Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3232203d3e20323639363637.roa
File: 34352e3139312e36302e302f32322d3232203d3e20323639363637.roa (raw, json)
Hash identifier: 84AcBtiLMxoSftBxihRvXVs50f6XDT25GAkPiMUwwJ8=
Subject key identifier: A9:C3:15:0D:C2:71:24:B0:A1:38:F2:46:C6:06:FA:A9:8E:66:70:F6
Certificate issuer: /CN=FB5EF042BD78A22553B5ED9830EF05043520648D
Certificate serial: 07744088EFE7ED41442245D8039BCA280A4D0F84
Authority key identifier: FB:5E:F0:42:BD:78:A2:25:53:B5:ED:98:30:EF:05:04:35:20:64:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5EF042BD78A22553B5ED9830EF05043520648D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3232203d3e20323639363637.roa
Signing time: Thu 13 Mar 2025 19:12:02 +0000
ROA not before: Thu 13 Mar 2025 19:07:02 +0000
ROA not after: Thu 12 Mar 2026 19:12:02 +0000
asID: 269667
IP address blocks: 45.191.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:74:40:88:ef:e7:ed:41:44:22:45:d8:03:9b:ca:28:0a:4d:0f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB5EF042BD78A22553B5ED9830EF05043520648D
Validity
Not Before: Mar 13 19:07:02 2025 GMT
Not After : Mar 12 19:12:02 2026 GMT
Subject: CN=A9C3150DC27124B0A138F246C606FAA98E6670F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9c:07:85:89:a5:bb:71:a9:db:35:4b:43:3a:
fa:53:22:f5:20:1c:2c:e8:0a:12:cd:9b:91:b9:04:
f6:c9:a6:b5:da:79:c2:d8:67:49:da:56:90:ec:b7:
19:72:84:8d:0d:da:16:47:a9:38:17:64:1a:20:9f:
07:0a:d7:42:c2:76:b3:4f:f6:c1:86:89:62:f3:09:
56:14:10:1b:79:f0:9d:32:81:af:8a:54:45:71:dd:
84:55:6a:52:b1:99:4b:1c:44:7b:a0:6c:4f:8b:0c:
c5:a4:8c:7f:0b:dd:ac:bd:a8:89:aa:e1:5b:bc:dc:
de:04:99:cc:ed:7a:76:e6:f6:0d:98:ba:56:f3:4c:
07:41:90:f8:81:18:81:9c:69:01:cd:7e:51:3b:c2:
01:f6:40:88:7a:8b:4c:26:2d:d1:b7:6d:d4:be:53:
c8:e6:9e:44:51:bf:b7:a9:dc:92:9f:87:cb:db:96:
8b:55:4d:0a:60:48:36:19:af:e2:1d:9e:ab:51:a0:
bf:19:8b:f6:f0:bc:d0:d2:10:4f:8a:8d:45:7e:1f:
cf:85:a9:06:24:c4:ed:04:d6:d5:cb:8f:ab:10:cd:
14:9e:a4:7c:4d:10:44:a1:19:9f:b5:c0:12:5f:9d:
7b:b7:2b:d2:0d:cc:6b:9a:ef:27:0c:bc:a0:eb:99:
4c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C3:15:0D:C2:71:24:B0:A1:38:F2:46:C6:06:FA:A9:8E:66:70:F6
X509v3 Authority Key Identifier:
keyid:FB:5E:F0:42:BD:78:A2:25:53:B5:ED:98:30:EF:05:04:35:20:64:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/FB5EF042BD78A22553B5ED9830EF05043520648D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB5EF042BD78A22553B5ED9830EF05043520648D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36302e302f32322d3232203d3e20323639363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.60.0/22
Signature Algorithm: sha256WithRSAEncryption
21:ff:66:20:cc:20:6b:31:5b:aa:70:5f:d7:2c:9d:0b:b6:dd:
8d:2c:f9:a3:95:72:33:e9:9d:37:14:e5:83:18:91:f0:81:94:
31:cb:a1:59:ce:7e:b8:4e:26:52:36:5e:c4:97:3d:a0:d6:e1:
0d:ef:fd:f0:6c:33:43:65:34:03:5c:cc:b1:42:6e:26:ed:bc:
ad:ac:6e:f7:72:59:77:c7:59:24:1e:7f:b6:23:4f:40:28:6f:
29:d5:ff:e3:d0:1f:3e:39:00:9d:d6:a9:e4:7a:69:9f:5d:2d:
6b:3b:58:54:ec:65:fe:87:4d:eb:76:c9:0b:ec:57:ce:46:1a:
0c:8e:02:81:4d:4c:f0:4e:8b:89:5f:7c:a4:34:d2:e0:e1:b1:
ce:29:59:1e:08:5b:e7:d9:eb:1e:64:6b:90:cc:98:48:24:cd:
81:e1:94:40:d0:be:d4:8d:c4:2d:7f:14:c4:92:82:36:0f:17:
6d:3b:63:0f:36:eb:00:c8:71:a6:ca:77:dd:66:aa:86:bd:be:
f0:19:3e:cd:eb:bf:1f:34:e7:f9:f5:8d:5b:22:1e:29:08:a3:
22:15:be:0e:3c:c5:cd:66:3a:75:40:34:d7:e5:be:ac:e3:d6:
6a:e9:fb:8d:15:28:ae:d5:57:94:69:de:8c:be:d8:85:3c:94:
8a:4c:27:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:17:19 2025 by rpki-client