Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/34352e3232372e37362e302f32322d3234203d3e20323637303535.roa
File: 34352e3232372e37362e302f32322d3234203d3e20323637303535.roa (raw, json)
Hash identifier: 0MiiXzeuKn8dSNnzVuikvgNZafQ+jvlK6hWi205kk94=
Subject key identifier: 53:5D:C1:2D:4D:76:B8:9A:3E:57:8D:77:AE:79:61:84:B0:25:4C:04
Certificate issuer: /CN=68E8FFC7C7187C981753E423319759DC084F69E3
Certificate serial: 315EA8ADB3ECD52B725DF06B5076F350FB8AD5D9
Authority key identifier: 68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/34352e3232372e37362e302f32322d3234203d3e20323637303535.roa
Signing time: Thu 06 Mar 2025 04:01:04 +0000
ROA not before: Thu 06 Mar 2025 03:56:04 +0000
ROA not after: Thu 05 Mar 2026 04:01:04 +0000
asID: 267055
IP address blocks: 45.227.76.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:5e:a8:ad:b3:ec:d5:2b:72:5d:f0:6b:50:76:f3:50:fb:8a:d5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E8FFC7C7187C981753E423319759DC084F69E3
Validity
Not Before: Mar 6 03:56:04 2025 GMT
Not After : Mar 5 04:01:04 2026 GMT
Subject: CN=535DC12D4D76B89A3E578D77AE796184B0254C04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:f7:83:13:a4:b0:d6:b9:fd:c6:a3:9d:05:
92:da:e1:5c:49:76:bb:1a:3e:d0:41:c2:44:75:12:
37:b3:26:10:ca:bc:5c:75:9e:cc:b6:9a:d3:c0:28:
a0:3f:cb:cd:92:40:e5:25:4d:21:48:a1:db:c5:2c:
0c:83:96:8a:9d:02:6c:56:dc:22:4d:0d:14:ad:f9:
ae:60:36:88:58:29:51:68:1d:8a:05:b1:0d:e0:4d:
c4:6d:ae:61:f2:27:3e:bb:92:bb:c0:c9:67:92:5b:
1d:1f:97:c6:9d:1f:da:5e:eb:47:e0:ef:70:03:f2:
52:61:18:c2:0c:50:aa:ed:4c:73:71:78:27:3c:6e:
7e:92:48:d7:e8:1a:fc:07:5a:7f:17:72:e1:2b:e3:
53:22:d2:58:42:81:46:35:7e:df:cf:b2:5e:3d:e1:
98:e4:40:3a:bc:91:a7:d8:4c:42:6e:31:20:fb:be:
13:8c:c7:1e:62:fc:27:a3:e5:2f:59:24:30:9d:cf:
df:08:89:45:c8:e9:2f:e8:9e:1c:e3:75:3f:9d:4c:
41:71:e9:83:50:35:d5:d2:ae:29:f6:1b:fc:a2:e2:
f8:4b:f8:23:0c:8e:a3:c2:68:9e:e2:02:57:2e:db:
c8:ad:0a:ff:5f:c2:2c:a2:44:27:31:50:64:4b:3f:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5D:C1:2D:4D:76:B8:9A:3E:57:8D:77:AE:79:61:84:B0:25:4C:04
X509v3 Authority Key Identifier:
keyid:68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/34352e3232372e37362e302f32322d3234203d3e20323637303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.76.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:b1:46:6e:f3:8c:bf:83:08:d5:9e:10:01:00:ae:8d:60:e0:
b0:82:a9:0b:f0:67:75:d2:75:e3:48:b8:49:2e:42:92:7b:a9:
f7:bc:5c:74:af:6b:c0:b5:fe:dd:6b:4c:72:57:30:09:5b:3d:
40:42:07:c3:31:d1:e8:00:94:dd:71:b2:d5:6c:bf:f6:29:fc:
e3:a8:6b:3e:ec:dc:12:f8:dd:af:12:cc:af:ff:39:a7:76:d8:
40:b8:39:63:f0:09:90:93:ad:2d:1c:13:f5:46:81:a5:6d:7b:
4b:8b:48:fc:bd:e3:1c:18:30:3d:24:21:81:51:00:74:c9:97:
71:2b:84:55:e7:3a:00:e0:51:f0:c1:90:2b:42:eb:9c:c8:0a:
7b:bc:a4:7d:f0:7b:d8:b9:c5:90:0e:07:23:ee:83:24:f7:c9:
dc:37:df:43:74:77:1d:88:d2:a1:fd:1a:cc:1a:63:a2:12:cd:
2c:e5:2e:1c:d8:3a:79:60:45:5d:b1:31:92:c8:eb:ca:e8:d4:
5e:f6:ad:72:3b:39:eb:fa:a2:66:36:c4:cc:33:2c:d8:34:a6:
5f:f5:40:7d:30:36:ac:86:17:36:5f:6e:5b:00:c9:08:b8:8d:
e2:95:88:e5:db:ed:de:e5:de:b9:96:dc:e0:2a:38:b7:e1:72:
01:57:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:31:04 2025 by rpki-client