Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36372e302f32342d3234203d3e20323639363730.roa
File: 34352e3139312e36372e302f32342d3234203d3e20323639363730.roa (raw, json)
Hash identifier: XW5LR66uKbkanx3DI1HAmd5C7rlphLrG2CaxVnzCojU=
Subject key identifier: 76:6E:DD:8A:C3:21:08:0D:71:4A:54:21:10:E8:2F:50:41:05:48:95
Certificate issuer: /CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Certificate serial: 2A1F2501123ECC7031D0A4BE1B09A2DA7C5ED591
Authority key identifier: FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36372e302f32342d3234203d3e20323639363730.roa
Signing time: Wed 05 Mar 2025 20:00:23 +0000
ROA not before: Wed 05 Mar 2025 19:55:23 +0000
ROA not after: Wed 04 Mar 2026 20:00:23 +0000
asID: 269670
IP address blocks: 45.191.67.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1f:25:01:12:3e:cc:70:31:d0:a4:be:1b:09:a2:da:7c:5e:d5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04
Validity
Not Before: Mar 5 19:55:23 2025 GMT
Not After : Mar 4 20:00:23 2026 GMT
Subject: CN=766EDD8AC321080D714A542110E82F5041054895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:43:52:a1:74:cd:5b:6c:3c:7a:dd:70:c0:
94:f4:ae:44:b1:c1:68:13:d2:27:52:f8:3e:f5:0f:
3d:f4:b1:53:20:0b:5e:38:83:8e:9e:de:f0:83:15:
de:ef:1c:22:6b:95:bb:73:dd:ec:8f:fe:2e:97:2d:
4a:5e:2c:46:99:a5:4b:01:63:41:41:16:b5:42:65:
60:0c:c9:c9:fd:00:71:51:c5:a0:f0:0b:9a:87:f8:
06:37:53:20:88:36:ab:a9:d7:4a:6b:6d:1f:5d:f0:
77:89:2b:32:9d:e9:37:f1:1c:7c:1d:97:49:5d:91:
54:d2:b0:44:79:c3:f3:a1:e5:a5:da:db:65:65:62:
b1:85:f2:b9:2d:0e:f6:df:d9:25:78:02:71:b2:e1:
24:68:a1:d0:f8:0c:96:38:fd:02:e1:13:44:51:02:
66:60:38:e2:aa:d7:eb:5f:8f:3e:bd:6e:b6:74:6e:
9e:80:61:c1:5e:a4:f0:db:17:50:2a:3f:28:74:40:
41:e8:9a:65:e3:cf:7f:14:8b:86:f6:1e:0f:5e:52:
f2:75:1c:10:ae:e8:e3:0e:ce:b7:61:a4:6d:d0:e4:
f2:d3:f9:c9:e8:70:07:29:47:60:ce:21:4c:cf:fe:
3e:9d:79:cd:c7:02:29:5a:db:9b:c6:d6:19:00:53:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:6E:DD:8A:C3:21:08:0D:71:4A:54:21:10:E8:2F:50:41:05:48:95
X509v3 Authority Key Identifier:
keyid:FC:E3:C1:D7:CA:5E:7D:26:08:C1:DA:D0:C5:0C:3C:70:83:DB:2B:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FCE3C1D7CA5E7D2608C1DAD0C50C3C7083DB2B04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6KP9RnDc1TrUZBWiELBsd5reUczmqPxGAF4ANxWcz4zf/1/34352e3139312e36372e302f32342d3234203d3e20323639363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.67.0/24
Signature Algorithm: sha256WithRSAEncryption
37:28:38:85:f6:46:ee:4a:bf:89:76:a5:6c:ef:4d:a8:b0:b5:
1e:c5:a9:ec:aa:55:b9:fd:4e:1e:32:37:35:ee:10:ab:4b:94:
17:56:03:b3:66:e0:a9:73:b4:bb:dc:e2:44:b1:43:05:93:e0:
5e:d4:b8:e8:3b:fb:66:da:12:c3:c9:67:41:16:3c:32:9c:2a:
27:7c:9a:cc:8c:f2:58:b9:5f:c3:da:51:c1:27:6f:f0:55:72:
d5:ea:56:2a:9e:9a:65:80:a0:29:eb:01:54:ef:70:fe:67:c2:
07:d2:71:eb:12:6a:c0:d0:19:9f:43:99:57:b3:78:6c:a5:ab:
47:2f:76:1c:ee:46:82:86:78:44:74:07:a9:c3:f5:d6:c5:ca:
c7:6e:c4:e9:ec:80:53:6a:88:5a:19:50:4f:d3:aa:79:3b:14:
42:24:db:91:c1:21:d6:3b:85:78:e7:5b:18:58:01:d7:70:81:
a9:80:63:bf:bc:37:1f:62:52:c0:02:1c:6a:22:a0:6f:da:6b:
33:57:1e:38:3f:11:6c:22:ef:57:e0:aa:39:9d:8b:02:c8:6f:
99:fe:34:7b:74:65:4e:0f:9a:a3:64:9e:26:1f:40:68:9b:f3:
c3:2f:36:3e:ba:81:bf:d1:8a:f3:84:ca:fe:81:a2:77:55:51:
a6:65:27:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:45:49 2025 by rpki-client