Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa
File: 34352e3233322e3133352e302f32342d3234203d3e203238323130.roa (raw, json)
Hash identifier: wc22UwpIDZF19oV2yMxRb5DPHZ3FetEkd5YdTdPjyoo=
Subject key identifier: FC:95:31:40:98:4E:A2:18:90:8C:14:1C:2B:99:33:82:C7:40:A7:20
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 527E889104100A67F3D3762E6279B9DAD6A8078B
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:10 +0000
ROA not before: Thu 06 Mar 2025 04:37:10 +0000
ROA not after: Thu 05 Mar 2026 04:42:10 +0000
asID: 28210
IP address blocks: 45.232.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7e:88:91:04:10:0a:67:f3:d3:76:2e:62:79:b9:da:d6:a8:07:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:10 2025 GMT
Not After : Mar 5 04:42:10 2026 GMT
Subject: CN=FC953140984EA218908C141C2B993382C740A720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1b:e8:10:62:9e:8c:58:28:24:4f:d4:e0:27:
c2:d6:8b:6a:81:03:53:f3:d4:57:cb:86:e2:c9:c3:
f0:b2:fd:83:3c:b7:da:02:25:40:7c:bf:49:4d:c2:
4a:a9:ec:18:05:43:01:c7:fa:2c:26:8d:50:57:0d:
a8:4f:43:33:e7:f7:6e:85:04:d1:08:b6:8b:ef:d8:
38:2a:d4:b2:41:55:54:4e:b4:72:75:42:ec:c7:49:
d2:38:9d:2c:23:f3:b7:11:08:6a:32:74:41:1b:39:
f3:17:3e:a5:53:f6:ea:53:3f:a6:ea:f9:cb:ea:5f:
24:80:68:bb:c0:6c:59:ab:35:e5:f4:e0:ab:b0:6d:
d0:48:99:82:52:fc:ff:be:f6:5e:5f:b8:a2:b7:4c:
31:f0:72:bc:55:cd:09:78:97:01:ff:c5:3d:03:27:
5e:77:28:eb:46:0e:65:c9:7a:80:0d:e5:18:b8:20:
3f:cf:b6:8c:23:47:67:d4:47:58:20:70:15:ce:21:
6c:1c:29:e8:e3:73:02:b3:9b:4f:aa:29:0e:2a:31:
96:05:91:86:73:1b:10:b8:4d:ad:2f:8e:9e:cc:27:
b1:89:81:22:ef:da:99:f7:60:2d:c5:10:be:6a:e4:
94:db:3f:3a:bf:63:45:cc:53:1c:18:2d:56:21:b7:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:95:31:40:98:4E:A2:18:90:8C:14:1C:2B:99:33:82:C7:40:A7:20
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/34352e3233322e3133352e302f32342d3234203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.135.0/24
Signature Algorithm: sha256WithRSAEncryption
04:5a:e3:92:b6:bf:07:50:db:d5:f9:c3:4f:1f:11:a4:fb:96:
b5:43:87:67:11:89:97:7a:93:e7:90:f6:4b:10:3f:fe:0b:9b:
ed:c8:81:2f:d1:3f:c8:b0:25:69:f4:cd:cc:ae:76:c0:e0:a6:
39:27:f3:02:c2:5e:4e:53:fc:c5:ae:d8:43:48:fc:78:76:fe:
44:70:04:b1:fa:00:bb:7a:64:7c:a4:4d:a9:02:73:33:8e:f6:
0c:7a:fc:29:5f:a6:97:eb:9d:d7:66:c6:7e:6c:91:c3:d8:ef:
bd:9a:1d:15:97:d9:13:fa:bb:93:61:eb:e6:df:48:db:d7:a6:
a1:04:b7:ca:7a:23:59:5d:a1:67:29:2f:3d:6f:4a:65:a0:33:
84:69:5e:b0:1a:97:7d:c9:c1:97:1b:0b:50:3d:66:23:01:30:
d2:d4:bd:1e:f4:81:7b:ed:b7:ad:a8:a1:22:af:ce:38:e3:a7:
03:7f:10:82:e0:59:0c:03:30:07:ed:90:94:44:30:a3:d2:d2:
99:04:2c:fa:9f:58:bf:ab:5d:1b:0f:e2:56:57:a1:72:39:65:
44:91:46:15:23:b3:56:97:82:20:51:0b:d5:0b:f0:e1:51:91:
e8:8f:a6:5d:39:0d:22:59:00:eb:9f:48:5b:bd:a1:c4:26:f9:
d0:c2:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:47:24 2025 by rpki-client