Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37302e302f32342d3234203d3e20323637393932.roa
File: 34352e3136372e37302e302f32342d3234203d3e20323637393932.roa (raw, json)
Hash identifier: 4PFTKwzZ4ZlphL6xr01uHLXmKmRstlduQyA4HYfPXvo=
Subject key identifier: BC:EE:2B:0F:20:63:32:41:49:77:BA:58:77:48:B0:4A:18:D9:5C:16
Certificate issuer: /CN=ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5
Certificate serial: 16A6847D87BF9BBEBEF96C5F82848895127DC126
Authority key identifier: ED:7A:28:B5:CA:14:6B:E4:F2:06:7D:18:78:68:9F:7A:B7:5A:C3:F5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37302e302f32342d3234203d3e20323637393932.roa
Signing time: Mon 31 Mar 2025 14:33:08 +0000
ROA not before: Mon 31 Mar 2025 14:28:08 +0000
ROA not after: Mon 30 Mar 2026 14:33:08 +0000
asID: 267992
IP address blocks: 45.167.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a6:84:7d:87:bf:9b:be:be:f9:6c:5f:82:84:88:95:12:7d:c1:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5
Validity
Not Before: Mar 31 14:28:08 2025 GMT
Not After : Mar 30 14:33:08 2026 GMT
Subject: CN=BCEE2B0F206332414977BA587748B04A18D95C16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:74:ce:ff:2e:4c:f3:6d:92:db:ed:07:30:8e:
c8:83:2e:cc:00:89:97:27:86:19:37:b4:9b:ab:13:
7a:19:12:c1:65:ff:54:f5:5c:d9:88:0e:d8:1d:cf:
da:ed:6b:0d:b1:9b:cc:91:0f:d9:61:c5:42:f8:4a:
83:e9:2a:71:24:dc:b4:9d:ab:a5:63:eb:16:a2:5a:
4b:ef:ae:9a:3f:e8:1a:d2:6a:1d:2d:1d:16:31:55:
b6:d4:e8:b3:7e:69:c2:2a:32:49:95:e7:36:9e:f6:
14:f5:51:fc:10:47:da:5d:84:6c:90:5a:b4:20:8a:
c1:dd:5e:38:9b:45:8c:8b:92:84:de:85:9a:84:03:
5d:51:91:a8:44:ec:c7:a3:3c:91:1f:e9:f4:2c:a0:
9d:fb:9e:b9:0e:b5:83:74:a5:c2:70:65:62:64:be:
00:bf:99:d5:7f:00:ef:20:f6:c3:f0:b4:1b:57:22:
68:ed:48:c9:b4:56:64:1c:61:39:ec:75:21:9e:9f:
b4:62:b1:9f:e8:bc:d5:fd:dc:2e:dc:35:aa:98:cb:
8a:a3:d3:a7:79:d4:1d:da:52:21:ef:96:3b:f2:6b:
ac:e8:07:4f:d4:f1:39:a8:18:c0:33:7a:19:07:eb:
09:5b:04:6d:38:67:3b:d3:e2:e7:82:ae:8c:8a:8f:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EE:2B:0F:20:63:32:41:49:77:BA:58:77:48:B0:4A:18:D9:5C:16
X509v3 Authority Key Identifier:
keyid:ED:7A:28:B5:CA:14:6B:E4:F2:06:7D:18:78:68:9F:7A:B7:5A:C3:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/ED7A28B5CA146BE4F2067D1878689F7AB75AC3F5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBsi2L5M1PZJt3gLbqmix1CrRuWAAXZnmDdwqQkMwuna/0/34352e3136372e37302e302f32342d3234203d3e20323637393932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.70.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:e1:ef:5d:ec:16:d1:45:73:0c:09:be:c3:cf:8f:a1:42:49:
dd:ed:0e:01:a5:e5:f7:ec:96:b2:d6:ab:4a:28:e1:68:59:16:
77:a7:46:b4:cc:4b:d6:5b:17:ff:1b:e3:1e:17:9e:d3:b2:90:
00:2d:aa:85:86:e8:78:43:6a:2a:82:91:0b:3f:d0:d4:73:93:
2f:1b:af:70:f4:8e:5b:8a:1a:da:64:9a:4e:a9:23:8f:ad:b2:
d8:99:10:5a:8a:d3:1e:53:dc:81:bd:bb:c4:fa:ab:52:be:b9:
51:52:6a:79:e1:25:56:54:42:13:8d:9c:74:3c:64:db:b1:fe:
34:9e:f4:08:e3:32:db:da:24:55:29:b4:10:83:52:63:4a:69:
82:93:f6:a3:f2:34:2d:fe:f8:7d:bb:d1:28:36:c5:6c:1f:28:
b5:a9:7d:ee:37:52:1a:98:b7:d6:e7:e7:d3:e0:fa:80:e0:b7:
b2:99:da:35:f4:bf:7e:7b:a8:8d:34:69:28:86:70:5d:66:7d:
3b:c1:7f:05:9e:f3:28:77:3f:c1:da:3d:85:51:3e:65:f9:22:
7b:34:27:2f:6d:45:f6:fb:5d:49:f6:d9:07:0a:a6:93:73:b8:
87:7c:0e:27:61:09:99:1a:69:0e:40:02:51:67:71:28:c8:37:
42:7d:0a:b0
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUFqaEfYe/m76++WxfgoSIlRJ9wSYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUQ3QTI4QjVDQTE0NkJFNEYyMDY3RDE4Nzg2ODlGN0FC
NzVBQzNGNTAeFw0yNTAzMzExNDI4MDhaFw0yNjAzMzAxNDMzMDhaMDMxMTAvBgNV
BAMTKEJDRUUyQjBGMjA2MzMyNDE0OTc3QkE1ODc3NDhCMDRBMThEOTVDMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzdM7/LkzzbZLb7QcwjsiDLswA
iZcnhhk3tJurE3oZEsFl/1T1XNmIDtgdz9rtaw2xm8yRD9lhxUL4SoPpKnEk3LSd
q6Vj6xaiWkvvrpo/6BrSah0tHRYxVbbU6LN+acIqMkmV5zae9hT1UfwQR9pdhGyQ
WrQgisHdXjibRYyLkoTehZqEA11RkahE7MejPJEf6fQsoJ37nrkOtYN0pcJwZWJk
vgC/mdV/AO8g9sPwtBtXImjtSMm0VmQcYTnsdSGen7RisZ/ovNX93C7cNaqYy4qj
06d51B3aUiHvljvya6zoB0/U8TmoGMAzehkH6wlbBG04ZzvT4ueCroyKj4VHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvO4rDyBjMkFJd7pYd0iwShjZXBYwHwYDVR0j
BBgwFoAU7XootcoUa+TyBn0YeGiferdaw/UwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0JzaTJMNU0xUFpKdDNnTGJxbWl4MUNyUnVXQUFYWm5tRGR3cVFrTXd1
bmEvMC9FRDdBMjhCNUNBMTQ2QkU0RjIwNjdEMTg3ODY4OUY3QUI3NUFDM0Y1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0VEN0EyOEI1Q0ExNDZCRTRG
MjA2N0QxODc4Njg5RjdBQjc1QUMzRjUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dCc2kyTDVNMVBaSnQzZ0xicW1peDFDclJ1V0FBWFpubURkd3FRa013dW5hLzAv
MzQzNTJlMzEzNjM3MmUzNzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM3
MzkzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALadGMA0GCSqGSIb3DQEBCwUAA4IBAQC14e9d7BbR
RXMMCb7Dz4+hQknd7Q4BpeX37Jay1qtKKOFoWRZ3p0a0zEvWWxf/G+MeF57TspAA
LaqFhuh4Q2oqgpELP9DUc5MvG69w9I5bihraZJpOqSOPrbLYmRBaitMeU9yBvbvE
+qtSvrlRUmp54SVWVEITjZx0PGTbsf40nvQI4zLb2iRVKbQQg1JjSmmCk/aj8jQt
/vh9u9EoNsVsHyi1qX3uN1IamLfW5+fT4PqA4Leymdo19L9+e6iNNGkohnBdZn07
wX8FnvModz/B2j2FUT5l+SJ7NCcvbUX2+11J9tkHCqaTc7iHfA4nYQmZGmkOQAJR
Z3EoyDdCfQqw
-----END CERTIFICATE-----
Generated at Mon Apr 14 10:28:53 2025 by rpki-client