Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134392e302f32342d3234203d3e20323637393633.roa
File: 34352e3136362e3134392e302f32342d3234203d3e20323637393633.roa (raw, json)
Hash identifier: PCev5voSokk0Z8bWKGKxNhKXLcPJlPjkgbcts9kmSVM=
Subject key identifier: 68:93:1E:5E:7E:7E:B3:51:D9:7C:A8:86:28:5E:D4:13:46:6F:12:62
Certificate issuer: /CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Certificate serial: 0A2453AA0A505FF168B36D7048F2CB18475B1295
Authority key identifier: 2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134392e302f32342d3234203d3e20323637393633.roa
Signing time: Thu 20 Mar 2025 19:33:08 +0000
ROA not before: Thu 20 Mar 2025 19:28:08 +0000
ROA not after: Thu 19 Mar 2026 19:33:08 +0000
asID: 267963
IP address blocks: 45.166.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:24:53:aa:0a:50:5f:f1:68:b3:6d:70:48:f2:cb:18:47:5b:12:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A35055EE84CCFF2F383364115A401FE8535EC74
Validity
Not Before: Mar 20 19:28:08 2025 GMT
Not After : Mar 19 19:33:08 2026 GMT
Subject: CN=68931E5E7E7EB351D97CA886285ED413466F1262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:36:4b:85:21:34:b5:59:07:e4:98:96:c0:
12:40:69:21:24:4e:9d:5e:34:e3:ce:6a:67:d0:b0:
01:7a:41:95:e9:94:ac:de:82:61:01:90:3b:fa:b6:
0b:f5:e5:87:64:30:f9:78:9a:4c:d2:0c:13:68:ab:
2c:65:64:f3:47:9a:9a:e4:d3:7f:4d:c3:e0:73:41:
5e:43:14:00:d2:a3:55:be:55:b3:b5:a5:8c:ec:b0:
7f:0d:05:7a:ba:90:8d:02:ec:07:a6:85:68:d4:f2:
68:b1:e4:3f:01:14:ee:bc:bb:c6:d9:7f:e2:15:cf:
66:6f:95:0e:38:a7:85:42:68:5a:19:95:ea:a6:38:
a6:4e:b0:ef:41:6a:bd:75:6d:5c:e1:57:20:33:e3:
a6:7d:32:47:77:82:a5:6d:49:49:04:c1:6f:74:d1:
86:a7:52:77:9d:4b:6f:f6:7b:d3:71:2f:d6:cd:1d:
a7:b2:55:40:0a:31:7f:f3:46:7a:d2:f4:65:3a:c5:
ad:e5:08:7e:ce:f2:ee:09:63:56:00:e5:94:75:60:
f3:fe:58:1c:fc:4f:cc:1d:4e:c2:c7:f4:de:cb:23:
7c:12:62:94:84:28:5a:81:9d:7a:19:bf:71:b9:49:
59:a7:c0:be:9f:70:73:6b:6c:34:08:3b:1f:e2:94:
22:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:93:1E:5E:7E:7E:B3:51:D9:7C:A8:86:28:5E:D4:13:46:6F:12:62
X509v3 Authority Key Identifier:
keyid:2A:35:05:5E:E8:4C:CF:F2:F3:83:36:41:15:A4:01:FE:85:35:EC:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/2A35055EE84CCFF2F383364115A401FE8535EC74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A35055EE84CCFF2F383364115A401FE8535EC74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G4E9ZG47zWQjjzBD9BiqVHTskKi2zRWtw13yCECGEqet/0/34352e3136362e3134392e302f32342d3234203d3e20323637393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.149.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:13:db:19:2b:08:50:ff:ad:9d:34:94:ad:1d:7a:42:ba:01:
e5:d9:2a:c7:3e:0b:5f:bc:6e:5b:c9:e4:4f:c8:96:ba:2d:13:
e6:3a:2e:c3:ec:48:56:a4:0d:ac:1f:db:a9:63:17:db:89:71:
37:40:9f:f7:f0:32:ec:4e:5b:15:cb:d3:8e:5a:41:86:2a:5d:
09:11:be:c8:94:bc:09:ff:41:1c:95:77:22:aa:df:f4:8f:55:
fc:b7:3d:89:13:00:3b:0f:c4:f2:cd:b4:5a:ae:8a:48:a7:a5:
b2:53:16:6b:69:26:f0:40:ca:c8:08:82:fc:32:a1:cf:f3:21:
98:f5:91:f9:ac:39:ff:17:d8:c3:6b:69:e3:8e:dd:47:61:d0:
fa:cb:9a:df:54:e8:82:dd:ea:1c:3e:d8:ce:3f:7b:3e:08:2d:
9b:0d:54:75:3f:d7:1d:70:c9:53:c5:51:34:e2:56:ce:26:0c:
29:ad:bc:e7:b8:88:5d:a0:80:9f:2e:2d:97:fe:9a:7d:57:58:
bc:77:05:b1:29:7b:a7:1c:3b:49:d3:68:91:fa:69:4e:46:f1:
9d:3c:d0:77:5a:f4:28:13:3b:ef:8f:43:96:6e:2b:20:e4:ae:
a1:23:00:58:a7:8c:ba:6c:b1:77:a6:b9:b8:79:ae:9c:a6:e4:
ac:f0:fb:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:23:48 2025 by rpki-client