Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/34352e3138392e34392e302f32342d3234203d3e20323639353638.roa
File: 34352e3138392e34392e302f32342d3234203d3e20323639353638.roa (raw, json)
Hash identifier: 9PFWMy6FrO21cvVPPFMOyy+6NkLJhD0YGS+7wSR5sOc=
Subject key identifier: 80:42:CA:12:E2:0E:45:47:81:33:E1:F6:2F:1F:1B:52:E5:45:23:7D
Certificate issuer: /CN=2925537C23E520880A217E95F2C902FE4962439B
Certificate serial: 69E12FF66C15A5369E7ED66B66FAF7EF3D5429C1
Authority key identifier: 29:25:53:7C:23:E5:20:88:0A:21:7E:95:F2:C9:02:FE:49:62:43:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2925537C23E520880A217E95F2C902FE4962439B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/34352e3138392e34392e302f32342d3234203d3e20323639353638.roa
Signing time: Wed 12 Mar 2025 14:32:16 +0000
ROA not before: Wed 12 Mar 2025 14:27:16 +0000
ROA not after: Wed 11 Mar 2026 14:32:16 +0000
asID: 269568
IP address blocks: 45.189.49.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e1:2f:f6:6c:15:a5:36:9e:7e:d6:6b:66:fa:f7:ef:3d:54:29:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2925537C23E520880A217E95F2C902FE4962439B
Validity
Not Before: Mar 12 14:27:16 2025 GMT
Not After : Mar 11 14:32:16 2026 GMT
Subject: CN=8042CA12E20E45478133E1F62F1F1B52E545237D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:48:34:5a:37:ea:b0:f2:ce:c2:79:a1:54:
46:30:4e:79:a6:96:03:be:78:3f:70:7a:b7:21:7a:
a2:16:62:5f:63:81:44:fd:5b:93:bc:b0:3b:56:e7:
5d:f2:d1:f4:99:2f:da:c8:ee:64:fb:64:47:7a:c3:
2f:59:97:c3:08:f1:d1:47:ab:35:cc:46:11:c5:f6:
42:e8:e1:ad:a6:11:4f:8d:59:fb:ac:a3:fe:39:6c:
70:fc:07:75:d4:25:3e:46:e4:8f:18:ee:ee:fc:e1:
df:4d:fb:38:6f:4d:23:61:e5:7b:bf:d9:f4:90:37:
9e:70:30:4d:c0:ad:df:77:06:ca:fa:f7:75:0b:dc:
2f:ca:32:42:e1:c4:ea:2b:12:84:1a:25:7a:f6:c7:
42:5b:c5:60:19:70:04:5b:21:82:d6:74:21:1e:49:
76:e2:cf:1f:70:36:3c:0c:eb:08:87:7a:72:8a:da:
e7:2c:b3:1d:31:74:e8:81:a8:f1:86:42:8b:54:a0:
2e:94:d4:cf:29:f8:e8:55:a0:72:36:15:29:68:9d:
15:a4:2d:a8:f3:7f:ba:4d:37:82:63:79:94:e8:80:
9b:39:39:9b:12:63:8d:d1:e9:4e:ae:07:fd:35:62:
a3:14:23:c3:e4:77:1f:5b:d6:78:7e:48:30:7e:0b:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:42:CA:12:E2:0E:45:47:81:33:E1:F6:2F:1F:1B:52:E5:45:23:7D
X509v3 Authority Key Identifier:
keyid:29:25:53:7C:23:E5:20:88:0A:21:7E:95:F2:C9:02:FE:49:62:43:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/2925537C23E520880A217E95F2C902FE4962439B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2925537C23E520880A217E95F2C902FE4962439B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/81HirKtUurLEehKMk25GnRCBuC2CBztSXfQLoaEtQvFE/0/34352e3138392e34392e302f32342d3234203d3e20323639353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.49.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:f9:2b:64:1c:22:c9:d0:df:36:7c:13:67:6d:e5:98:54:f3:
fd:c6:7a:ab:b0:6a:62:67:46:2f:56:a2:f1:fe:e1:82:5c:57:
16:2c:ee:4b:e4:4e:3c:c9:7f:4e:4d:35:ad:95:f4:68:19:e0:
26:32:5c:e8:fe:1f:34:e2:c9:4c:05:fc:4b:3e:af:22:00:f6:
3e:6a:2c:08:06:aa:40:73:65:0f:21:15:3c:48:32:86:6c:16:
27:b8:9d:11:e6:54:65:0d:fb:86:6d:54:90:08:8d:41:2f:25:
a4:b9:f1:3c:11:8d:de:ed:eb:6f:d0:67:50:19:bd:b7:da:6c:
7e:bd:d5:60:32:1b:64:bc:ad:31:2b:e9:8d:e3:f7:ed:86:68:
2b:1b:d2:a1:f6:1e:89:43:7e:da:a0:c5:31:30:eb:9d:e9:a7:
21:d4:b6:82:de:ef:08:53:ce:9d:bc:5a:cd:2d:91:29:20:f8:
d6:de:c3:58:09:7e:31:3b:8f:00:9c:ac:84:b4:c5:b7:82:78:
32:66:2e:1a:50:14:fc:c2:71:78:7f:ee:94:c4:5c:3e:9d:eb:
73:39:43:f4:32:df:eb:c6:81:9b:7d:5e:4c:7d:12:4b:15:04:
f4:5e:21:dd:8a:e7:04:a3:7e:ee:a2:4b:30:50:e5:1e:e0:d6:
31:94:f6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:48:05 2025 by rpki-client