Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
File: 34352e3136372e35342e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier: fQk2Bw/tVbncB2C+5kL/AzYexHwOJyP+GhXUtSKUxmc=
Subject key identifier: 30:F1:40:55:DA:84:50:3B:74:20:9D:DE:38:E7:7D:F6:FE:9B:AE:0A
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 2EA205CFD3585F150239C95995B59B9913EE7860
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:44:07 +0000
ROA not before: Mon 24 Mar 2025 20:39:07 +0000
ROA not after: Mon 23 Mar 2026 20:44:07 +0000
asID: 267991
IP address blocks: 45.167.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a2:05:cf:d3:58:5f:15:02:39:c9:59:95:b5:9b:99:13:ee:78:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:39:07 2025 GMT
Not After : Mar 23 20:44:07 2026 GMT
Subject: CN=30F14055DA84503B74209DDE38E77DF6FE9BAE0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:15:2e:6f:8e:68:05:09:52:38:83:93:61:c2:
9d:8f:42:e1:dc:9c:8c:30:05:ab:d8:cc:54:c4:16:
b1:2d:ee:f7:0f:b3:d9:91:88:90:20:48:2c:66:d3:
07:3f:5d:d2:55:75:fc:e6:f4:49:ff:43:00:1c:fb:
52:8f:d2:c5:36:54:0e:de:05:d3:36:eb:1f:63:7e:
35:00:75:e8:98:5b:4c:4e:b5:19:af:63:51:3e:64:
80:2b:48:e6:3f:3f:02:f2:82:65:c1:de:de:9a:74:
07:07:0a:33:93:bd:17:84:b3:24:63:62:fc:9a:d4:
ca:c1:50:08:59:ec:f9:2e:86:19:14:65:19:5e:73:
3e:04:11:e9:27:d2:16:de:04:81:8c:45:54:f6:46:
7e:15:a3:2c:c6:38:02:75:4d:3a:f9:5b:3b:e9:88:
b2:5d:c7:53:54:45:18:96:6c:60:5a:4c:6a:ae:6f:
50:43:73:d3:a3:0e:3e:19:ee:b6:c1:15:f7:24:dd:
91:65:ea:a8:0d:7e:ee:09:c1:50:54:4f:d1:b2:22:
6e:02:f2:92:89:ec:bc:d1:88:7d:7f:6a:4d:36:e7:
e5:2f:73:03:67:82:00:41:96:fc:3f:64:6f:56:57:
e5:2b:42:4e:7f:d1:cd:55:96:9f:3e:45:48:b7:58:
ec:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F1:40:55:DA:84:50:3B:74:20:9D:DE:38:E7:7D:F6:FE:9B:AE:0A
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35342e302f32342d3234203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.54.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:72:b1:d0:e9:1b:78:83:74:23:30:3b:0a:b9:57:56:50:30:
22:98:ed:e8:0f:34:8c:8d:ef:9c:ce:98:7e:8f:77:72:b6:0f:
77:70:af:f0:18:a6:04:e4:3f:35:52:8c:8e:0b:84:b2:83:99:
38:9a:7a:c0:66:1e:f2:3e:06:9f:00:e7:29:3e:13:33:fa:6e:
2d:13:e8:5a:3e:78:b8:01:1a:49:0c:36:02:c2:18:72:50:56:
99:35:6a:59:e3:6f:f5:f5:e5:83:ac:15:bc:ec:39:ad:23:ae:
c7:67:05:aa:c0:80:10:0a:46:12:77:ad:ea:ee:76:5a:71:ab:
ec:35:bd:a6:62:af:9c:29:7e:39:62:42:8f:7e:b6:e9:a2:10:
46:4c:4b:ff:ca:ec:f1:63:ba:b6:84:4c:c2:6d:7a:bf:46:16:
4f:16:e8:52:31:9e:d7:62:8c:6f:37:b0:7b:5e:9c:f9:7a:a1:
b0:4e:b1:bf:31:ef:d6:62:eb:b1:90:ae:cf:dd:a6:7e:b6:3f:
c5:9f:2d:45:86:da:2b:4a:5d:2d:b6:8e:e8:78:3b:b3:8c:ae:
91:9d:72:f8:4b:fb:85:30:62:75:a9:c6:57:6f:7e:3b:1c:fc:
63:21:20:b9:f4:02:57:8b:f4:1f:c6:23:9c:5a:a5:44:98:56:
d9:b2:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:51:01 2025 by rpki-client