Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
File: 34352e3233332e34342e302f32322d3332203d3e20323637323933.roa (raw, json)
Hash identifier: g10jt00FNcZhxgCRlROenuq768m+E2KTY3Ixdnbrhec=
Subject key identifier: D4:6C:49:F6:D4:61:43:6C:93:F1:F2:00:93:D5:A0:01:09:BF:E7:4B
Certificate issuer: /CN=910494A18C7A628293563A78776F129AEA078B88
Certificate serial: 21E2EB0F3020A9046C4BE56F6DAAC75C2E52A244
Authority key identifier: 91:04:94:A1:8C:7A:62:82:93:56:3A:78:77:6F:12:9A:EA:07:8B:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
Signing time: Wed 05 Mar 2025 21:18:32 +0000
ROA not before: Wed 05 Mar 2025 21:13:32 +0000
ROA not after: Wed 04 Mar 2026 21:18:32 +0000
asID: 267293
IP address blocks: 45.233.44.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e2:eb:0f:30:20:a9:04:6c:4b:e5:6f:6d:aa:c7:5c:2e:52:a2:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910494A18C7A628293563A78776F129AEA078B88
Validity
Not Before: Mar 5 21:13:32 2025 GMT
Not After : Mar 4 21:18:32 2026 GMT
Subject: CN=D46C49F6D461436C93F1F20093D5A00109BFE74B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3b:7c:e9:4d:96:f2:88:7d:d9:4e:f3:8c:dc:
22:30:cd:44:d6:94:a2:b3:65:c9:37:b0:89:fb:ce:
f6:af:1b:5c:78:13:db:c4:58:bc:06:1a:7f:5d:1a:
11:ea:5e:a4:1e:37:aa:75:7d:49:8c:1c:a8:10:fa:
8f:12:d3:a0:f0:ab:ec:b5:c3:62:2e:f6:29:42:c1:
62:ea:84:88:f0:2c:77:10:56:09:84:ca:11:71:7b:
f1:32:37:38:ea:12:23:01:f9:aa:6e:c8:08:47:ca:
78:97:a6:fb:c9:5f:fd:2b:05:48:3e:ae:c0:9c:fb:
52:ea:4a:e5:f6:4c:ce:19:47:4c:f5:1d:95:00:18:
cf:41:a1:7e:6c:20:80:7f:0e:c8:79:17:b6:b6:eb:
72:db:a7:8c:24:f5:9f:17:47:b8:16:52:6f:46:1b:
d3:27:35:6a:f0:df:02:23:dd:a1:08:ad:b0:2d:b7:
ad:dc:52:85:fc:12:41:e8:57:8a:dd:61:14:43:c6:
8b:ac:2d:7a:15:2d:92:6e:85:6d:16:2f:74:0a:96:
fb:a4:63:02:91:7e:50:4e:2c:05:87:fe:1d:60:65:
47:dd:de:27:54:90:70:0b:20:03:c7:95:15:5a:ad:
a6:a4:87:a8:ee:92:13:0b:c0:2f:15:67:10:37:e4:
ae:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6C:49:F6:D4:61:43:6C:93:F1:F2:00:93:D5:A0:01:09:BF:E7:4B
X509v3 Authority Key Identifier:
keyid:91:04:94:A1:8C:7A:62:82:93:56:3A:78:77:6F:12:9A:EA:07:8B:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/910494A18C7A628293563A78776F129AEA078B88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/910494A18C7A628293563A78776F129AEA078B88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9u1hpszh83ecofC7QsPgLFFqMo2dzDGy9o1x4Myq9XP3/1/34352e3233332e34342e302f32322d3332203d3e20323637323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.44.0/22
Signature Algorithm: sha256WithRSAEncryption
22:1e:f7:80:40:0a:80:3a:83:d7:6e:22:17:58:8a:89:c3:44:
ea:86:19:82:13:dd:94:d2:25:dc:75:02:60:df:9b:14:a8:e9:
0a:59:ac:a5:cc:93:69:bf:42:98:7b:5d:7d:48:c3:6e:65:2b:
45:e3:92:3e:4f:b2:36:67:a4:65:3b:99:26:2e:50:f6:f3:24:
90:81:d3:46:60:25:19:ad:3d:35:76:8a:b5:78:28:05:a0:f6:
60:96:29:8e:98:0c:f1:33:a0:9a:3d:c9:08:b3:8c:44:2b:22:
9e:f0:08:07:90:9d:f9:e7:3d:ee:8c:a4:d1:e4:0e:d4:2c:63:
2e:67:e9:fa:b4:cc:08:98:f6:68:b9:67:77:59:9d:0a:3d:21:
4f:2b:c0:30:ab:68:1f:15:7e:e3:6f:17:c7:c2:cc:f4:99:5a:
92:73:6a:5e:27:4d:64:70:f1:73:21:66:38:2f:f6:17:c6:37:
51:08:29:55:4a:16:ee:56:eb:10:fe:18:bc:ec:cd:a3:d7:0d:
ba:82:70:19:a8:b7:51:62:a4:c9:cf:6c:44:3a:b5:e3:b0:01:
8a:54:a4:76:bc:28:df:fa:33:58:2a:13:9d:63:a2:a7:77:e7:
74:a7:1f:dd:15:bf:70:58:96:63:f7:b9:f9:12:a1:8d:91:e6:
fa:d5:b2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:31 2025 by rpki-client