Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa
File: 34352e3233342e36382e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier: NRlCdJuinphO6qa7QUq41WxcCmFKfS63wSLIP0ZpzpI=
Subject key identifier: 48:52:98:CC:51:2E:D8:4B:26:D7:5A:75:0A:6D:91:ED:DC:3C:7E:C2
Certificate issuer: /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial: C97F0FA193BEF824CB7BEAF7D973ADE50483B3
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa
Signing time: Thu 06 Mar 2025 13:54:57 +0000
ROA not before: Thu 06 Mar 2025 13:49:57 +0000
ROA not after: Thu 05 Mar 2026 13:54:57 +0000
asID: 267363
IP address blocks: 45.234.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
c9:7f:0f:a1:93:be:f8:24:cb:7b:ea:f7:d9:73:ad:e5:04:83:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Validity
Not Before: Mar 6 13:49:57 2025 GMT
Not After : Mar 5 13:54:57 2026 GMT
Subject: CN=485298CC512ED84B26D75A750A6D91EDDC3C7EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1f:cd:59:ec:0f:e4:4a:69:e5:0e:f4:ed:27:
15:63:22:c8:f1:2c:aa:d3:aa:25:ce:52:87:5f:5d:
b5:6c:50:40:40:bd:df:36:63:e1:ab:84:5e:55:dc:
43:82:bf:64:14:df:8e:48:3f:b9:85:3c:6d:57:f0:
89:5f:87:98:e9:b0:26:db:9d:ee:2d:00:15:bf:6b:
67:69:9f:c3:27:81:bf:58:9f:8c:c2:70:75:65:2a:
42:00:15:3a:d4:1d:d8:05:d8:57:1a:45:42:d2:0c:
d4:f8:84:cd:95:66:98:cb:ba:32:c2:8c:11:a1:3f:
b5:42:a4:70:d4:83:54:44:72:8d:17:59:07:6b:8b:
2b:b9:6b:29:29:91:21:c1:35:c0:4d:fa:95:09:07:
81:75:05:aa:b2:6d:61:11:04:4f:bc:5a:55:db:76:
d5:d5:0a:d9:d1:fd:26:29:59:4c:fc:b7:45:ae:17:
58:ad:8d:a6:85:80:d2:31:35:87:82:ce:b8:e0:dc:
bd:1d:78:d2:a7:f7:20:e1:e4:52:4d:6a:2b:f4:08:
0d:71:4f:9c:85:3e:bc:e9:b3:00:7e:c6:de:9c:80:
2c:12:d0:35:34:ba:c7:39:06:31:11:47:7a:09:4d:
4e:d6:82:de:71:51:69:66:11:30:8b:5c:bc:9d:bb:
03:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:52:98:CC:51:2E:D8:4B:26:D7:5A:75:0A:6D:91:ED:DC:3C:7E:C2
X509v3 Authority Key Identifier:
keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:63:9b:f7:1a:97:69:17:4c:97:f1:d2:0e:4d:9f:d7:78:ba:
60:50:11:fb:bb:9d:93:b5:7c:9a:b7:dd:ce:34:a7:6a:8b:7e:
32:61:26:5f:03:ca:7f:b8:60:00:1a:63:6a:4b:11:1c:7f:1f:
d7:8b:a3:e6:aa:d4:47:4e:32:f7:5d:fc:a3:03:a8:f0:f5:60:
0d:d6:d9:a2:0d:7d:4e:e8:96:f8:cd:9b:c5:a5:f3:63:97:33:
d9:8d:06:d7:c7:b8:e9:29:97:26:10:08:d2:04:6b:39:98:f6:
cd:b7:61:93:73:d6:81:96:2c:ec:5f:c3:05:52:76:33:3f:37:
e9:5c:32:74:d4:86:62:87:53:70:6c:0a:5f:a4:37:95:04:f0:
7c:7f:ee:46:e0:f1:46:5a:7b:f4:dd:f4:68:58:9e:aa:25:31:
f8:74:9f:2c:ce:a4:c7:68:f1:f6:d2:f2:0a:72:e5:d2:09:e4:
36:ff:0d:b5:29:f5:d9:13:a0:8e:80:a9:06:c3:1a:b6:72:fa:
43:3d:e2:6d:25:89:97:e6:26:2d:6f:e4:9b:b4:b7:cd:62:a2:
e5:50:8f:0d:0f:f5:83:dc:ea:97:1e:c1:8c:7e:bd:9a:a9:7a:
44:ac:dd:40:6f:95:9d:a0:84:4b:a4:f5:75:44:b2:32:e4:e5:
12:de:34:2a
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAMl/D6GTvvgky3vq99lzreUEg7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDdDNjVCOTE3NUE4QzU1REQxQkU4QjVENkY1MTE1MkQ3
MkM1MDVBQTAeFw0yNTAzMDYxMzQ5NTdaFw0yNjAzMDUxMzU0NTdaMDMxMTAvBgNV
BAMTKDQ4NTI5OENDNTEyRUQ4NEIyNkQ3NUE3NTBBNkQ5MUVEREMzQzdFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4H81Z7A/kSmnlDvTtJxVjIsjx
LKrTqiXOUodfXbVsUEBAvd82Y+GrhF5V3EOCv2QU345IP7mFPG1X8Ilfh5jpsCbb
ne4tABW/a2dpn8Mngb9Yn4zCcHVlKkIAFTrUHdgF2FcaRULSDNT4hM2VZpjLujLC
jBGhP7VCpHDUg1REco0XWQdriyu5aykpkSHBNcBN+pUJB4F1BaqybWERBE+8WlXb
dtXVCtnR/SYpWUz8t0WuF1itjaaFgNIxNYeCzrjg3L0deNKn9yDh5FJNaiv0CA1x
T5yFPrzpswB+xt6cgCwS0DU0usc5BjERR3oJTU7Wgt5xUWlmETCLXLyduwOxAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSFKYzFEu2Esm11p1Cm2R7dw8fsIwHwYDVR0j
BBgwFoAU18ZbkXWoxV3Rvotdb1EVLXLFBaowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vODZFM1lqSHA0bXEzdGhvaGdhOWVaajJGallFQUIxYnR6dVVWbzFDZXBk
YXcvMS9EN0M2NUI5MTc1QThDNTVERDFCRThCNUQ2RjUxMTUyRDcyQzUwNUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0Q3QzY1QjkxNzVBOEM1NURE
MUJFOEI1RDZGNTExNTJENzJDNTA1QUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzg2RTNZakhwNG1xM3Rob2hnYTllWmoyRmpZRUFCMWJ0enVVVm8xQ2VwZGF3LzEv
MzQzNTJlMzIzMzM0MmUzNjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzMzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALepEMA0GCSqGSIb3DQEBCwUAA4IBAQA6Y5v3Gpdp
F0yX8dIOTZ/XeLpgUBH7u52TtXyat93ONKdqi34yYSZfA8p/uGAAGmNqSxEcfx/X
i6PmqtRHTjL3XfyjA6jw9WAN1tmiDX1O6Jb4zZvFpfNjlzPZjQbXx7jpKZcmEAjS
BGs5mPbNt2GTc9aBlizsX8MFUnYzPzfpXDJ01IZih1NwbApfpDeVBPB8f+5G4PFG
Wnv03fRoWJ6qJTH4dJ8szqTHaPH20vIKcuXSCeQ2/w21KfXZE6COgKkGwxq2cvpD
PeJtJYmX5iYtb+SbtLfNYqLlUI8ND/WD3OqXHsGMfr2aqXpErN1Ab5WdoIRLpPV1
RLIy5OUS3jQq
-----END CERTIFICATE-----
Generated at Sat Apr 5 01:00:44 2025 by rpki-client