Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
File: 34352e37302e3130302e302f32322d3235203d3e20323637353637.roa (raw, json)
Hash identifier: JdY5vo7gOIlbF6dw2PqQxnI+mfdxZu+3rWUsiBxoOmU=
Subject key identifier: 4A:2B:60:AF:12:A4:1D:F3:DF:90:CD:AA:CB:36:F3:2C:D3:12:E5:5D
Certificate issuer: /CN=4E27A0B096E02E90683CA85B3CA4A97B1B6060C4
Certificate serial: 45454765BF492DBFA506924C8B123B1D20600AD3
Authority key identifier: 4E:27:A0:B0:96:E0:2E:90:68:3C:A8:5B:3C:A4:A9:7B:1B:60:60:C4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
Signing time: Thu 06 Mar 2025 12:00:48 +0000
ROA not before: Thu 06 Mar 2025 11:55:48 +0000
ROA not after: Thu 05 Mar 2026 12:00:48 +0000
asID: 267567
IP address blocks: 45.70.100.0/22 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:45:47:65:bf:49:2d:bf:a5:06:92:4c:8b:12:3b:1d:20:60:0a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E27A0B096E02E90683CA85B3CA4A97B1B6060C4
Validity
Not Before: Mar 6 11:55:48 2025 GMT
Not After : Mar 5 12:00:48 2026 GMT
Subject: CN=4A2B60AF12A41DF3DF90CDAACB36F32CD312E55D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:17:de:c1:cf:5d:0b:f1:6f:4d:87:b5:63:
e9:b5:e7:69:54:10:40:72:85:b6:4b:2d:0d:90:5e:
68:1b:63:64:80:bc:bd:82:bd:c5:44:15:1b:8d:2f:
c7:a3:d3:8d:0d:b0:a8:ec:0a:b0:ce:e4:ce:97:83:
c2:33:9c:33:d8:dd:8d:d7:79:88:c4:42:7b:37:5f:
87:a4:0f:dd:53:98:2f:97:3e:f1:c8:48:cd:ef:5a:
1c:13:05:02:8a:09:5c:ad:91:e9:23:af:5e:76:e2:
17:36:3c:cd:8a:fc:ab:d3:e4:ee:19:1c:06:7f:51:
2b:84:ee:79:72:4c:3b:b8:24:df:56:71:67:dc:40:
7f:29:0d:ec:61:7a:2d:dd:3a:55:df:ab:f4:b9:06:
6c:49:12:d4:7c:a8:0c:20:9d:c9:33:57:d4:fc:9e:
69:9c:c2:5a:a7:4c:a7:e1:ae:dc:a3:0c:b5:17:93:
9e:73:99:ef:93:2c:bb:67:af:42:27:cf:1b:4a:ad:
a9:b5:b3:39:07:e2:a0:92:9e:c1:03:28:75:6c:7d:
8a:1a:78:ae:f4:bd:93:90:ba:b6:89:33:8f:2f:b2:
56:78:06:23:23:29:98:19:b5:9a:ca:28:15:b5:ac:
41:60:59:01:2b:9a:ed:cd:89:35:ea:1d:68:e7:4f:
49:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:2B:60:AF:12:A4:1D:F3:DF:90:CD:AA:CB:36:F3:2C:D3:12:E5:5D
X509v3 Authority Key Identifier:
keyid:4E:27:A0:B0:96:E0:2E:90:68:3C:A8:5B:3C:A4:A9:7B:1B:60:60:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4E27A0B096E02E90683CA85B3CA4A97B1B6060C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EHsnJFcriTSzycAWbF2uTFN9LettcaZPA6K7m91RmZm8/2/34352e37302e3130302e302f32322d3235203d3e20323637353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.100.0/22
Signature Algorithm: sha256WithRSAEncryption
40:64:ce:e0:aa:cd:cf:3e:f6:45:00:d6:6a:f8:ae:8c:3c:7d:
f1:f0:2c:19:65:19:b2:f8:84:57:55:e5:f1:43:48:43:34:91:
50:6c:01:5f:8b:c9:19:e2:d8:0a:f0:2e:89:3c:aa:64:32:98:
32:22:62:dc:2b:df:72:0f:27:d2:69:63:6b:e2:da:76:68:ae:
fa:01:06:37:92:7f:5d:fe:9a:00:3b:da:49:16:4a:19:80:10:
48:f0:37:09:bd:84:74:d5:3c:e5:b5:30:26:57:94:ca:02:85:
39:09:ea:a7:a2:42:c2:61:f3:03:28:0c:3d:b7:36:76:53:f2:
7e:3c:26:14:15:e2:c1:29:2d:15:ee:35:1d:e6:80:3b:61:04:
2b:11:33:e0:5b:75:74:a9:93:1e:e2:06:39:dd:d5:7e:a9:4b:
da:00:f0:33:92:33:64:16:66:55:a1:dc:94:ec:ca:4c:9a:a2:
f8:75:fb:92:9e:9f:28:a9:3b:ad:53:65:2c:e8:59:bd:2d:9b:
32:e3:31:db:bc:12:9a:c8:04:04:aa:46:5c:98:ae:54:a4:f3:
08:14:34:68:49:61:df:19:a6:6e:3b:e4:e5:9e:8f:da:72:dc:
90:66:de:bd:85:9c:dd:a9:46:8b:38:78:2f:98:57:d0:32:ff:
0a:25:69:aa
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIURUVHZb9JLb+lBpJMixI7HSBgCtMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEUyN0EwQjA5NkUwMkU5MDY4M0NBODVCM0NBNEE5N0Ix
QjYwNjBDNDAeFw0yNTAzMDYxMTU1NDhaFw0yNjAzMDUxMjAwNDhaMDMxMTAvBgNV
BAMTKDRBMkI2MEFGMTJBNDFERjNERjkwQ0RBQUNCMzZGMzJDRDMxMkU1NUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVxfewc9dC/FvTYe1Y+m152lU
EEByhbZLLQ2QXmgbY2SAvL2CvcVEFRuNL8ej040NsKjsCrDO5M6Xg8IznDPY3Y3X
eYjEQns3X4ekD91TmC+XPvHISM3vWhwTBQKKCVytkekjr1524hc2PM2K/KvT5O4Z
HAZ/USuE7nlyTDu4JN9WcWfcQH8pDexhei3dOlXfq/S5BmxJEtR8qAwgnckzV9T8
nmmcwlqnTKfhrtyjDLUXk55zme+TLLtnr0InzxtKram1szkH4qCSnsEDKHVsfYoa
eK70vZOQuraJM48vslZ4BiMjKZgZtZrKKBW1rEFgWQErmu3NiTXqHWjnT0lBAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUSitgrxKkHfPfkM2qyzbzLNMS5V0wHwYDVR0j
BBgwFoAUTiegsJbgLpBoPKhbPKSpextgYMQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRUhzbkpGY3JpVFN6eWNBV2JGMnVURk45TGV0dGNhWlBBNks3bTkxUm1a
bTgvMi80RTI3QTBCMDk2RTAyRTkwNjgzQ0E4NUIzQ0E0QTk3QjFCNjA2MEM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRFMjdBMEIwOTZFMDJFOTA2
ODNDQTg1QjNDQTRBOTdCMUI2MDYwQzQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0VIc25KRmNyaVRTenljQVdiRjJ1VEZOOUxldHRjYVpQQTZLN205MVJtWm04LzIv
MzQzNTJlMzczMDJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzNTIwM2QzZTIwMzIzNjM3
MzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLUZkMA0GCSqGSIb3DQEBCwUAA4IBAQBAZM7gqs3P
PvZFANZq+K6MPH3x8CwZZRmy+IRXVeXxQ0hDNJFQbAFfi8kZ4tgK8C6JPKpkMpgy
ImLcK99yDyfSaWNr4tp2aK76AQY3kn9d/poAO9pJFkoZgBBI8DcJvYR01TzltTAm
V5TKAoU5CeqnokLCYfMDKAw9tzZ2U/J+PCYUFeLBKS0V7jUd5oA7YQQrETPgW3V0
qZMe4gY53dV+qUvaAPAzkjNkFmZVodyU7MpMmqL4dfuSnp8oqTutU2Us6Fm9LZsy
4zHbvBKayAQEqkZcmK5UpPMIFDRoSWHfGaZuO+Tlno/actyQZt69hZzdqUaLOHgv
mFfQMv8KJWmq
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:51:43 2025 by rpki-client