Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
File: 34352e3136362e342e302f32322d3332203d3e20323637393432.roa (raw, json)
Hash identifier: KgX8kULska7kFX4Bt67XarkgDgkq3LV4r9LPIF1Qb54=
Subject key identifier: C9:6F:0D:74:D5:E5:86:7F:D5:A0:35:94:12:56:64:21:01:FD:B3:3F
Certificate issuer: /CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Certificate serial: 1ED9BCCA41952FA8E6507507D53CE48B3EA4D406
Authority key identifier: 0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
Signing time: Wed 26 Mar 2025 16:49:02 +0000
ROA not before: Wed 26 Mar 2025 16:44:02 +0000
ROA not after: Wed 25 Mar 2026 16:49:02 +0000
asID: 267942
IP address blocks: 45.166.4.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d9:bc:ca:41:95:2f:a8:e6:50:75:07:d5:3c:e4:8b:3e:a4:d4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD65004E7C4085F2D33DF17345261EDD9B3A811
Validity
Not Before: Mar 26 16:44:02 2025 GMT
Not After : Mar 25 16:49:02 2026 GMT
Subject: CN=C96F0D74D5E5867FD5A035941256642101FDB33F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:f4:20:a4:c3:f0:50:86:7c:2d:a4:9c:c3:
88:fa:cb:3f:8c:ae:7a:cc:69:e4:a3:67:5f:e9:03:
49:65:00:5b:21:81:e9:80:90:2e:40:24:d6:8b:e1:
fb:50:d4:36:f7:ba:b5:dc:33:0b:be:3f:56:32:ce:
0a:fb:b7:c8:6b:a2:69:fb:5f:49:e9:be:a3:b5:20:
c0:25:49:50:ae:1a:16:df:88:18:90:57:6a:f3:b7:
79:e0:2e:95:92:62:de:bf:d5:16:c8:d4:b7:51:50:
02:35:c7:03:85:ed:d2:f6:24:db:61:b8:87:54:97:
6c:a3:82:3b:9e:39:31:a8:a2:f0:e9:de:b0:ff:30:
59:57:4e:26:af:88:fd:51:f1:ae:06:b4:b0:da:97:
f8:a2:f1:91:00:03:bb:0d:ff:27:e7:53:b9:4f:34:
20:51:81:5a:48:1d:60:cb:5f:4a:30:fb:70:75:25:
c1:a8:9d:7b:5a:c0:b7:de:9a:f8:4f:cf:96:dc:7c:
7b:41:aa:87:ef:97:f7:10:c3:c0:4c:56:bc:90:5c:
74:04:77:81:5b:9d:9e:ae:97:02:6f:8d:e6:2e:e0:
0f:1a:11:c1:3f:9a:6d:30:79:87:fe:7f:e0:15:70:
ef:43:ed:d0:6c:09:b1:a4:d0:cc:1a:7d:ac:e5:c8:
7a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6F:0D:74:D5:E5:86:7F:D5:A0:35:94:12:56:64:21:01:FD:B3:3F
X509v3 Authority Key Identifier:
keyid:0F:D6:50:04:E7:C4:08:5F:2D:33:DF:17:34:52:61:ED:D9:B3:A8:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/0FD65004E7C4085F2D33DF17345261EDD9B3A811.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0FD65004E7C4085F2D33DF17345261EDD9B3A811.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/34352e3136362e342e302f32322d3332203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.4.0/22
Signature Algorithm: sha256WithRSAEncryption
79:4f:44:78:09:39:65:f3:a3:ea:5a:df:6e:36:0e:8d:82:f5:
aa:09:7f:cc:c9:43:8d:bd:78:f5:d6:05:23:e2:23:f9:d4:2a:
69:7c:d9:75:c3:56:ff:04:c4:bd:02:e9:bc:32:8e:d9:1e:2f:
ba:53:e6:67:83:04:24:26:3d:4e:f4:3a:a3:39:d5:60:ee:cc:
f8:3a:c2:8d:8b:9c:66:02:23:a0:f2:f5:e4:a4:16:86:71:e9:
1a:d5:d7:2d:2b:0a:68:32:7d:6d:03:c6:48:81:84:a4:e5:43:
00:f3:4c:de:ff:69:c6:66:9f:43:85:09:33:67:b9:d9:18:f1:
cc:bf:90:23:e8:37:55:b4:64:59:a7:13:72:4b:53:69:a8:d1:
4e:1c:a6:67:59:77:ec:7a:61:d9:1e:31:52:0b:4c:80:fc:1e:
bf:38:ae:36:d9:dc:ce:69:83:4a:63:4b:63:20:78:01:cf:cb:
ad:6e:dd:25:f2:80:4f:97:e4:60:71:1e:79:14:ac:83:37:48:
26:6f:ec:7d:e9:0f:72:1d:1a:bf:aa:b2:9f:cb:18:5f:62:69:
85:73:0c:97:ac:32:16:69:9e:e7:49:aa:4d:f2:b9:b7:0a:60:
6e:39:9e:2f:67:e4:69:ec:c4:d3:88:50:18:fb:89:83:d1:9e:
be:c6:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:25:33 2025 by rpki-client