Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa
File: 34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa (raw, json)
Hash identifier: doFZycdK74IAch35EEoQ9Wd/wGNFT0zHxIpbI/Z5hD0=
Subject key identifier: 50:81:03:72:8B:39:9C:C4:40:A6:80:AA:B7:72:9B:08:B2:2A:49:4D
Certificate issuer: /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial: 4E359D3BCFDC2E4B231154440EBBC708F1B71A8B
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa
Signing time: Wed 05 Mar 2025 19:00:09 +0000
ROA not before: Wed 05 Mar 2025 18:55:09 +0000
ROA not after: Wed 04 Mar 2026 19:00:09 +0000
asID: 269192
IP address blocks: 45.181.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:35:9d:3b:cf:dc:2e:4b:23:11:54:44:0e:bb:c7:08:f1:b7:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
Validity
Not Before: Mar 5 18:55:09 2025 GMT
Not After : Mar 4 19:00:09 2026 GMT
Subject: CN=508103728B399CC440A680AAB7729B08B22A494D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:6a:e4:25:d5:f4:36:1d:cf:7d:ba:31:ca:
b9:2e:d5:40:c2:83:c4:c5:24:82:cf:ee:1f:19:49:
c6:b9:8d:6e:8d:6c:66:fa:8a:46:b9:69:cd:de:74:
d8:f0:83:c4:46:a7:75:ca:20:3c:18:f4:18:ae:2c:
f6:31:a0:f6:87:80:ae:b1:91:9f:82:5e:1e:6a:be:
28:9d:91:cb:e6:63:c0:ba:cf:a1:5a:54:62:53:44:
6a:b6:8f:9e:b9:92:d4:79:e1:98:a4:49:38:14:21:
d5:6f:05:19:d4:93:65:fc:e5:5e:d1:62:e7:43:a5:
7f:79:47:e1:b3:96:18:f6:bd:5c:aa:c5:42:55:1a:
3f:6d:eb:a2:7e:52:29:84:50:ec:46:40:24:f2:dc:
5f:c1:8b:3d:6a:5d:1a:65:aa:1e:19:8c:7b:6f:54:
42:32:5c:75:71:34:a0:da:4d:8f:89:2f:50:9f:42:
df:da:2d:d8:60:fc:d3:db:4b:ea:5d:f7:9a:7d:8e:
5f:69:78:8d:69:36:3d:40:ee:58:42:2e:20:a0:91:
90:12:3d:b7:50:7b:d0:9b:cf:d8:58:17:2c:c4:02:
5f:cb:d4:b4:b1:57:d6:e4:77:3a:2d:93:5b:92:2f:
61:cc:9f:b4:b6:61:d0:87:93:1d:f0:09:72:fb:65:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:81:03:72:8B:39:9C:C4:40:A6:80:AA:B7:72:9B:08:B2:2A:49:4D
X509v3 Authority Key Identifier:
keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/34352e3138312e3134392e302f32342d3234203d3e20323639313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.181.149.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f9:52:5f:22:c0:79:26:cf:95:ae:25:2e:06:14:d1:dc:d6:
87:3d:7d:52:63:29:e0:d6:e3:1d:c1:a8:c4:b3:cb:ea:43:ca:
91:43:e5:7e:b2:cd:65:56:de:80:59:61:88:28:1a:8c:2e:30:
eb:9f:98:01:50:3e:0d:d1:f1:ca:b7:f3:e5:1f:10:33:3b:2b:
e7:05:78:2a:af:b6:f1:26:12:73:e3:60:00:97:fe:8e:89:26:
06:63:4d:2f:6f:99:a8:96:b2:f1:1b:d1:d7:a5:14:a7:5d:ae:
b8:7f:42:75:64:59:d2:4d:3c:22:d1:33:0f:af:dc:f0:48:5c:
a1:fd:6d:92:c7:a7:d2:d3:01:4c:40:f4:c2:50:73:f5:7e:18:
43:42:94:c9:21:34:a7:ba:48:ac:0e:07:6b:b6:45:c9:b5:7a:
58:20:a7:57:40:a9:80:4a:8a:6f:cc:f8:e2:a8:df:37:f8:db:
a9:02:bf:df:0e:f6:9e:93:fd:d9:75:7e:a8:e5:82:36:82:22:
93:d9:6a:36:54:e4:53:3f:c2:a3:8f:c5:ad:68:b3:c3:03:03:
88:24:05:d2:9d:9f:ae:3f:07:20:df:76:24:db:88:dd:36:d6:
4c:51:43:b0:05:f0:2e:6d:84:d4:61:8a:cf:27:40:9c:cc:6e:
41:fe:4c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:34:31 2025 by rpki-client