Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3232203d3e20323638333132.roa
File: 34352e3233382e34342e302f32322d3232203d3e20323638333132.roa (raw, json)
Hash identifier: Co347ncP7SR7KoR2iCTsOFvpl2Rvlgnd96a0iRNyxzI=
Subject key identifier: 05:03:06:AB:42:82:49:E6:18:FB:B0:75:BD:7F:55:EA:95:AC:AC:77
Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial: 677D6D6F0CE42C8BFB4F9DDE2D5C63086357A249
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3232203d3e20323638333132.roa
Signing time: Wed 05 Mar 2025 19:00:01 +0000
ROA not before: Wed 05 Mar 2025 18:55:01 +0000
ROA not after: Wed 04 Mar 2026 19:00:01 +0000
asID: 268312
IP address blocks: 45.238.44.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7d:6d:6f:0c:e4:2c:8b:fb:4f:9d:de:2d:5c:63:08:63:57:a2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Validity
Not Before: Mar 5 18:55:01 2025 GMT
Not After : Mar 4 19:00:01 2026 GMT
Subject: CN=050306AB428249E618FBB075BD7F55EA95ACAC77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1f:60:d6:07:59:83:64:4b:68:53:88:f1:fe:
cd:a4:e8:73:ba:4d:a4:a2:75:5f:9e:c0:fa:fd:c0:
fd:4c:ab:de:25:7e:b5:ce:a1:67:91:7a:ec:8d:02:
4f:3c:c5:73:c0:a0:2f:f9:f9:a2:9a:af:35:bf:7f:
2d:02:70:f1:bc:73:8c:81:42:ef:0a:66:b1:de:4e:
4f:77:06:31:65:c1:f9:e1:9b:ae:07:26:be:4b:48:
2e:29:47:cc:ec:fd:94:45:8d:0a:10:40:95:58:c5:
a6:28:f0:56:91:7d:6c:ff:d9:bb:49:7e:be:6c:d3:
0b:1e:23:ba:be:f5:b8:2c:e1:f1:e9:e4:26:d9:60:
66:d3:8d:e2:de:8a:1a:c2:bc:9b:25:86:11:10:ba:
fb:d4:a0:eb:24:fd:0e:35:e9:47:15:7b:bc:e2:a3:
02:a0:44:71:bd:bc:05:23:b9:d4:d7:f8:e6:76:dd:
be:b1:24:c6:73:18:ac:2d:de:09:27:42:1c:08:5a:
67:c2:05:96:8f:60:39:ff:af:ae:d3:df:36:00:dd:
25:e6:dc:30:91:9d:84:ae:1b:bb:98:f7:19:0e:93:
34:0c:b1:ce:b6:32:64:93:40:5c:12:2f:f6:84:63:
2f:16:22:c5:18:95:b4:fd:fd:07:6e:b1:99:cc:f1:
7b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:03:06:AB:42:82:49:E6:18:FB:B0:75:BD:7F:55:EA:95:AC:AC:77
X509v3 Authority Key Identifier:
keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32322d3232203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.44.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:13:75:cf:50:8c:7b:f5:e8:0a:33:dd:eb:1e:91:d8:55:07:
0d:36:f2:ba:cd:8f:81:b6:68:00:35:dd:2e:20:8a:9d:d6:2d:
79:04:69:83:4c:1f:4c:ef:a2:70:d6:43:de:88:ea:30:90:af:
d5:3e:5c:7f:b9:15:39:48:80:b5:e2:32:bc:85:9f:7f:f8:a9:
95:4b:18:19:96:cb:c1:7d:12:68:27:75:f5:59:7b:db:b4:65:
9b:06:f3:5c:99:75:8a:67:73:26:33:94:47:86:5c:44:c7:c2:
9c:f5:8e:c5:8a:91:10:8f:43:c9:cc:8d:1d:85:80:60:bb:cb:
23:2b:f5:50:31:76:2a:e4:15:e3:49:b8:25:c6:a5:38:a6:3d:
d1:72:fa:85:8f:83:d1:67:e1:e8:d4:d7:b2:f4:5e:fd:b2:c0:
4a:c3:1a:36:0e:f8:4d:15:fa:c0:4a:64:79:cf:b3:81:db:5d:
a7:2d:69:cb:00:70:88:5d:8d:8a:46:c2:e5:56:70:3e:6b:21:
38:57:4b:3d:2e:e5:25:ec:68:b7:d8:2c:7f:fc:34:a5:46:4b:
0d:ca:23:08:7b:0d:0b:8a:7b:27:75:49:48:0c:44:bb:a3:a6:
df:54:5e:c4:26:1a:b6:66:b6:97:36:ea:bf:ed:54:06:4c:9b:
19:e7:cf:60
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZ31tbwzkLIv7T53eLVxjCGNXokkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3N0NDRjQ0MjhBNDU2ODM3OUVGRjhEQzdGOUYxQTQ1
QzkyRDQwQzAeFw0yNTAzMDUxODU1MDFaFw0yNjAzMDQxOTAwMDFaMDMxMTAvBgNV
BAMTKDA1MDMwNkFCNDI4MjQ5RTYxOEZCQjA3NUJEN0Y1NUVBOTVBQ0FDNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqH2DWB1mDZEtoU4jx/s2k6HO6
TaSidV+ewPr9wP1Mq94lfrXOoWeReuyNAk88xXPAoC/5+aKarzW/fy0CcPG8c4yB
Qu8KZrHeTk93BjFlwfnhm64HJr5LSC4pR8zs/ZRFjQoQQJVYxaYo8FaRfWz/2btJ
fr5s0wseI7q+9bgs4fHp5CbZYGbTjeLeihrCvJslhhEQuvvUoOsk/Q416UcVe7zi
owKgRHG9vAUjudTX+OZ23b6xJMZzGKwt3gknQhwIWmfCBZaPYDn/r67T3zYA3SXm
3DCRnYSuG7uY9xkOkzQMsc62MmSTQFwSL/aEYy8WIsUYlbT9/QdusZnM8Xs3AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUBQMGq0KCSeYY+7B1vX9V6pWsrHcwHwYDVR0j
BBgwFoAU+XfM9EKKRWg3nv+Nx/nxpFyS1AwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1
alAvMS9GOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzdDQ0Y0NDI4QTQ1Njgz
NzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSajI0OXhlc211TDdpWDZBZENlakpjeGY2NVNtUHFzRjJDQUg4UlZUNWpQLzEv
MzQzNTJlMzIzMzM4MmUzNDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNjM4
MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLe4sMA0GCSqGSIb3DQEBCwUAA4IBAQCrE3XPUIx7
9egKM93rHpHYVQcNNvK6zY+BtmgANd0uIIqd1i15BGmDTB9M76Jw1kPeiOowkK/V
Plx/uRU5SIC14jK8hZ9/+KmVSxgZlsvBfRJoJ3X1WXvbtGWbBvNcmXWKZ3MmM5RH
hlxEx8Kc9Y7FipEQj0PJzI0dhYBgu8sjK/VQMXYq5BXjSbglxqU4pj3RcvqFj4PR
Z+Ho1Ney9F79ssBKwxo2DvhNFfrASmR5z7OB212nLWnLAHCIXY2KRsLlVnA+ayE4
V0s9LuUl7Gi32Cx//DSlRksNyiMIew0LinsndUlIDES7o6bfVF7EJhq2ZraXNuq/
7VQGTJsZ589g
-----END CERTIFICATE-----
Generated at Thu Apr 10 14:08:58 2025 by rpki-client