Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
File: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier: ek0I4o/SvNPICrEIerJ5qOwejj1q0d8lWX8tgr6ZEEc=
Subject key identifier: 14:BD:EA:DB:1C:49:15:09:5A:65:16:EA:0D:10:9A:40:EE:D2:DE:B5
Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial: 62408E41110E1FD0E558B8C0D4022697D55803BD
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 268312
IP address blocks: 45.238.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:40:8e:41:11:0e:1f:d0:e5:58:b8:c0:d4:02:26:97:d5:58:03:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=14BDEADB1C4915095A6516EA0D109A40EED2DEB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a1:1b:07:fa:ac:62:8b:3f:51:39:02:e1:68:
be:05:25:05:88:87:f8:39:97:fa:57:90:f1:ee:8b:
5d:16:9b:31:ba:b3:a1:9f:f1:a2:9f:d8:ea:35:73:
a8:f0:0a:f5:30:9a:5e:2b:b5:e0:94:e6:b2:96:c2:
b6:de:84:f9:b0:ca:7c:c4:65:8a:54:5f:81:b9:f6:
27:13:1b:ca:72:1c:44:b4:36:32:fa:71:32:29:68:
5b:29:5f:9c:f9:44:d9:1f:b8:42:2a:59:44:af:01:
1e:b2:aa:fc:95:af:4f:e1:10:6f:2d:95:fd:fe:05:
1a:95:b1:e1:b1:2c:27:d1:3e:cb:26:9a:82:ea:af:
7e:e3:28:d2:52:1a:9d:c3:ff:c6:08:59:f1:41:14:
e8:cb:71:de:41:21:c7:95:e0:b8:a5:0e:b2:4a:94:
a0:a4:a2:60:4a:df:74:79:53:f1:22:66:0b:0c:af:
c8:a0:ab:83:f3:4e:33:57:24:44:ed:b4:bd:fc:4a:
85:07:54:16:32:4f:93:5f:45:43:66:6a:ff:7e:b5:
e3:dd:6d:94:b5:17:63:d6:3a:59:ea:39:fa:88:28:
03:b2:a2:b0:8f:6a:db:63:99:0f:2b:ce:96:c8:d2:
69:0f:92:6f:18:c8:6d:8f:c8:99:91:59:0e:57:94:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:EA:DB:1C:49:15:09:5A:65:16:EA:0D:10:9A:40:EE:D2:DE:B5
X509v3 Authority Key Identifier:
keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.44.0/23
Signature Algorithm: sha256WithRSAEncryption
91:a8:9c:c8:97:4a:57:3e:fa:ce:0d:76:9a:d1:4e:28:eb:b7:
ec:8e:88:67:d7:c1:c9:8c:8f:77:87:8f:d3:20:a4:83:e8:74:
0c:d6:e4:90:ed:44:97:ef:93:89:94:77:c1:ac:26:53:62:fd:
17:e9:a8:0e:81:5c:79:6e:ee:d3:54:19:bd:6b:de:29:8c:35:
d7:f4:da:cb:d7:bb:41:2c:36:5f:55:ab:80:dd:f1:30:6a:c6:
8c:b6:00:64:5e:75:89:66:55:2a:d4:9f:6d:94:b5:db:a8:8f:
f7:03:a8:a4:10:27:29:09:a0:64:3a:0f:c9:2e:e5:d2:ed:e0:
58:df:8e:ac:51:ec:e6:6e:ce:2f:48:1d:02:a2:0b:96:d5:1e:
30:21:b9:6f:2e:bc:e5:2a:b7:52:66:41:fe:c6:96:49:37:32:
ef:63:9d:66:29:2b:c1:cd:ba:d2:25:f1:2b:d4:83:61:2b:96:
47:e6:68:a6:aa:b9:39:78:45:85:3f:31:7e:48:96:ec:04:eb:
bb:23:7c:04:a0:ca:04:e4:5a:18:19:1d:b6:36:3f:80:b7:5e:
72:2b:f1:7e:dc:83:31:de:c6:da:a3:21:ea:da:74:ce:bf:93:
ea:5b:df:ac:b7:01:89:dd:e4:85:20:56:d8:23:b4:04:fc:28:
03:b5:e9:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUYkCOQREOH9DlWLjA1AIml9VYA70wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk3N0NDRjQ0MjhBNDU2ODM3OUVGRjhEQzdGOUYxQTQ1
QzkyRDQwQzAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMDMxMTAvBgNV
BAMTKDE0QkRFQURCMUM0OTE1MDk1QTY1MTZFQTBEMTA5QTQwRUVEMkRFQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnoRsH+qxiiz9ROQLhaL4FJQWI
h/g5l/pXkPHui10WmzG6s6Gf8aKf2Oo1c6jwCvUwml4rteCU5rKWwrbehPmwynzE
ZYpUX4G59icTG8pyHES0NjL6cTIpaFspX5z5RNkfuEIqWUSvAR6yqvyVr0/hEG8t
lf3+BRqVseGxLCfRPssmmoLqr37jKNJSGp3D/8YIWfFBFOjLcd5BIceV4LilDrJK
lKCkomBK33R5U/EiZgsMr8igq4PzTjNXJETttL38SoUHVBYyT5NfRUNmav9+tePd
bZS1F2PWOlnqOfqIKAOyorCPattjmQ8rzpbI0mkPkm8YyG2PyJmRWQ5XlAfxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFL3q2xxJFQlaZRbqDRCaQO7S3rUwHwYDVR0j
BBgwFoAU+XfM9EKKRWg3nv+Nx/nxpFyS1AwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM1JqMjQ5eGVzbXVMN2lYNkFkQ2VqSmN4ZjY1U21QcXNGMkNBSDhSVlQ1
alAvMS9GOTc3Q0NGNDQyOEE0NTY4Mzc5RUZGOERDN0Y5RjFBNDVDOTJENDBDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Y5NzdDQ0Y0NDI4QTQ1Njgz
NzlFRkY4REM3RjlGMUE0NUM5MkQ0MEMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzNSajI0OXhlc211TDdpWDZBZENlakpjeGY2NVNtUHFzRjJDQUg4UlZUNWpQLzEv
MzQzNTJlMzIzMzM4MmUzNDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzMzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLe4sMA0GCSqGSIb3DQEBCwUAA4IBAQCRqJzIl0pX
PvrODXaa0U4o67fsjohn18HJjI93h4/TIKSD6HQM1uSQ7USX75OJlHfBrCZTYv0X
6agOgVx5bu7TVBm9a94pjDXX9NrL17tBLDZfVauA3fEwasaMtgBkXnWJZlUq1J9t
lLXbqI/3A6ikECcpCaBkOg/JLuXS7eBY346sUezmbs4vSB0CoguW1R4wIblvLrzl
KrdSZkH+xpZJNzLvY51mKSvBzbrSJfEr1INhK5ZH5mimqrk5eEWFPzF+SJbsBOu7
I3wEoMoE5FoYGR22Nj+At15yK/F+3IMx3sbaoyHq2nTOv5PqW9+stwGJ3eSFIFbY
I7QE/CgDtel+
-----END CERTIFICATE-----
Generated at Sun Apr 6 15:03:10 2025 by rpki-client