Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136312e302f32342d3234203d3e20323639373234.roa
File: 34352e3138392e3136312e302f32342d3234203d3e20323639373234.roa (raw, json)
Hash identifier: CJ5HI1Q/zRjUoHTH5GI0CxhuzMct7DcEhC+5iZLWaGw=
Subject key identifier: FD:03:7A:36:FF:36:9A:BE:2F:4A:F5:21:12:AD:80:21:7B:13:2E:DD
Certificate issuer: /CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
Certificate serial: 7FA0E7B37D23850921ABD763C82EB95C9474DB11
Authority key identifier: E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136312e302f32342d3234203d3e20323639373234.roa
Signing time: Thu 30 Jan 2025 18:43:34 +0000
ROA not before: Thu 30 Jan 2025 18:38:34 +0000
ROA not after: Thu 29 Jan 2026 18:43:34 +0000
asID: 269724
IP address blocks: 45.189.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a0:e7:b3:7d:23:85:09:21:ab:d7:63:c8:2e:b9:5c:94:74:db:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4D6F69AC5581A8F3760E52E48C0A165A0463D57
Validity
Not Before: Jan 30 18:38:34 2025 GMT
Not After : Jan 29 18:43:34 2026 GMT
Subject: CN=FD037A36FF369ABE2F4AF52112AD80217B132EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:df:50:6e:42:28:d3:f9:a6:5f:30:b4:8c:
fa:c5:f5:bd:9b:e0:f5:c8:8b:9f:dc:a7:89:bc:13:
29:dc:60:e9:2c:b6:68:60:3f:75:da:b0:a5:26:fb:
da:2a:d9:a7:09:49:84:6e:75:ac:bb:75:61:b7:9a:
b4:dc:0c:9b:95:fe:b8:9e:f2:f8:0d:58:a1:6e:d0:
c9:f0:79:c9:9f:6f:b7:15:81:db:5e:ff:09:b7:dd:
7d:60:b3:ad:12:02:74:e0:08:83:d6:ee:b4:ce:1c:
8f:fe:74:99:be:a1:25:3c:4b:6d:ca:4d:bb:a3:36:
be:88:2d:6f:69:b9:04:ce:09:c9:d5:d0:49:bc:93:
09:3c:19:e1:e7:7e:26:08:ab:b9:a0:8d:ea:71:7a:
97:dc:51:78:67:c2:f1:c7:dc:2d:10:b8:7d:e7:16:
7c:9c:f4:21:a8:2f:c7:01:dc:25:9b:ab:29:10:ec:
28:53:18:69:fb:d1:c7:5a:ba:a9:98:5b:8f:ec:a7:
58:a6:ff:d4:ad:5c:bf:26:79:a6:c9:96:be:c8:5c:
b5:3a:8e:49:3e:73:5a:d5:8e:7f:74:f8:6d:94:52:
96:4b:bb:bd:5b:33:2e:48:bf:51:21:5d:45:f3:da:
24:78:92:c8:9d:0c:28:4d:2e:8c:a3:c2:de:63:2b:
ca:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:03:7A:36:FF:36:9A:BE:2F:4A:F5:21:12:AD:80:21:7B:13:2E:DD
X509v3 Authority Key Identifier:
keyid:E4:D6:F6:9A:C5:58:1A:8F:37:60:E5:2E:48:C0:A1:65:A0:46:3D:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4D6F69AC5581A8F3760E52E48C0A165A0463D57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136312e302f32342d3234203d3e20323639373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.161.0/24
Signature Algorithm: sha256WithRSAEncryption
81:60:f2:5f:59:0d:cd:9f:94:c5:9b:03:60:3b:64:c0:15:44:
74:bb:d9:7e:35:f4:75:a4:9a:6c:c0:5c:7d:7e:a9:62:1f:93:
48:c1:d7:2f:da:81:c5:24:fd:33:12:e7:70:14:11:6c:52:29:
84:ac:d7:53:41:9d:49:88:97:90:bf:2e:0f:98:87:97:fe:56:
11:5d:29:70:f0:de:8b:68:21:d7:0a:80:08:a7:83:6b:69:7e:
d3:7d:72:17:33:f6:a3:01:14:ed:fd:47:80:ce:5f:5d:d2:1a:
d6:e2:d8:02:db:23:06:75:7f:2b:eb:34:57:86:a6:66:81:9e:
04:ef:e4:b8:b1:6b:64:55:ee:e3:82:03:26:4b:0b:3c:06:10:
83:8c:6f:35:fd:d7:13:a0:52:ed:54:f6:34:86:36:d7:cf:6b:
aa:4b:7b:fc:a1:cb:5c:7d:75:f8:3e:5a:2d:ff:74:7e:15:00:
d2:2a:7a:ca:14:5b:28:5e:32:43:2f:7d:41:07:0b:6d:41:b2:
97:b5:37:ae:a1:77:e5:f6:4c:f7:5a:c0:7b:dc:44:c2:e3:0c:
21:f7:8c:dd:de:57:22:5f:f6:ba:e1:fe:b6:2c:2f:5c:5c:6c:
c0:cb:f2:e7:b2:be:dd:3e:1d:17:18:c4:ad:dd:8e:40:8e:db:
df:69:51:92
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUf6Dns30jhQkhq9djyC65XJR02xEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRENkY2OUFDNTU4MUE4RjM3NjBFNTJFNDhDMEExNjVB
MDQ2M0Q1NzAeFw0yNTAxMzAxODM4MzRaFw0yNjAxMjkxODQzMzRaMDMxMTAvBgNV
BAMTKEZEMDM3QTM2RkYzNjlBQkUyRjRBRjUyMTEyQUQ4MDIxN0IxMzJFREQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN4t9QbkIo0/mmXzC0jPrF9b2b
4PXIi5/cp4m8EyncYOkstmhgP3XasKUm+9oq2acJSYRuday7dWG3mrTcDJuV/rie
8vgNWKFu0Mnwecmfb7cVgdte/wm33X1gs60SAnTgCIPW7rTOHI/+dJm+oSU8S23K
TbujNr6ILW9puQTOCcnV0Em8kwk8GeHnfiYIq7mgjepxepfcUXhnwvHH3C0QuH3n
Fnyc9CGoL8cB3CWbqykQ7ChTGGn70cdauqmYW4/sp1im/9StXL8meabJlr7IXLU6
jkk+c1rVjn90+G2UUpZLu71bMy5Iv1EhXUXz2iR4ksidDChNLoyjwt5jK8pdAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU/QN6Nv82mr4vSvUhEq2AIXsTLt0wHwYDVR0j
BBgwFoAU5Nb2msVYGo83YOUuSMChZaBGPVcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vM3oyWENhSngzRjZyZE05YkJ2YWlMZloxeXE3ZXhGcjNES0VveVFtN3Zh
dlMvMC9FNEQ2RjY5QUM1NTgxQThGMzc2MEU1MkU0OEMwQTE2NUEwNDYzRDU3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RDZGNjlBQzU1ODFBOEYz
NzYwRTUyRTQ4QzBBMTY1QTA0NjNENTcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzN6MlhDYUp4M0Y2cmRNOWJCdmFpTGZaMXlxN2V4RnIzREtFb3lRbTd2YXZTLzAv
MzQzNTJlMzEzODM5MmUzMTM2MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvaEwDQYJKoZIhvcNAQELBQADggEBAIFg8l9Z
Dc2flMWbA2A7ZMAVRHS72X419HWkmmzAXH1+qWIfk0jB1y/agcUk/TMS53AUEWxS
KYSs11NBnUmIl5C/Lg+Yh5f+VhFdKXDw3otoIdcKgAing2tpftN9chcz9qMBFO39
R4DOX13SGtbi2ALbIwZ1fyvrNFeGpmaBngTv5Lixa2RV7uOCAyZLCzwGEIOMbzX9
1xOgUu1U9jSGNtfPa6pLe/yhy1x9dfg+Wi3/dH4VANIqesoUWyheMkMvfUEHC21B
spe1N66hd+X2TPdawHvcRMLjDCH3jN3eVyJf9rrh/rYsL1xcbMDL8ueyvt0+HRcY
xK3djkCO299pUZI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:31:20 2025 by rpki-client