Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa
File: 34352e3139312e36342e302f32342d3234203d3e20323639363730.roa (raw, json)
Hash identifier: et2d5C1LvbVi+3HziuMqUpcdHLCkSTbuGOUrlOTo/FI=
Subject key identifier: 43:47:5B:94:0E:FD:1B:AE:18:64:0C:72:CA:DA:61:DB:8C:8A:17:DF
Certificate issuer: /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial: 63C43A9A754A0E9B26E56F61DD83D41EFD22EF07
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa
Signing time: Wed 05 Mar 2025 20:00:24 +0000
ROA not before: Wed 05 Mar 2025 19:55:24 +0000
ROA not after: Wed 04 Mar 2026 20:00:24 +0000
asID: 269670
IP address blocks: 45.191.64.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:c4:3a:9a:75:4a:0e:9b:26:e5:6f:61:dd:83:d4:1e:fd:22:ef:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Validity
Not Before: Mar 5 19:55:24 2025 GMT
Not After : Mar 4 20:00:24 2026 GMT
Subject: CN=43475B940EFD1BAE18640C72CADA61DB8C8A17DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:7f:79:2e:f2:b9:11:83:fe:4c:53:14:d9:
8c:b1:8a:b8:6f:4a:81:f1:a6:96:3a:ff:93:63:f2:
e4:63:de:f4:cf:01:e6:92:c2:c4:e4:6e:43:2d:dd:
36:f0:f3:9a:26:12:a1:31:b7:90:32:95:70:2a:7c:
1b:a1:87:ed:eb:bb:7b:16:e3:0e:ae:19:db:5c:5d:
53:9a:7d:31:e8:e9:02:97:28:4f:35:b6:9c:65:59:
76:7a:71:e4:3b:70:56:c6:d1:ce:4e:67:84:51:12:
cf:7a:3f:5d:2d:08:35:50:4d:b7:c6:d9:3e:5c:a8:
b9:c9:d8:03:a1:2f:82:f2:df:0b:0d:6e:1a:44:60:
a6:59:97:95:e0:02:76:72:c7:aa:41:84:53:d5:f3:
d5:4d:f7:a9:6d:76:cd:c8:ce:c0:42:82:c7:79:a8:
07:5b:4f:d7:9c:61:b7:fd:8d:15:7d:ce:9c:6a:15:
a2:e8:69:bf:d3:26:b6:e2:c9:99:39:84:4e:8b:f3:
4f:4b:d0:9a:4e:bd:79:66:38:0b:0e:73:00:1c:20:
66:c0:6d:b5:06:74:d9:eb:57:f3:f2:ba:3c:3a:f7:
93:d7:3d:01:c0:b8:0f:0c:c6:74:24:a3:c5:7b:dc:
2b:5c:45:e6:df:90:92:8e:4c:28:3c:f2:bd:b8:70:
b6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:47:5B:94:0E:FD:1B:AE:18:64:0C:72:CA:DA:61:DB:8C:8A:17:DF
X509v3 Authority Key Identifier:
keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36342e302f32342d3234203d3e20323639363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.64.0/24
Signature Algorithm: sha256WithRSAEncryption
71:c5:b1:23:d7:82:29:23:a6:b3:23:96:d4:bf:37:9f:a1:17:
b2:c5:d3:a7:53:e7:e0:cd:33:02:a5:3e:fc:7e:69:29:ae:ee:
a1:5d:cf:5b:2f:c8:93:c2:c1:13:08:1c:94:78:3f:a2:78:3e:
d6:fd:05:1d:71:65:75:49:bf:96:ff:e0:9f:ad:78:dc:20:61:
3f:74:14:f6:0d:83:43:33:27:69:e5:77:00:a9:0e:d2:d5:00:
a7:4f:52:38:52:59:90:f4:05:12:3b:fa:97:bd:ea:35:3d:c5:
2e:9f:5e:c4:4c:55:6a:7c:cf:02:18:4e:ba:07:82:86:fa:43:
e0:26:83:17:53:1e:9e:18:4b:2e:d0:ff:3e:0c:a3:79:63:76:
5f:c4:33:4f:79:d7:43:16:8a:e1:13:a3:4b:5b:f8:99:e8:aa:
1d:86:6a:ff:74:7b:0b:2c:cf:23:a3:29:d0:cb:ba:38:22:b1:
3a:8c:d6:1e:fe:5e:a8:9b:14:e1:d9:78:3c:50:7c:b2:01:39:
31:88:f8:f8:e1:2e:4c:31:e7:7c:f8:bd:8d:fd:58:13:1a:e6:
88:28:43:3b:47:49:f8:03:0a:03:1b:37:d7:4c:c7:23:c6:88:
c2:23:ab:d5:d1:a2:e7:ff:6b:0b:75:07:0c:d6:49:16:f8:23:
b6:23:14:de
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUY8Q6mnVKDpsm5W9h3YPUHv0i7wcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkNFM0MxRDdDQTVFN0QyNjA4QzFEQUQwQzUwQzNDNzA4
M0RCMkIwNDAeFw0yNTAzMDUxOTU1MjRaFw0yNjAzMDQyMDAwMjRaMDMxMTAvBgNV
BAMTKDQzNDc1Qjk0MEVGRDFCQUUxODY0MEM3MkNBREE2MURCOEM4QTE3REYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0X95LvK5EYP+TFMU2Yyxirhv
SoHxppY6/5Nj8uRj3vTPAeaSwsTkbkMt3Tbw85omEqExt5AylXAqfBuhh+3ru3sW
4w6uGdtcXVOafTHo6QKXKE81tpxlWXZ6ceQ7cFbG0c5OZ4RREs96P10tCDVQTbfG
2T5cqLnJ2AOhL4Ly3wsNbhpEYKZZl5XgAnZyx6pBhFPV89VN96ltds3IzsBCgsd5
qAdbT9ecYbf9jRV9zpxqFaLoab/TJrbiyZk5hE6L809L0JpOvXlmOAsOcwAcIGbA
bbUGdNnrV/Pyujw695PXPQHAuA8MxnQko8V73CtcRebfkJKOTCg88r24cLYVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUQ0dblA79G64YZAxyytph24yKF98wHwYDVR0j
BBgwFoAU/OPB18pefSYIwdrQxQw8cIPbKwQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNktQOVJuRGMxVHJVWkJXaUVMQnNkNXJlVWN6bXFQeEdBRjRBTnhXY3o0
emYvMS9GQ0UzQzFEN0NBNUU3RDI2MDhDMURBRDBDNTBDM0M3MDgzREIyQjA0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ZDRTNDMUQ3Q0E1RTdEMjYw
OEMxREFEMEM1MEMzQzcwODNEQjJCMDQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZLUDlSbkRjMVRyVVpCV2lFTEJzZDVyZVVjem1xUHhHQUY0QU54V2N6NHpmLzEv
MzQzNTJlMzEzOTMxMmUzNjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzYzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALb9AMA0GCSqGSIb3DQEBCwUAA4IBAQBxxbEj14Ip
I6azI5bUvzefoReyxdOnU+fgzTMCpT78fmkpru6hXc9bL8iTwsETCByUeD+ieD7W
/QUdcWV1Sb+W/+CfrXjcIGE/dBT2DYNDMydp5XcAqQ7S1QCnT1I4UlmQ9AUSO/qX
veo1PcUun17ETFVqfM8CGE66B4KG+kPgJoMXUx6eGEsu0P8+DKN5Y3ZfxDNPeddD
ForhE6NLW/iZ6Kodhmr/dHsLLM8joynQy7o4IrE6jNYe/l6omxTh2Xg8UHyyATkx
iPj44S5MMed8+L2N/VgTGuaIKEM7R0n4AwoDGzfXTMcjxojCI6vV0aLn/2sLdQcM
1kkW+CO2IxTe
-----END CERTIFICATE-----
Generated at Fri Sep 19 18:08:23 2025 by rpki-client