Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa
File: 34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa (raw, json)
Hash identifier: G+9fnKDKYzXcNVDiQbyVgNQLvfSyrAWnEylFjOb1cKM=
Subject key identifier: 6A:22:49:0E:F6:30:F6:FD:A5:3C:B2:96:EB:99:37:DA:7C:D2:87:93
Certificate issuer: /CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Certificate serial: 79D0A690E993DED64023195E182228ECE1F346DF
Authority key identifier: AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa
Signing time: Wed 05 Mar 2025 19:00:21 +0000
ROA not before: Wed 05 Mar 2025 18:55:21 +0000
ROA not after: Wed 04 Mar 2026 19:00:21 +0000
asID: 268254
IP address blocks: 45.236.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:d0:a6:90:e9:93:de:d6:40:23:19:5e:18:22:28:ec:e1:f3:46:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFC529FB243B7780A20B27A2C4E73DAF65C25021
Validity
Not Before: Mar 5 18:55:21 2025 GMT
Not After : Mar 4 19:00:21 2026 GMT
Subject: CN=6A22490EF630F6FDA53CB296EB9937DA7CD28793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:12:8f:1e:dd:01:8b:e4:02:67:8e:74:31:
6d:dc:05:a4:b5:3c:5f:a1:8b:ad:9b:d0:85:b8:46:
c3:40:2b:c7:e7:e5:a0:7a:eb:c8:b5:fc:3a:95:46:
76:82:2f:6e:49:b4:fc:f4:96:d9:d2:51:6f:d2:f3:
0e:20:24:74:47:cd:dd:49:d4:27:ed:39:36:49:9e:
53:4d:ae:aa:50:61:b6:4d:cb:d4:b7:cf:9b:b8:14:
3c:b5:59:fe:15:3d:a3:07:2b:6c:e0:0d:89:cb:d5:
7b:52:2c:9f:1b:ce:e5:06:31:a5:35:fa:90:1d:80:
7f:63:d0:ce:dc:f0:19:d9:91:bb:1e:79:1f:2e:b1:
f3:df:45:c5:6e:80:d8:76:2a:e3:d8:75:77:35:b1:
60:e1:76:83:72:07:2d:f1:48:dd:f1:c4:58:f4:89:
26:5c:7d:52:1d:e0:20:d1:7d:f3:7d:b5:2f:5c:19:
21:6c:3c:77:db:65:fa:71:24:d8:1e:09:bb:51:55:
21:b8:5d:99:74:42:49:d0:d5:e1:26:c2:46:13:f8:
5e:4e:df:0c:1f:c8:91:2f:2b:5e:61:08:be:41:93:
27:84:e4:9c:82:27:22:00:b4:c2:99:72:ee:0d:18:
89:31:73:e1:a7:7e:21:88:a9:64:f1:4f:b8:76:6b:
50:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:22:49:0E:F6:30:F6:FD:A5:3C:B2:96:EB:99:37:DA:7C:D2:87:93
X509v3 Authority Key Identifier:
keyid:AF:C5:29:FB:24:3B:77:80:A2:0B:27:A2:C4:E7:3D:AF:65:C2:50:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFC529FB243B7780A20B27A2C4E73DAF65C25021.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A3htzCzRPzLnYF7q9yx7AdBY3YGNocQDwhz7DWYZ2PQB/1/34352e3233362e3135372e302f32342d3234203d3e20323638323534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.157.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:33:a1:d0:54:4b:44:7a:eb:7b:8d:fb:50:46:65:36:47:9f:
a1:1f:e6:f5:32:72:47:06:5a:60:ce:fa:d7:44:fb:f3:bd:1a:
01:f0:d1:08:e4:77:d9:73:ce:b0:63:b3:19:06:3f:f9:1c:d0:
a9:fe:1c:18:0e:fe:ea:82:f8:2e:3c:bf:6c:0b:0d:e6:78:09:
0d:05:a0:28:c0:85:4d:a9:8a:c4:fb:1d:b1:49:48:80:4a:cb:
59:1e:d8:84:60:2c:42:76:e9:7a:19:59:57:0e:01:1d:ec:f0:
e0:18:3e:3f:ae:0a:a7:88:f4:a5:42:84:54:cb:c4:7b:f5:f1:
f9:9f:ce:c6:fb:34:39:9e:e6:e9:e6:f2:de:66:a9:91:0c:99:
bb:cc:3c:18:cc:07:80:c7:a5:7c:f3:b4:d2:dc:32:70:19:53:
50:3b:8a:2e:02:29:80:6d:25:70:fa:fb:36:71:7f:80:e2:4b:
bb:87:ef:2b:eb:45:b7:ab:d8:91:95:20:48:e9:ab:0a:fd:02:
11:3c:b0:fa:af:0d:5d:04:08:fb:45:bf:27:43:33:04:49:e7:
42:7a:94:cd:d4:c9:ed:c8:5a:16:a2:20:c3:eb:79:46:94:f9:
a4:40:0c:ec:37:4a:aa:eb:dc:93:cc:08:44:48:00:86:63:82:
d3:7e:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:43:23 2025 by rpki-client