a:f7:49:65:0a:30:45:
27:57:2d:8d:25:84:90:d9:d1:da:d9:df:fc:bb:77:
2a:1a:b9:4c:c1:57:78:46:47:41:24:2b:14:a5:af:
ae:de:c3:f1:ed:92:bc:f6:05:4f:5a:dd:40:f4:41:
1e:b0:1f:45:e3:b0:66:ef:65:eb:c4:20:25:4d:13:
09:cb:14:18:c8:54:c8:8c:7b:71:d9:ab:27:3c:4f:
53:5f:61:fb:ec:82:a2:91:00:6f:2e:29:da:42:40:
04:bd:58:ad:49:0c:2e:e0:33:6c:5e:01:f0:93:6c:
93:24:96:e6:39:d1:55:7f:c3:af:bd:e6:c3:52:76:
32:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AF:B3:14:70:16:6F:18:F7:04:A2:5C:DC:43:16:59:D0:BE:B8:54
X509v3 Authority Key Identifier:
keyid:C4:15:92:2F:5B:DC:B2:CD:CF:5C:21:42:D4:9F:80:F8:78:9A:0F:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C415922F5BDCB2CDCF5C2142D49F80F8789A0F49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3CMsYQEM4QQuTcAKkASreTGuTxLzbxfkcZoaRgvFATHc/2/34352e3136352e39322e302f32322d3234203d3e20323638363831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.92.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:04:df:3f:d0:54:f9:65:0b:4c:61:20:0e:5a:1a:92:8d:a9:
95:56:a5:12:d1:3b:31:fa:56:93:05:2a:6d:57:60:06:57:a5:
d2:2e:1a:d0:c6:3c:39:df:9f:9b:fd:95:b4:14:f3:b8:90:46:
87:d6:63:e0:62:58:c5:f1:cb:35:1e:6d:26:57:2b:b2:94:39:
ee:f2:63:d0:73:6c:38:b0:22:31:4f:c8:91:8c:c6:86:1d:3e:
21:93:3c:af:a2:71:b2:0d:9b:3f:f7:b7:2b:b7:55:50:7d:81:
e7:22:2b:76:df:d6:81:b5:e5:51:a0:b9:79:2e:fc:3b:40:cc:
ab:c2:19:2a:82:ef:76:42:7d:17:6b:6f:db:6d:ff:45:d2:63:
df:80:d5:e1:05:b3:e6:80:58:19:64:18:05:83:08:f2:c6:0e:
65:0e:ee:e5:5c:c5:ca:30:a5:0f:3a:bf:6f:9c:2f:dc:e3:9f:
78:0e:62:51:20:4b:9c:3f:25:ed:5f:2b:c1:61:87:ff:7f:4a:
9a:09:be:5e:17:ac:ec:9d:8c:d8:81:fe:af:d8:3b:a7:c0:4d:
7b:7d:0b:94:17:b3:b7:ea:cf:81:9f:0a:b7:01:1e:95:48:0d:
df:5a:98:a6:1d:7c:1b:e2:eb:1f:bc:6e:96:99:fb:12:2d:7f:
b3:2a:d3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:39 2025 by rpki-client