Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa
File: 34352e3136372e35352e302f32342d3234203d3e20323637393931.roa (raw, json)
Hash identifier: DpVA1KhZGhrWo2vhjMpvzM7+H0/V67m4XZdXYP0XWZU=
Subject key identifier: 50:F2:52:59:7D:25:AC:5F:2E:96:C4:A3:F6:D4:11:61:7C:8C:4A:D7
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 2D7A0DDA4FD4B2572E02F88FC0784557ABB6E995
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:44:08 +0000
ROA not before: Mon 24 Mar 2025 20:39:08 +0000
ROA not after: Mon 23 Mar 2026 20:44:08 +0000
asID: 267991
IP address blocks: 45.167.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:7a:0d:da:4f:d4:b2:57:2e:02:f8:8f:c0:78:45:57:ab:b6:e9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:39:08 2025 GMT
Not After : Mar 23 20:44:08 2026 GMT
Subject: CN=50F252597D25AC5F2E96C4A3F6D411617C8C4AD7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:26:e6:30:2e:54:1d:5f:52:11:d0:3c:b8:81:
35:98:11:df:2d:e1:b8:ac:31:bb:c1:78:14:c8:07:
8f:b8:26:f8:f6:76:88:a1:b1:3d:6f:f5:80:cd:57:
df:7a:ea:ca:a5:a7:88:d1:17:f7:85:03:31:35:e3:
7c:5a:95:5d:32:a6:94:ca:2c:5d:70:8f:63:d9:91:
b6:3b:89:59:9b:51:c6:a5:08:ed:73:d9:52:9c:e2:
64:70:cb:90:c9:b5:71:26:7e:6b:88:be:0c:59:7a:
ff:0c:7d:28:13:af:ce:43:8b:cc:02:38:de:61:81:
f3:e3:1c:06:2a:1c:d6:6a:59:76:27:d6:d7:52:27:
aa:31:86:4b:02:3c:c3:e3:e9:96:da:78:c0:60:e8:
de:b1:81:05:48:56:25:d3:8f:c6:74:99:a9:1d:38:
fe:17:79:b6:14:2c:97:c3:1e:52:28:3d:7c:ad:94:
f5:64:a2:58:64:4c:a0:de:e4:45:f6:ba:ca:3d:1b:
24:5e:67:0c:1e:55:9b:7d:d2:65:d0:5c:36:c1:ee:
c4:5a:0b:58:72:e7:e5:b5:05:eb:51:3d:64:d5:98:
30:f9:47:34:b8:e2:06:17:7b:dc:a1:a9:47:06:3a:
85:fe:28:11:f9:c3:d1:f6:f8:a2:c9:05:2a:aa:83:
30:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F2:52:59:7D:25:AC:5F:2E:96:C4:A3:F6:D4:11:61:7C:8C:4A:D7
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/34352e3136372e35352e302f32342d3234203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:73:26:e9:a3:3b:77:52:86:1b:52:65:fc:67:6c:a6:ff:8a:
29:a6:fe:9e:19:17:ef:7f:a7:82:92:96:b2:43:f5:a5:e8:60:
ac:4a:c1:73:b8:8f:e2:6c:44:f6:b6:90:39:8a:79:c7:d3:43:
d7:2c:ab:48:20:b6:21:3f:fe:1d:bc:7c:51:4d:da:fe:90:25:
3d:e5:97:c8:5e:b4:2d:24:39:89:47:55:fe:1d:cf:85:34:c3:
2f:9e:0f:62:06:38:f1:fa:b6:da:73:02:5b:6a:3a:9c:c9:11:
e4:8d:96:e5:d5:4f:58:c3:db:0c:dc:b7:a9:e1:db:fe:5a:dc:
38:c2:64:c5:c1:f4:56:02:a3:f2:67:cf:bc:4a:49:13:f9:40:
34:68:21:0c:9a:fc:97:72:f4:be:13:33:95:db:dd:70:04:dd:
ab:b5:43:e9:02:09:81:f1:b5:5c:bd:f0:f3:35:f9:62:f0:e1:
a2:c5:0b:ce:f5:24:34:59:3b:04:89:2c:a1:fe:ff:29:be:a8:
48:3c:3e:82:71:d9:b4:89:9f:85:57:16:cb:f8:51:09:56:f3:
dd:fa:71:5e:2f:e4:1f:08:24:0c:26:e5:f9:78:13:08:23:0c:
c2:47:04:f9:b6:92:f6:d7:9f:ea:fd:76:a6:f7:07:c1:db:0b:
3e:d6:55:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:50 2025 by rpki-client