Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36352e302f32342d3234203d3e20323639363730.roa
File: 34352e3139312e36352e302f32342d3234203d3e20323639363730.roa (raw, json)
Hash identifier: tQ9gjcr2gp4L66Gkr2akbvsHVNSqfTjFSN5MfeOpoag=
Subject key identifier: 3D:DC:F6:1B:48:8F:35:77:5B:82:E4:7C:52:8F:9A:7B:2A:8D:E6:82
Certificate issuer: /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial: 423306CA9E78CC705D9288E3C336762BEC03B2DA
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36352e302f32342d3234203d3e20323639363730.roa
Signing time: Wed 05 Mar 2025 20:00:23 +0000
ROA not before: Wed 05 Mar 2025 19:55:23 +0000
ROA not after: Wed 04 Mar 2026 20:00:23 +0000
asID: 269670
IP address blocks: 45.191.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:33:06:ca:9e:78:cc:70:5d:92:88:e3:c3:36:76:2b:ec:03:b2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Validity
Not Before: Mar 5 19:55:23 2025 GMT
Not After : Mar 4 20:00:23 2026 GMT
Subject: CN=3DDCF61B488F35775B82E47C528F9A7B2A8DE682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:87:e9:62:b4:5b:a8:98:a5:c1:33:f3:87:
e3:24:62:6c:fb:44:f1:e7:be:7d:bf:79:50:08:90:
4b:5b:af:fa:b9:7d:1b:1f:bc:c5:b9:92:c9:b7:e1:
46:c0:b6:35:72:f0:85:54:d1:09:2b:88:71:6b:41:
df:46:e2:3b:34:fe:7a:af:d9:d7:30:0d:50:bd:5f:
8f:c9:c8:82:b7:3a:60:ef:59:46:cd:15:f4:5e:8c:
14:c5:44:96:b7:4c:04:0b:a4:b7:24:71:12:a5:77:
4b:43:64:7c:04:9b:f6:5f:ee:f7:1e:fb:43:58:b9:
f3:cb:d7:66:59:85:f6:fc:57:f3:5d:e2:e3:5b:e3:
00:f3:14:34:ff:7b:90:6b:b0:13:fe:86:f6:b0:08:
1e:f1:8e:38:fd:f5:dc:c8:8e:9e:76:3a:50:81:af:
06:c7:c0:42:79:e0:ca:fb:1f:9b:59:49:3b:c5:83:
0b:25:1f:a6:6d:8f:08:13:72:9a:69:5b:b2:37:21:
d2:04:41:dd:13:52:28:ab:bf:8a:97:20:8a:93:b5:
da:73:0f:6e:25:11:1a:03:54:29:57:4b:86:90:e1:
f4:8f:49:8d:d1:de:2e:f1:e1:50:4a:46:5a:f7:53:
c3:d8:19:7c:cf:54:93:80:14:bf:96:2d:64:be:f6:
44:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:F6:1B:48:8F:35:77:5B:82:E4:7C:52:8F:9A:7B:2A:8D:E6:82
X509v3 Authority Key Identifier:
keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36352e302f32342d3234203d3e20323639363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:92:bb:9f:e7:29:84:22:a2:94:d2:fd:b3:d6:12:e0:28:22:
8d:71:2f:39:d6:71:c2:e7:be:de:7e:c1:60:c2:91:05:ca:31:
d0:3f:68:6b:fb:71:ea:d7:12:ff:bb:26:2d:6c:df:f8:0e:ba:
9a:5a:72:8e:df:80:29:2e:bd:7b:7b:b9:87:a2:5c:cf:a7:7c:
ea:24:c1:29:ae:d6:71:0d:16:79:02:a6:05:19:5d:55:50:bd:
19:ae:b8:d7:e8:07:d9:cc:b0:fa:e3:17:db:6c:fb:89:11:8c:
ff:75:54:96:3c:12:d5:4d:c4:6d:23:6b:a5:af:2b:0e:d6:5d:
80:32:9f:4a:23:ec:b5:08:9b:4d:c4:96:cb:92:07:d4:ba:6e:
09:01:0d:4f:de:2b:81:73:95:90:3a:f5:43:55:05:55:99:f3:
9d:0b:54:0b:5a:a4:4b:a0:bd:e7:b5:f7:26:fb:cc:57:61:46:
fd:5f:d5:5f:a9:3b:a0:fc:90:1d:52:64:7f:53:48:fa:96:ce:
21:dc:43:a7:59:3e:b9:70:70:0b:d9:b4:07:62:0f:c5:e3:48:
a4:2d:0b:63:51:f2:91:95:ec:0a:7a:3d:8b:dc:a0:b9:38:e0:
ff:96:bc:9f:f5:d3:31:30:5a:4a:7b:03:92:30:eb:66:ef:c8:
78:f8:93:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:20:25 2025 by rpki-client