Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa
File: 34352e3136392e32342e302f32332d3233203d3e20323638303931.roa (raw, json)
Hash identifier: jcFuK1q0OWDIRa2Sy8xc62lFtEizp3+SG1b6YjO6ThY=
Subject key identifier: 15:50:32:13:14:01:4A:A2:75:8B:FC:1F:2F:5A:3B:8F:1E:1C:06:1E
Certificate issuer: /CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
Certificate serial: 15BE7F94DD59B84DF2D23B3623DAFC13DC2B8C72
Authority key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa
Signing time: Fri 14 Feb 2025 17:48:13 +0000
ROA not before: Fri 14 Feb 2025 17:43:13 +0000
ROA not after: Fri 13 Feb 2026 17:48:13 +0000
asID: 268091
IP address blocks: 45.169.24.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:be:7f:94:dd:59:b8:4d:f2:d2:3b:36:23:da:fc:13:dc:2b:8c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
Validity
Not Before: Feb 14 17:43:13 2025 GMT
Not After : Feb 13 17:48:13 2026 GMT
Subject: CN=1550321314014AA2758BFC1F2F5A3B8F1E1C061E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:3f:82:1a:fe:17:4c:c8:ab:d8:46:99:8d:
93:1e:a1:87:27:11:9a:26:00:b8:19:bc:c3:db:c8:
e9:1d:98:83:e3:44:84:81:db:8e:ff:c9:74:e2:cc:
d9:fb:f5:55:0d:3e:b2:b6:1a:a8:b3:09:5d:51:09:
f6:c4:84:2b:5a:d6:4a:5b:44:72:99:ca:bd:62:a8:
22:70:f1:69:a3:0a:e9:95:bd:9e:e6:2d:c8:e9:b7:
4b:f9:86:0f:9c:30:4f:aa:3b:68:63:a4:27:e7:38:
4d:82:15:ba:73:1a:17:37:b7:77:df:45:48:39:f9:
8d:a5:6b:32:53:dd:e5:62:6c:4e:f5:9d:a8:45:da:
c4:f1:37:ca:c4:4b:22:06:ca:e6:07:a9:ae:45:f0:
40:c4:13:77:0c:63:6b:4f:6f:4b:93:7a:6c:0b:05:
9d:aa:52:38:fc:fb:68:55:ad:c1:5a:2e:6a:14:80:
7e:6a:2d:9a:dd:90:29:ba:e7:9d:f6:2f:90:87:9e:
6a:a6:40:1a:ff:43:24:80:b9:71:38:62:69:51:77:
0c:02:27:6a:52:ba:4c:ba:11:89:7b:28:3b:73:b8:
09:45:16:5a:99:2a:60:8f:b4:0e:7a:41:31:92:a2:
89:f2:57:f5:7c:6c:7d:d9:fb:4f:5d:25:3e:f6:03:
97:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:32:13:14:01:4A:A2:75:8B:FC:1F:2F:5A:3B:8F:1E:1C:06:1E
X509v3 Authority Key Identifier:
keyid:3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/34352e3136392e32342e302f32332d3233203d3e20323638303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.24.0/23
Signature Algorithm: sha256WithRSAEncryption
31:f4:ff:1e:9a:de:0b:3d:1b:9e:66:74:5e:ee:33:db:38:9b:
ca:df:1f:2f:29:90:77:c9:93:de:a0:09:98:03:4d:3e:8a:2a:
a2:10:83:e5:e6:65:8c:07:cb:be:65:d5:e3:78:7a:98:20:25:
2d:7a:d7:50:e7:5e:7c:26:fe:d9:91:85:10:a5:54:ce:2b:0c:
8d:35:be:cf:b6:58:58:84:34:ea:b1:5a:48:71:de:e6:90:ae:
72:2c:bd:21:6c:87:a3:31:75:33:a9:85:01:e0:75:0c:36:74:
24:8d:f9:ba:b4:3b:92:e2:0b:f7:5a:3c:75:97:cd:56:14:66:
a0:86:31:8c:c1:65:a8:88:cc:0e:53:78:97:5a:1a:81:fe:e8:
55:58:1f:03:c2:0e:6e:53:03:5e:a3:91:18:ea:79:5f:9d:90:
67:22:0a:f9:fd:39:63:73:9e:fa:11:79:f6:8c:81:15:ff:5f:
51:b0:05:7f:b0:dc:5c:d2:7f:e3:70:c6:fe:1a:c0:77:16:db:
a5:87:d5:45:b6:9a:a5:e6:f9:f8:c2:bc:8d:19:ae:45:40:60:
1e:50:07:0c:4d:5a:14:18:78:f8:96:fc:2d:c6:c3:c6:ac:e3:
8d:10:9b:92:c6:76:51:4f:c0:79:f8:48:30:41:e5:31:62:6b:
06:9e:52:5a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFb5/lN1ZuE3y0js2I9r8E9wrjHIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M5RjcyQjlENEU3Q0E3RUVGNEZENkVBRjA3MDMyMEEx
ODYwOUVGRjAeFw0yNTAyMTQxNzQzMTNaFw0yNjAyMTMxNzQ4MTNaMDMxMTAvBgNV
BAMTKDE1NTAzMjEzMTQwMTRBQTI3NThCRkMxRjJGNUEzQjhGMUUxQzA2MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtj+CGv4XTMir2EaZjZMeoYcn
EZomALgZvMPbyOkdmIPjRISB247/yXTizNn79VUNPrK2GqizCV1RCfbEhCta1kpb
RHKZyr1iqCJw8WmjCumVvZ7mLcjpt0v5hg+cME+qO2hjpCfnOE2CFbpzGhc3t3ff
RUg5+Y2lazJT3eVibE71nahF2sTxN8rESyIGyuYHqa5F8EDEE3cMY2tPb0uTemwL
BZ2qUjj8+2hVrcFaLmoUgH5qLZrdkCm65532L5CHnmqmQBr/QySAuXE4YmlRdwwC
J2pSuky6EYl7KDtzuAlFFlqZKmCPtA56QTGSoonyV/V8bH3Z+09dJT72A5c1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUFVAyExQBSqJ1i/wfL1o7jx4cBh4wHwYDVR0j
BBgwFoAUPJ9yudTnyn7vT9bq8HAyChhgnv8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN2E4S1ROYVJMZlMxZ1I5eDQ5cHV1Ymt0OXpuZk1OaHVlS2gyVmVXSzVn
RTgvMC8zQzlGNzJCOUQ0RTdDQTdFRUY0RkQ2RUFGMDcwMzIwQTE4NjA5RUZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNDOUY3MkI5RDRFN0NBN0VF
RjRGRDZFQUYwNzAzMjBBMTg2MDlFRkYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdhOEtUTmFSTGZTMWdSOXg0OXB1dWJrdDl6bmZNTmh1ZUtoMlZlV0s1Z0U4LzAv
MzQzNTJlMzEzNjM5MmUzMjM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjM4
MzAzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLakYMA0GCSqGSIb3DQEBCwUAA4IBAQAx9P8emt4L
PRueZnRe7jPbOJvK3x8vKZB3yZPeoAmYA00+iiqiEIPl5mWMB8u+ZdXjeHqYICUt
etdQ5158Jv7ZkYUQpVTOKwyNNb7PtlhYhDTqsVpIcd7mkK5yLL0hbIejMXUzqYUB
4HUMNnQkjfm6tDuS4gv3Wjx1l81WFGaghjGMwWWoiMwOU3iXWhqB/uhVWB8Dwg5u
UwNeo5EY6nlfnZBnIgr5/Tljc576EXn2jIEV/19RsAV/sNxc0n/jcMb+GsB3Ftul
h9VFtpql5vn4wryNGa5FQGAeUAcMTVoUGHj4lvwtxsPGrOONEJuSxnZRT8B5+Egw
QeUxYmsGnlJa
-----END CERTIFICATE-----
Generated at Mon Apr 7 19:24:14 2025 by rpki-client