Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa
File: 34352e3136372e35322e302f32322d3232203d3e20323637393931.roa (raw, json)
Hash identifier: X1Y/Ww5TLBv/urkeWqDl+DSOhWVEL9KeY0JpVHyJuJo=
Subject key identifier: 1C:43:C4:C8:06:F0:C3:1B:7D:FB:0E:35:8C:16:0C:A6:D6:6F:AF:AD
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 1097FDF3637D9FB4F142D647BB74F290EE5F5039
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:43:55 +0000
ROA not before: Mon 24 Mar 2025 20:38:55 +0000
ROA not after: Mon 23 Mar 2026 20:43:55 +0000
asID: 267991
IP address blocks: 45.167.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:97:fd:f3:63:7d:9f:b4:f1:42:d6:47:bb:74:f2:90:ee:5f:50:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:38:55 2025 GMT
Not After : Mar 23 20:43:55 2026 GMT
Subject: CN=1C43C4C806F0C31B7DFB0E358C160CA6D66FAFAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4d:d1:e4:a9:d4:38:7f:fc:5b:79:be:54:d0:
2b:81:36:fd:15:d0:1e:5e:9c:40:0a:97:81:14:66:
79:20:8a:7a:f2:fa:00:3b:4f:91:1c:71:0d:cc:55:
2e:e0:cf:f8:aa:b8:d8:d2:c8:c9:92:be:b8:ce:d3:
a2:08:55:f4:46:18:5c:e8:b9:96:00:2c:17:21:c4:
ff:4b:46:8b:7a:9f:8a:b5:25:2d:4e:86:94:15:3d:
0f:36:a8:7c:68:a3:06:a8:97:26:1b:79:7a:be:6d:
60:5a:d3:55:e2:03:63:5c:e2:af:ea:c0:0e:65:7e:
1d:88:89:8a:2f:b5:2b:f6:a1:94:55:32:fa:9f:ac:
6c:f7:9f:85:ad:f6:34:e2:e6:7e:ea:9e:7f:d3:17:
23:32:bd:24:5d:2f:de:b1:5b:c3:21:11:8d:01:a4:
6a:6f:6f:5c:0a:dc:30:18:f1:c9:fe:ee:84:54:1e:
6c:4b:7f:51:a2:39:b0:9b:39:7b:d0:bc:42:d0:ac:
3b:54:de:34:5e:91:c1:d8:33:28:6e:97:48:06:3e:
74:0f:7c:e2:ad:ed:03:dd:2f:e3:7a:c7:7c:87:13:
dd:b0:23:c4:a3:ab:af:05:7e:78:22:e6:91:c2:24:
e9:76:24:33:62:f8:1d:3e:9a:f2:27:62:c3:00:1c:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:C4:C8:06:F0:C3:1B:7D:FB:0E:35:8C:16:0C:A6:D6:6F:AF:AD
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32322d3232203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.52.0/22
Signature Algorithm: sha256WithRSAEncryption
05:f9:e0:2d:d2:b1:9f:a8:eb:c8:a7:c5:f5:67:75:43:bd:02:
59:bf:42:77:c5:c0:40:c8:dc:27:c8:87:dd:95:da:63:64:43:
1f:51:0f:1b:ec:43:3d:61:7a:74:2b:6e:d8:0c:df:9f:0c:36:
fb:53:7b:8e:9e:0b:5c:34:a5:6f:c8:a4:af:08:8a:74:e6:90:
61:f6:68:10:83:cb:59:f0:f4:a9:5d:d1:bd:ff:9e:c8:bd:f0:
88:a4:ff:1c:e7:cb:9b:d0:38:41:31:be:3e:1c:4a:5c:a8:c1:
c1:3e:1f:43:d3:24:fc:ff:f7:16:55:b5:9a:7a:ff:28:e2:8a:
36:5d:1d:c0:1a:c9:f2:33:96:7a:2d:69:c4:14:68:91:2d:99:
83:ef:b7:9a:9f:df:bd:a8:03:3d:07:f4:29:a2:95:1b:2b:09:
7c:a0:e1:7e:22:51:de:0c:b8:6c:25:41:55:1e:fb:25:95:69:
b9:1f:ad:d5:8e:f3:4b:be:43:d0:a9:0d:0f:dd:88:4a:3b:4f:
9c:89:bb:0e:9b:35:d2:4b:7a:5d:fd:0b:dc:04:83:58:1c:ba:
26:2a:d1:ba:e2:a4:ef:d6:da:ec:14:51:f6:c0:dc:02:a6:d6:
fe:20:8c:6c:4a:a9:87:cf:fc:e4:c6:36:e2:15:06:e7:d7:2c:
4f:7d:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:46:07 2025 by rpki-client