Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
File: 34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa (raw, json)
Hash identifier: 9qmBtHLgCoBY5PqFuTr61pWhy3ChB4YMvWgyZqvPBMY=
Subject key identifier: 8A:FF:BE:CC:EB:82:D9:88:CE:EE:B1:7A:0D:B6:10:5C:2A:DD:20:67
Certificate issuer: /CN=542D9C840562F883EEEB31312431BBFDA6230C9F
Certificate serial: 4378D1DE930F0858F23B77C4C81CC9C6FF1561AC
Authority key identifier: 54:2D:9C:84:05:62:F8:83:EE:EB:31:31:24:31:BB:FD:A6:23:0C:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542D9C840562F883EEEB31312431BBFDA6230C9F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
Signing time: Thu 06 Mar 2025 11:43:40 +0000
ROA not before: Thu 06 Mar 2025 11:38:40 +0000
ROA not after: Thu 05 Mar 2026 11:43:40 +0000
asID: 268199
IP address blocks: 45.235.196.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:78:d1:de:93:0f:08:58:f2:3b:77:c4:c8:1c:c9:c6:ff:15:61:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542D9C840562F883EEEB31312431BBFDA6230C9F
Validity
Not Before: Mar 6 11:38:40 2025 GMT
Not After : Mar 5 11:43:40 2026 GMT
Subject: CN=8AFFBECCEB82D988CEEEB17A0DB6105C2ADD2067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:39:8f:cf:c4:ac:7d:9f:d4:47:91:22:03:0e:
37:64:ae:72:d9:23:6b:04:1e:95:24:b2:b4:a9:9a:
18:ec:78:9b:7f:f0:19:82:a8:2b:82:48:09:80:d6:
05:03:fb:dd:64:ed:5c:ff:43:0a:2d:64:a4:06:3b:
20:8a:cd:49:70:71:50:c6:2f:c7:69:67:33:bf:e9:
a4:df:06:70:e9:b6:37:3d:74:50:30:42:dc:b6:7d:
18:b4:5c:27:2d:c0:03:8a:74:d8:db:85:14:ef:17:
cc:0a:46:39:e8:35:18:c5:da:03:00:cd:0b:df:f9:
26:33:76:3f:4d:34:ff:2f:23:ca:04:ff:92:04:00:
2d:12:48:11:eb:d3:b0:db:84:de:7a:e5:1e:f4:ef:
83:81:c3:9a:25:24:ae:4d:bb:a6:bb:01:6b:6a:91:
da:a0:5b:23:a4:5b:f9:ed:b7:62:06:53:31:77:b9:
ae:76:78:2b:63:1b:8c:0b:03:6f:e1:6c:a9:77:06:
61:55:c8:19:0b:93:0f:e0:d9:70:d1:a1:b2:1b:61:
92:d4:be:58:f9:09:6e:11:7b:4b:ab:bc:69:71:f6:
2f:11:9d:7b:92:6a:97:ff:30:4f:c4:90:67:88:32:
d6:a2:c4:f9:06:b3:b3:87:d2:b8:37:f1:ad:36:2b:
47:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:BE:CC:EB:82:D9:88:CE:EE:B1:7A:0D:B6:10:5C:2A:DD:20:67
X509v3 Authority Key Identifier:
keyid:54:2D:9C:84:05:62:F8:83:EE:EB:31:31:24:31:BB:FD:A6:23:0C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/542D9C840562F883EEEB31312431BBFDA6230C9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542D9C840562F883EEEB31312431BBFDA6230C9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.196.0/22
Signature Algorithm: sha256WithRSAEncryption
49:28:c3:90:4c:96:29:60:ff:f4:89:83:95:f4:17:e7:15:93:
1d:4b:01:44:8d:21:0d:24:34:23:f0:d4:1b:98:e2:03:7d:df:
16:c5:30:6c:c0:d7:ed:30:65:3c:39:cb:5f:fb:2a:40:a0:e3:
05:a4:fc:5c:c2:12:51:27:f4:84:db:b2:64:a7:ea:df:bc:77:
f8:5f:00:56:a9:5c:94:d3:c9:e0:7f:f2:a1:80:78:9f:1f:c1:
cd:c2:fd:c7:f6:67:7d:7b:64:2a:fe:c3:1b:8b:83:ed:fd:88:
10:06:72:78:5d:25:67:05:d9:3d:03:77:7f:d6:81:96:57:c9:
65:d7:eb:af:8d:04:a5:03:6c:e8:41:ff:f4:4e:32:65:05:02:
f1:56:10:97:e4:cd:a6:6c:aa:4c:55:c7:7f:a0:b0:4a:f0:70:
86:73:4f:12:49:92:7d:4b:f6:43:61:1b:cf:23:99:5e:70:f9:
4c:4c:d7:72:ca:0f:9e:40:1e:00:22:35:5e:08:95:bd:dc:37:
d7:84:4e:38:9b:27:0a:ea:63:58:35:74:cc:99:31:7c:bb:7f:
b5:89:0f:21:bf:75:1c:9d:26:a9:7b:bd:19:b0:e5:22:d9:54:
03:8d:de:6b:8e:f7:1b:d1:62:93:82:f0:05:f9:da:11:87:b8:
07:20:17:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:09:40 2025 by rpki-client