Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa
File: 34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier: IgN7TC0m+ZIkf3cRY4s5b7OKdjr4hpK2rAPBqJgFY8c=
Subject key identifier: FA:49:99:F3:73:F7:0F:C6:D3:37:B7:38:78:B6:4D:5F:78:83:C6:C3
Certificate issuer: /CN=68896B9A803F401F71FCF845C4E94131201E4D39
Certificate serial: 2FD0AE0B1BD8CEA660FD6601C46FFD5B5F597B76
Authority key identifier: 68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa
Signing time: Thu 13 Feb 2025 18:27:50 +0000
ROA not before: Thu 13 Feb 2025 18:22:50 +0000
ROA not after: Thu 12 Feb 2026 18:27:50 +0000
asID: 262899
IP address blocks: 45.165.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d0:ae:0b:1b:d8:ce:a6:60:fd:66:01:c4:6f:fd:5b:5f:59:7b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68896B9A803F401F71FCF845C4E94131201E4D39
Validity
Not Before: Feb 13 18:22:50 2025 GMT
Not After : Feb 12 18:27:50 2026 GMT
Subject: CN=FA4999F373F70FC6D337B73878B64D5F7883C6C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:b7:02:3b:f8:c9:f8:03:df:ad:2f:5f:d5:
17:c7:e5:f2:78:6c:fe:4e:e5:47:c1:83:69:61:05:
9a:8f:d7:a0:ea:8c:d8:39:84:12:51:f6:9c:c8:01:
68:d2:4f:9b:b0:07:d3:3e:0d:c8:7c:67:f3:cd:c4:
ba:7d:56:8f:66:58:17:a4:08:c7:b9:35:ca:45:9f:
7b:85:db:e4:7e:75:a4:f8:d6:55:16:ec:8c:06:ad:
fb:b2:1b:1b:c7:83:e4:03:ef:70:9c:05:5a:d1:8b:
31:d2:6b:03:9f:26:df:de:3d:ff:e7:52:38:73:e5:
56:7b:03:2a:25:76:32:1c:19:2e:28:5c:b5:b0:02:
09:08:22:3d:2a:39:18:f8:2a:7f:b9:c4:8d:85:ca:
0e:77:d3:4b:e9:78:cb:58:8a:17:00:79:c2:ee:f6:
50:48:aa:08:78:48:b2:a7:a1:29:ff:e7:9b:1c:aa:
1e:5d:a6:c0:45:28:09:a8:b7:33:40:f5:96:44:4c:
bf:fa:3c:22:b4:4e:39:49:ad:63:fc:da:e0:4a:04:
a5:36:52:ee:20:58:64:5b:88:17:fe:c9:c1:fe:ca:
67:ef:7f:7b:64:ba:bc:de:85:dc:84:c8:32:41:6c:
40:70:57:72:2d:3e:e5:d7:37:5b:da:29:c2:61:70:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:49:99:F3:73:F7:0F:C6:D3:37:B7:38:78:B6:4D:5F:78:83:C6:C3
X509v3 Authority Key Identifier:
keyid:68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3133312e302f32342d3234203d3e20323632383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.131.0/24
Signature Algorithm: sha256WithRSAEncryption
10:4b:a0:e9:4f:43:b7:08:05:7c:cc:8e:15:75:f9:38:1a:52:
1c:7a:00:00:0c:13:2a:55:ef:b0:e3:18:20:d6:11:cd:5d:24:
e0:7e:6e:4f:33:24:9a:42:4c:65:6d:33:7e:6e:84:19:b1:12:
9f:4a:73:3e:54:40:61:b5:0f:50:52:6c:d9:50:d2:61:ed:59:
f1:a2:51:3d:2a:88:03:1b:fc:c4:93:f6:b2:85:d7:a7:a8:d5:
27:00:22:6a:7a:cc:de:26:93:aa:8c:00:6c:86:87:57:9d:ef:
85:e3:e4:6d:52:1b:84:1e:d0:87:f7:d0:f4:70:46:a4:be:74:
e2:d0:62:c1:8d:13:c9:7f:20:2c:cb:c8:a1:4c:f7:98:5b:07:
d2:f7:f6:92:2c:0d:aa:0d:06:3c:8f:a4:e0:70:87:b2:86:9a:
38:92:93:0e:c6:69:d4:80:98:ec:4f:3b:da:65:cc:36:e7:ef:
f0:7d:e0:d0:72:ed:44:4e:cd:20:d7:a0:bf:74:97:c9:24:e1:
11:ac:40:ed:8f:55:c2:04:04:20:07:f7:ac:08:10:7b:af:56:
e1:ff:b4:11:a1:b0:df:74:17:4f:da:18:59:64:ed:61:1c:e5:
8e:1f:4a:ea:a5:74:b0:d2:ff:d6:0a:ad:5f:56:70:d7:75:9b:
c9:a8:4f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:32:29 2025 by rpki-client