Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/34352e3136332e3133322e302f32322d3332203d3e20323638363730.roa
File: 34352e3136332e3133322e302f32322d3332203d3e20323638363730.roa (raw, json)
Hash identifier: LTiuKV379nRkyEmLvDmT8HBw9Ko5fIR+CtQ5WMHxhp8=
Subject key identifier: 70:9F:2B:4D:C4:B8:C7:5D:06:8A:15:D0:A3:D1:BD:F0:7D:1D:DD:AA
Certificate issuer: /CN=63D91D63AA405003A381126D88C9CFAAA8693918
Certificate serial: 60E9B94A52344BD1F9122D10F560C075E923E3C4
Authority key identifier: 63:D9:1D:63:AA:40:50:03:A3:81:12:6D:88:C9:CF:AA:A8:69:39:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D91D63AA405003A381126D88C9CFAAA8693918.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/34352e3136332e3133322e302f32322d3332203d3e20323638363730.roa
Signing time: Wed 05 Mar 2025 13:28:33 +0000
ROA not before: Wed 05 Mar 2025 13:23:33 +0000
ROA not after: Wed 04 Mar 2026 13:28:33 +0000
asID: 268670
IP address blocks: 45.163.132.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e9:b9:4a:52:34:4b:d1:f9:12:2d:10:f5:60:c0:75:e9:23:e3:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63D91D63AA405003A381126D88C9CFAAA8693918
Validity
Not Before: Mar 5 13:23:33 2025 GMT
Not After : Mar 4 13:28:33 2026 GMT
Subject: CN=709F2B4DC4B8C75D068A15D0A3D1BDF07D1DDDAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:54:71:9d:5f:63:ea:6b:b2:08:75:90:a7:41:
4e:53:a0:ac:df:66:dc:73:79:85:29:47:4d:86:66:
72:e9:b2:79:71:a6:48:f2:3f:ee:6c:0e:2c:c6:a2:
f8:22:45:bf:e0:aa:ef:e8:5f:c4:02:1e:1d:fb:95:
f7:bf:89:b9:6c:ed:c7:3f:ac:4b:f0:a8:43:90:7b:
a0:de:8a:ec:3a:c3:50:b2:64:f2:de:c1:1e:66:06:
99:52:f8:49:78:cc:7e:62:60:95:c2:51:7a:68:dd:
ea:ee:a5:b9:2e:fb:ad:a8:c8:38:d8:35:ab:66:a1:
52:51:50:31:4a:a0:c0:d8:05:03:4b:0d:d6:e3:23:
3c:1a:a3:d2:2d:52:89:5e:03:38:1a:b8:aa:f8:66:
f5:5f:9c:06:ca:e3:1e:78:f6:63:80:4a:21:76:88:
44:7f:0e:b7:64:63:c7:43:03:e4:85:13:45:cd:62:
ad:61:ce:b3:7f:fd:55:1c:c0:85:ab:9b:08:73:00:
fe:93:2a:28:df:27:5d:28:d5:11:4a:93:d9:45:36:
42:69:c5:38:1f:cc:7f:2f:cc:04:f9:25:d3:a6:29:
58:68:68:57:bc:ea:5b:bb:08:ac:8f:d1:40:e6:6a:
39:37:69:91:ba:b3:00:b2:e7:f2:d6:7e:c5:98:e8:
58:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9F:2B:4D:C4:B8:C7:5D:06:8A:15:D0:A3:D1:BD:F0:7D:1D:DD:AA
X509v3 Authority Key Identifier:
keyid:63:D9:1D:63:AA:40:50:03:A3:81:12:6D:88:C9:CF:AA:A8:69:39:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/63D91D63AA405003A381126D88C9CFAAA8693918.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/63D91D63AA405003A381126D88C9CFAAA8693918.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/34352e3136332e3133322e302f32322d3332203d3e20323638363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.132.0/22
Signature Algorithm: sha256WithRSAEncryption
68:71:e9:21:ee:fe:5d:12:68:98:94:67:78:d2:73:96:32:3b:
9b:a3:d1:6c:91:11:47:db:f1:d7:d3:46:73:81:40:9e:38:fe:
73:a5:fe:7d:20:86:dd:dd:59:f7:10:5a:f2:ae:85:76:97:8c:
5b:1a:d7:97:b6:92:e5:ed:c7:f0:9d:96:e0:f6:99:41:07:4d:
02:f0:46:db:62:5a:04:b3:cd:7d:95:c3:48:42:24:27:8a:dd:
a6:d7:56:70:fb:90:89:9b:f4:8a:2d:54:35:a3:52:5e:3b:b6:
81:e3:02:6e:ea:0d:20:22:94:b0:d4:ea:a8:7a:21:9d:6e:d3:
e6:81:ff:2a:5e:a6:4c:81:67:53:59:2c:8f:f3:56:b0:8d:1b:
38:fa:1c:67:df:a6:27:ce:34:d1:de:fa:9c:22:ae:27:bc:8f:
86:70:81:71:8f:d2:43:92:57:24:49:c0:ae:0a:c0:9e:2c:80:
e7:7d:d5:b0:a4:26:2e:84:be:3f:e9:76:46:17:2f:4b:e9:b0:
da:18:e0:fa:dd:6b:c1:e7:2d:ee:d0:f9:43:70:b0:3e:f9:9e:
ae:36:73:41:f5:e4:44:d5:0a:61:81:ca:8a:58:9d:65:6a:97:
d5:d4:4b:13:0e:6d:90:16:76:5f:fd:30:84:81:db:0e:f6:cb:
22:10:9f:9e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYOm5SlI0S9H5Ei0Q9WDAdekj48QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjNEOTFENjNBQTQwNTAwM0EzODExMjZEODhDOUNGQUFB
ODY5MzkxODAeFw0yNTAzMDUxMzIzMzNaFw0yNjAzMDQxMzI4MzNaMDMxMTAvBgNV
BAMTKDcwOUYyQjREQzRCOEM3NUQwNjhBMTVEMEEzRDFCREYwN0QxREREQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxVHGdX2Pqa7IIdZCnQU5ToKzf
ZtxzeYUpR02GZnLpsnlxpkjyP+5sDizGovgiRb/gqu/oX8QCHh37lfe/ibls7cc/
rEvwqEOQe6Deiuw6w1CyZPLewR5mBplS+El4zH5iYJXCUXpo3erupbku+62oyDjY
NatmoVJRUDFKoMDYBQNLDdbjIzwao9ItUoleAzgauKr4ZvVfnAbK4x549mOASiF2
iER/DrdkY8dDA+SFE0XNYq1hzrN//VUcwIWrmwhzAP6TKijfJ10o1RFKk9lFNkJp
xTgfzH8vzAT5JdOmKVhoaFe86lu7CKyP0UDmajk3aZG6swCy5/LWfsWY6FhrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcJ8rTcS4x10GihXQo9G98H0d3aowHwYDVR0j
BBgwFoAUY9kdY6pAUAOjgRJtiMnPqqhpORgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQTlyRmJLb3ljeTl3NnlCMmZLdkttVWt1R1JSM3ZEcGtOTjlxeHU0b2ZG
VDkvMC82M0Q5MUQ2M0FBNDA1MDAzQTM4MTEyNkQ4OEM5Q0ZBQUE4NjkzOTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzYzRDkxRDYzQUE0MDUwMDNB
MzgxMTI2RDg4QzlDRkFBQTg2OTM5MTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0E5ckZiS295Y3k5dzZ5QjJmS3ZLbVVrdUdSUjN2RHBrTk45cXh1NG9mRlQ5LzAv
MzQzNTJlMzEzNjMzMmUzMTMzMzIyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzMjM2
MzgzNjM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIto4QwDQYJKoZIhvcNAQELBQADggEBAGhx6SHu
/l0SaJiUZ3jSc5YyO5uj0WyREUfb8dfTRnOBQJ44/nOl/n0ght3dWfcQWvKuhXaX
jFsa15e2kuXtx/CdluD2mUEHTQLwRttiWgSzzX2Vw0hCJCeK3abXVnD7kImb9Iot
VDWjUl47toHjAm7qDSAilLDU6qh6IZ1u0+aB/ypepkyBZ1NZLI/zVrCNGzj6HGff
pifONNHe+pwirie8j4ZwgXGP0kOSVyRJwK4KwJ4sgOd91bCkJi6Evj/pdkYXL0vp
sNoY4Prda8HnLe7Q+UNwsD75nq42c0H15ETVCmGByopYnWVql9XUSxMObZAWdl/9
MISB2w72yyIQn54=
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:13:51 2025 by rpki-client