Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa
File: 34352e3136372e35322e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier: aK1svsZWnAVHR0z4RPY+D+od18iIhfJkJprbPkYCLJ8=
Subject key identifier: 9F:3B:A0:5D:BA:0C:AA:DA:FB:18:0F:38:1C:0A:7B:79:E3:4D:2E:AB
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 1A5E42D50C6DAA5DB54EA8F70519DD103C9102E1
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:44:02 +0000
ROA not before: Mon 24 Mar 2025 20:39:02 +0000
ROA not after: Mon 23 Mar 2026 20:44:02 +0000
asID: 267991
IP address blocks: 45.167.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:5e:42:d5:0c:6d:aa:5d:b5:4e:a8:f7:05:19:dd:10:3c:91:02:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:39:02 2025 GMT
Not After : Mar 23 20:44:02 2026 GMT
Subject: CN=9F3BA05DBA0CAADAFB180F381C0A7B79E34D2EAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:a2:51:b3:aa:74:fb:db:25:2d:4b:98:de:
fe:fd:c4:36:f6:e1:91:87:ba:16:6d:f7:bc:93:78:
62:0b:51:93:08:a8:62:17:6d:43:7a:b4:6b:c9:0c:
32:a3:c3:3d:99:6b:f6:dc:20:d3:85:d8:8f:4b:a3:
9d:b8:db:07:76:ce:db:54:f7:75:87:45:82:2d:2e:
1f:5d:20:fa:4b:01:6d:53:16:ac:1b:f9:f3:ee:81:
c3:a8:a1:29:5a:a1:78:16:3c:bb:26:8b:bc:31:73:
bb:d0:6a:c9:e0:20:59:d4:c9:6e:bb:4f:59:3d:f4:
a8:db:dd:91:b8:77:4d:b7:da:31:cf:79:1b:28:d1:
23:52:4a:6d:a1:c5:0c:c3:d0:ae:ef:6d:a8:70:19:
66:e4:e9:46:4b:84:46:0f:6f:98:94:99:d5:0b:db:
43:7f:e7:a3:5c:f6:ec:25:13:06:46:0d:aa:73:4a:
9b:cc:f0:d9:e0:3c:68:51:51:00:87:e1:c4:39:e0:
08:d5:5e:7e:30:e5:c4:81:1f:a3:11:cd:da:89:a7:
c0:e8:fa:7d:d7:98:83:d7:db:c5:b3:75:57:6e:6c:
a5:77:5f:23:8c:04:de:af:8d:e3:be:20:46:41:6e:
7c:a5:32:b1:f0:1a:74:0f:aa:8c:aa:36:e9:bc:c5:
79:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:A0:5D:BA:0C:AA:DA:FB:18:0F:38:1C:0A:7B:79:E3:4D:2E:AB
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35322e302f32342d3234203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.52.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:4a:4c:cb:f2:72:d7:f3:d6:8c:39:3c:46:e3:e3:14:bc:7d:
10:04:e5:cd:9f:95:47:4b:4d:64:99:87:3e:4c:45:8e:1d:38:
8f:a4:5d:d0:8e:cf:7a:b8:7e:80:3b:c1:d5:b9:76:ab:61:1e:
34:37:99:fa:a4:fe:23:34:ee:b2:25:26:b4:f0:6d:c6:c0:b4:
5b:8a:bf:a3:3e:82:63:90:2c:37:4c:91:67:70:d4:05:ad:70:
2e:d1:fa:ec:9c:f8:31:33:18:da:f8:58:e9:2f:78:ec:47:4e:
ec:8f:d1:04:71:32:a1:4d:ea:fc:85:74:d9:39:07:f8:b5:ee:
1d:d4:bb:e4:cd:c5:d8:96:4a:09:ac:f6:72:25:6b:f5:28:49:
59:79:e0:b9:64:d7:e0:69:0b:7d:8a:d7:42:ef:c9:35:5f:f8:
41:be:5c:d3:63:2f:4a:7b:bf:6d:7e:d6:06:d8:58:8b:e1:af:
d9:9f:b8:56:f5:8a:e9:65:d2:ae:9b:3c:0c:f3:ae:79:1c:14:
87:d4:a2:9c:52:0b:53:d6:c0:cf:0a:f8:e5:47:b5:49:5d:e2:
4f:33:02:f6:d6:bc:69:7e:bc:11:ef:d2:8c:5c:c1:24:d3:2b:
fb:0f:14:e1:ce:54:c6:96:58:7c:10:ba:ae:35:5f:55:1f:37:
f1:ca:e9:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGl5C1Qxtql21Tqj3BRndEDyRAuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0YyNERDMkExNkY2RkRENUExRjBCN0IzOEJGN0M3NzA3
QUUzQkFBQTAeFw0yNTAzMjQyMDM5MDJaFw0yNjAzMjMyMDQ0MDJaMDMxMTAvBgNV
BAMTKDlGM0JBMDVEQkEwQ0FBREFGQjE4MEYzODFDMEE3Qjc5RTM0RDJFQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+7KJRs6p0+9slLUuY3v79xDb2
4ZGHuhZt97yTeGILUZMIqGIXbUN6tGvJDDKjwz2Za/bcINOF2I9Lo5242wd2zttU
93WHRYItLh9dIPpLAW1TFqwb+fPugcOooSlaoXgWPLsmi7wxc7vQasngIFnUyW67
T1k99Kjb3ZG4d0232jHPeRso0SNSSm2hxQzD0K7vbahwGWbk6UZLhEYPb5iUmdUL
20N/56Nc9uwlEwZGDapzSpvM8NngPGhRUQCH4cQ54AjVXn4w5cSBH6MRzdqJp8Do
+n3XmIPX28WzdVdubKV3XyOMBN6vjeO+IEZBbnylMrHwGnQPqoyqNum8xXnDAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnzugXboMqtr7GA84HAp7eeNNLqswHwYDVR0j
BBgwFoAUzyTcKhb2/dWh8Lezi/fHcHrjuqowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDhUVVNjMkxUcEhnTHRhQmFvMTlZVFFSN0tFM2ZrSDRhRFlUQzJpMTF5
Mk4vMC9DRjI0REMyQTE2RjZGREQ1QTFGMEI3QjM4QkY3Qzc3MDdBRTNCQUFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0NGMjREQzJBMTZGNkZERDVB
MUYwQjdCMzhCRjdDNzcwN0FFM0JBQUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q4VFVTYzJMVHBIZ0x0YUJhbzE5WVRRUjdLRTNma0g0YURZVEMyaTExeTJOLzAv
MzQzNTJlMzEzNjM3MmUzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzOTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALac0MA0GCSqGSIb3DQEBCwUAA4IBAQDOSkzL8nLX
89aMOTxG4+MUvH0QBOXNn5VHS01kmYc+TEWOHTiPpF3Qjs96uH6AO8HVuXarYR40
N5n6pP4jNO6yJSa08G3GwLRbir+jPoJjkCw3TJFncNQFrXAu0frsnPgxMxja+Fjp
L3jsR07sj9EEcTKhTer8hXTZOQf4te4d1LvkzcXYlkoJrPZyJWv1KElZeeC5ZNfg
aQt9itdC78k1X/hBvlzTYy9Ke79tftYG2FiL4a/Zn7hW9YrpZdKumzwM8655HBSH
1KKcUgtT1sDPCvjlR7VJXeJPMwL21rxpfrwR79KMXMEk0yv7DxThzlTGllh8ELqu
NV9VHzfxyunl
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:54 2025 by rpki-client