Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa
File: 34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa (raw, json)
Hash identifier: 04tJfZSrNhjb4Eg5sB/A4o4isjaES+P1s2EphqLXKko=
Subject key identifier: 47:FA:BB:98:E3:13:67:87:EE:86:59:9A:4B:75:6C:DC:D3:C0:68:AE
Certificate issuer: /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Certificate serial: 19B31B2B56BEBB95F14AD212C57A79A889BFEC08
Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa
Signing time: Tue 06 May 2025 12:25:37 +0000
ROA not before: Tue 06 May 2025 12:20:37 +0000
ROA not after: Tue 05 May 2026 12:25:37 +0000
asID: 266983
IP address blocks: 45.226.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:b3:1b:2b:56:be:bb:95:f1:4a:d2:12:c5:7a:79:a8:89:bf:ec:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Validity
Not Before: May 6 12:20:37 2025 GMT
Not After : May 5 12:25:37 2026 GMT
Subject: CN=47FABB98E3136787EE86599A4B756CDCD3C068AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:86:89:ea:be:56:12:27:9d:96:91:ce:5c:32:
d3:33:c2:cc:5b:14:23:9b:d6:d5:ec:7a:a3:64:48:
45:24:4b:5d:ed:17:5c:68:fc:3c:11:76:04:22:4f:
79:e8:56:25:a5:71:31:c6:02:3b:e4:76:f8:95:17:
9c:3c:92:55:57:be:97:97:f8:85:c0:23:26:59:a0:
c8:48:aa:97:d6:fd:87:9f:34:c5:57:b7:6d:40:c1:
28:af:36:58:35:ba:8f:49:20:bd:7e:83:96:ac:0a:
80:e6:75:df:72:fc:b8:45:0f:56:9b:ca:b2:79:69:
56:92:b4:ee:f6:a7:33:c5:61:fb:cc:b7:92:e3:b1:
1b:dc:36:28:db:61:8b:71:8f:36:70:78:cd:3e:5f:
d0:66:9a:34:92:ab:bf:18:7b:2a:ba:b1:fa:49:13:
93:af:64:ca:d2:eb:a4:07:b9:f8:32:6c:00:2b:f8:
93:3b:62:78:44:86:a9:f1:e4:43:68:dc:68:94:92:
87:ff:70:58:ed:3e:51:64:ef:d5:5f:25:4f:2a:42:
25:a5:e4:98:aa:c6:e2:0c:e5:53:23:29:0b:47:cd:
ca:42:02:5b:48:76:66:9c:ba:62:dc:c3:68:20:dd:
33:37:4e:f7:e8:89:f0:e3:00:5d:74:00:22:e5:10:
57:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FA:BB:98:E3:13:67:87:EE:86:59:9A:4B:75:6C:DC:D3:C0:68:AE
X509v3 Authority Key Identifier:
keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/34352e3232362e3134302e302f32332d3233203d3e20323636393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.140.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:c0:7f:f5:93:fa:1e:87:f1:3d:a9:cd:b3:6e:7f:24:52:3b:
eb:2e:eb:52:bc:87:61:83:6c:70:19:0d:81:26:de:fd:06:a4:
d4:4c:f2:7e:bc:62:a8:9b:a1:b2:55:96:ea:b6:49:30:b1:e0:
a0:27:92:a3:7c:0d:ff:85:0e:08:86:aa:89:b1:7f:2e:6a:ce:
62:28:32:80:aa:36:2c:a0:79:b2:2f:3d:5f:e8:83:c5:f1:f9:
49:9a:9b:7f:e8:65:6a:a5:a5:74:bb:32:08:37:36:b7:92:3a:
76:6b:ac:e2:69:63:7a:fe:e7:94:ad:7b:36:6a:e5:f2:b1:11:
48:a5:1e:b3:7a:cd:90:3e:f0:9c:a6:b5:79:a1:4a:d4:71:2d:
68:54:c4:3c:a2:0e:1e:fd:f2:62:e3:db:b2:36:68:b9:03:3d:
8e:4d:ab:59:df:cb:b3:2a:02:d2:d7:69:81:9f:7d:a1:ee:a8:
69:04:34:ac:84:2f:35:bd:48:24:4a:69:f4:4d:39:ff:ca:05:
47:2d:76:ad:d2:65:8b:17:40:ca:07:f7:4b:f3:c9:cc:d1:65:
60:1f:cf:fa:f0:6d:f8:1d:de:ed:6c:e5:de:af:8a:f1:32:6e:
f3:dd:f7:78:58:67:e6:f2:e8:ff:ac:7f:59:93:13:bf:e8:0a:
11:08:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 10:04:58 2025 by rpki-client