Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3332203d3e20323638373037.roa
File: 34352e3136392e3136312e302f32342d3332203d3e20323638373037.roa (raw, json)
Hash identifier: dHexKBCjvGbus9GiHilBsXfb/XYG72JrFK3ZT0CuoGY=
Subject key identifier: 20:E9:1D:D1:0C:17:DA:64:F5:63:EF:38:A3:77:A9:16:F6:E0:B2:15
Certificate issuer: /CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Certificate serial: 697E7C2FF9BE3EEC9C26475F967D6EFABA7219F2
Authority key identifier: 3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3332203d3e20323638373037.roa
Signing time: Sun 19 Jan 2025 04:05:15 +0000
ROA not before: Sun 19 Jan 2025 04:00:15 +0000
ROA not after: Sun 18 Jan 2026 04:05:15 +0000
asID: 268707
IP address blocks: 45.169.161.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:7e:7c:2f:f9:be:3e:ec:9c:26:47:5f:96:7d:6e:fa:ba:72:19:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Validity
Not Before: Jan 19 04:00:15 2025 GMT
Not After : Jan 18 04:05:15 2026 GMT
Subject: CN=20E91DD10C17DA64F563EF38A377A916F6E0B215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:36:32:38:01:8e:2b:99:fb:4c:1f:4b:d4:
ee:77:6a:16:42:a7:35:eb:da:a7:33:0a:d1:cd:31:
34:a2:d1:e8:a6:e5:00:97:b3:58:5d:95:e8:64:cd:
0f:7a:8b:8a:14:63:26:d3:ee:74:4e:f7:5a:4b:23:
89:62:19:f8:8a:04:38:98:65:0f:71:9c:a1:37:c4:
7c:ff:09:2f:82:45:f5:0f:00:31:b1:70:ef:0d:ea:
12:ad:8f:eb:49:35:2c:31:c8:e9:dc:76:1a:5f:33:
b6:cc:f1:9d:67:c4:2b:f2:7c:11:5c:ed:ee:d2:9d:
d9:bb:d9:20:c3:76:19:d4:64:e8:0c:e4:48:55:27:
12:c5:52:d3:41:ee:40:f9:a5:10:b9:ec:c3:26:aa:
c7:7c:b7:ef:58:16:54:cd:ca:fa:1c:dd:95:91:33:
38:11:06:96:24:cc:f2:7a:28:c0:12:d9:35:dd:1f:
c4:63:1a:f0:24:14:de:dd:74:44:89:6b:ce:aa:d1:
94:d9:e2:ef:38:9f:03:59:9e:0d:42:fb:9f:e3:c3:
b5:17:4b:39:24:74:54:80:8c:c3:5b:e0:24:c9:4c:
68:bb:16:26:76:17:59:d2:e1:33:90:4a:f3:be:92:
85:b7:dd:fd:51:30:09:bc:c0:3f:c1:96:69:cd:4a:
40:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E9:1D:D1:0C:17:DA:64:F5:63:EF:38:A3:77:A9:16:F6:E0:B2:15
X509v3 Authority Key Identifier:
keyid:3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/34352e3136392e3136312e302f32342d3332203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.161.0/24
Signature Algorithm: sha256WithRSAEncryption
05:c6:90:e7:c2:51:e5:8b:f4:a0:bd:ac:f3:bf:87:b0:a9:7b:
2d:3e:80:ee:82:78:63:44:40:2c:e7:78:37:29:67:ab:9e:0c:
39:7e:dd:2d:81:ed:29:81:a1:d2:4b:1a:b6:53:c9:8f:90:98:
03:83:28:c1:19:92:6f:dc:47:5e:08:f0:35:2c:59:d2:83:88:
5f:f0:f2:8e:d9:aa:94:d6:db:a1:da:8a:a0:d1:3b:9e:6b:77:
64:c8:62:44:fe:5e:15:c5:7d:38:b0:2d:33:f0:25:0c:c7:3d:
d7:e1:b6:5c:16:ba:16:0e:3a:b4:17:d4:75:8c:a0:13:25:09:
32:a0:08:fd:ec:af:77:cc:aa:5c:e4:31:90:07:64:87:28:5c:
47:81:c2:08:e4:f8:01:b3:a2:0e:72:b5:cd:1c:04:23:fd:02:
ed:cf:d1:95:84:dd:23:a4:d8:64:31:1a:28:5d:4e:da:6a:47:
f3:d0:8c:e1:51:1f:12:d9:3f:61:98:40:81:72:78:4e:bf:00:
1b:a4:3d:c0:15:89:ca:1b:c3:4b:7e:d3:26:9d:cd:70:35:6d:
7d:21:e8:ff:fe:94:f8:b5:ae:66:5b:1d:68:6f:60:ed:a4:db:
48:f6:3b:5b:47:a5:45:17:fc:27:12:28:aa:f8:16:2b:8d:00:
8b:31:b8:ee
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaX58L/m+PuycJkdfln1u+rpyGfIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0EwNTUzRUYyNEZDODRDNzQwRkM4REU5MjU3ODAxQTJD
N0EwQURBMTAeFw0yNTAxMTkwNDAwMTVaFw0yNjAxMTgwNDA1MTVaMDMxMTAvBgNV
BAMTKDIwRTkxREQxMEMxN0RBNjRGNTYzRUYzOEEzNzdBOTE2RjZFMEIyMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd4zYyOAGOK5n7TB9L1O53ahZC
pzXr2qczCtHNMTSi0eim5QCXs1hdlehkzQ96i4oUYybT7nRO91pLI4liGfiKBDiY
ZQ9xnKE3xHz/CS+CRfUPADGxcO8N6hKtj+tJNSwxyOncdhpfM7bM8Z1nxCvyfBFc
7e7Sndm72SDDdhnUZOgM5EhVJxLFUtNB7kD5pRC57MMmqsd8t+9YFlTNyvoc3ZWR
MzgRBpYkzPJ6KMAS2TXdH8RjGvAkFN7ddESJa86q0ZTZ4u84nwNZng1C+5/jw7UX
SzkkdFSAjMNb4CTJTGi7FiZ2F1nS4TOQSvO+koW33f1RMAm8wD/BlmnNSkAlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIOkd0QwX2mT1Y+84o3epFvbgshUwHwYDVR0j
BBgwFoAUOgVT7yT8hMdA/I3pJXgBosegraEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQXFFRHF1NVJOaDhGdE1qZXlHbmtXaFBDVmdMUzJ1cWY0eW1SaFVLN3I5
RVYvMC8zQTA1NTNFRjI0RkM4NEM3NDBGQzhERTkyNTc4MDFBMkM3QTBBREExLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNBMDU1M0VGMjRGQzg0Qzc0
MEZDOERFOTI1NzgwMUEyQzdBMEFEQTEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FxRURxdTVSTmg4RnRNamV5R25rV2hQQ1ZnTFMydXFmNHltUmhVSzdyOUVWLzAv
MzQzNTJlMzEzNjM5MmUzMTM2MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMjM2
MzgzNzMwMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtqaEwDQYJKoZIhvcNAQELBQADggEBAAXGkOfC
UeWL9KC9rPO/h7Cpey0+gO6CeGNEQCzneDcpZ6ueDDl+3S2B7SmBodJLGrZTyY+Q
mAODKMEZkm/cR14I8DUsWdKDiF/w8o7ZqpTW26HaiqDRO55rd2TIYkT+XhXFfTiw
LTPwJQzHPdfhtlwWuhYOOrQX1HWMoBMlCTKgCP3sr3fMqlzkMZAHZIcoXEeBwgjk
+AGzog5ytc0cBCP9Au3P0ZWE3SOk2GQxGihdTtpqR/PQjOFRHxLZP2GYQIFyeE6/
ABukPcAVicobw0t+0yadzXA1bX0h6P/+lPi1rmZbHWhvYO2k20j2O1tHpUUX/CcS
KKr4FiuNAIsxuO4=
-----END CERTIFICATE-----
Generated at Tue Apr 8 22:13:28 2025 by rpki-client