Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa
File: 34352e3136382e31322e302f32342d3234203d3e20323638303335.roa (raw, json)
Hash identifier: jzodnD6zOH7D/sZvCR5G59AX0kPmYO/6Q5dUP937I2M=
Subject key identifier: 21:FB:F3:4E:41:B7:E1:00:D2:2B:23:7A:D4:24:41:CB:F4:6E:F4:A4
Certificate issuer: /CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Certificate serial: 1E82E9959978A2C83E8185FA7A42BA409DDCFE36
Authority key identifier: 50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa
Signing time: Thu 06 Mar 2025 09:45:12 +0000
ROA not before: Thu 06 Mar 2025 09:40:12 +0000
ROA not after: Thu 05 Mar 2026 09:45:12 +0000
asID: 268035
IP address blocks: 45.168.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:82:e9:95:99:78:a2:c8:3e:81:85:fa:7a:42:ba:40:9d:dc:fe:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50489A084AA380458A19AC12E8D87EDE0CC41542
Validity
Not Before: Mar 6 09:40:12 2025 GMT
Not After : Mar 5 09:45:12 2026 GMT
Subject: CN=21FBF34E41B7E100D22B237AD42441CBF46EF4A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:08:6d:7c:7d:c8:75:62:11:88:3f:d3:4d:96:
18:02:64:e8:4d:5d:3b:0e:07:7f:ae:a4:c4:26:31:
e0:33:f1:9e:dc:8e:2e:96:57:f3:18:07:f6:82:8f:
99:64:b3:24:49:0e:16:1f:1c:92:07:2d:8d:33:ef:
26:2b:e8:03:4c:b2:51:d3:c8:82:f7:25:10:a5:fb:
be:a3:b8:d4:99:6f:71:ee:f2:d9:f5:d1:9a:1d:37:
f6:d2:ce:ab:11:69:70:d4:3a:61:78:a5:94:8a:58:
f8:84:c0:14:53:cc:fa:8b:a7:a1:cf:21:46:c4:84:
9c:16:26:f3:ab:9a:c6:d1:90:9e:59:06:3e:cf:12:
45:ca:6f:34:87:fe:d5:24:f0:52:56:d7:6f:8b:81:
96:d0:6c:a7:3a:97:1a:03:19:3e:d8:d0:a1:bc:b3:
e2:bd:4e:09:38:cc:cf:c1:c4:14:e3:c4:85:bc:5a:
2d:32:c1:b7:44:41:8d:33:1d:5a:d8:56:71:3b:02:
ee:c9:9c:40:9c:25:9c:b0:fc:43:c7:32:9e:59:2b:
00:0d:1e:54:46:42:35:46:a1:b4:b9:6b:04:44:52:
18:22:b0:9c:c3:85:a7:4e:4a:08:97:44:24:47:a3:
20:81:b7:d1:ab:bd:39:2f:a5:38:d0:61:e5:44:a2:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FB:F3:4E:41:B7:E1:00:D2:2B:23:7A:D4:24:41:CB:F4:6E:F4:A4
X509v3 Authority Key Identifier:
keyid:50:48:9A:08:4A:A3:80:45:8A:19:AC:12:E8:D8:7E:DE:0C:C4:15:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/50489A084AA380458A19AC12E8D87EDE0CC41542.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/50489A084AA380458A19AC12E8D87EDE0CC41542.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gei3midubh8xqSzjeyNd4LL1pZhRtJ1TBoJxc5RVciF8/1/34352e3136382e31322e302f32342d3234203d3e20323638303335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.12.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:5d:42:e6:fb:63:1f:e5:a8:4e:c3:0d:c0:5d:90:f2:de:0f:
a6:bc:a3:ed:5a:fb:61:b2:17:24:a8:f3:42:82:51:37:e9:e4:
8a:dd:fb:7a:f4:b8:5b:c8:cd:13:19:35:d6:60:ee:01:49:4e:
d6:24:b2:41:a0:b8:a7:63:3a:5a:ca:93:23:f0:f2:0e:1f:15:
d0:b6:17:67:e6:04:1c:91:d7:8b:f7:b7:42:8a:9e:1c:83:ea:
44:7a:e2:c6:25:ce:83:11:9c:5a:c2:b8:2e:f1:df:30:a0:a1:
3b:a4:13:f7:ca:f1:52:ff:90:78:3b:85:9a:f1:bc:a4:1b:09:
2e:9d:c6:37:64:87:6f:5e:c1:09:88:24:ad:68:c2:31:98:7d:
da:84:ae:d0:8f:90:64:98:b7:9f:62:80:ca:6c:a4:3f:b6:16:
a7:1c:78:e9:f9:6e:54:cb:fb:81:b9:46:86:b9:4f:29:75:cc:
dc:f4:52:c8:4d:15:bc:bf:58:d0:e7:0f:e8:14:d5:cb:d0:d9:
3c:f8:ec:95:e1:79:38:fb:09:88:6f:fe:7d:3f:ee:d4:cf:3c:
18:78:c7:0f:73:c2:37:3d:66:82:d5:9d:c2:e5:d5:99:d6:d1:
5a:2f:f3:23:29:93:77:f0:34:87:20:83:0f:92:06:13:9c:c3:
c5:50:60:d7
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUHoLplZl4osg+gYX6ekK6QJ3c/jYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA0ODlBMDg0QUEzODA0NThBMTlBQzEyRThEODdFREUw
Q0M0MTU0MjAeFw0yNTAzMDYwOTQwMTJaFw0yNjAzMDUwOTQ1MTJaMDMxMTAvBgNV
BAMTKDIxRkJGMzRFNDFCN0UxMDBEMjJCMjM3QUQ0MjQ0MUNCRjQ2RUY0QTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6CG18fch1YhGIP9NNlhgCZOhN
XTsOB3+upMQmMeAz8Z7cji6WV/MYB/aCj5lksyRJDhYfHJIHLY0z7yYr6ANMslHT
yIL3JRCl+76juNSZb3Hu8tn10ZodN/bSzqsRaXDUOmF4pZSKWPiEwBRTzPqLp6HP
IUbEhJwWJvOrmsbRkJ5ZBj7PEkXKbzSH/tUk8FJW12+LgZbQbKc6lxoDGT7Y0KG8
s+K9Tgk4zM/BxBTjxIW8Wi0ywbdEQY0zHVrYVnE7Au7JnECcJZyw/EPHMp5ZKwAN
HlRGQjVGobS5awREUhgisJzDhadOSgiXRCRHoyCBt9GrvTkvpTjQYeVEouh1AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUIfvzTkG34QDSKyN61CRBy/Ru9KQwHwYDVR0j
BBgwFoAUUEiaCEqjgEWKGawS6Nh+3gzEFUIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR2VpM21pZHViaDh4cVN6amV5TmQ0TEwxcFpoUnRKMVRCb0p4YzVSVmNp
RjgvMS81MDQ4OUEwODRBQTM4MDQ1OEExOUFDMTJFOEQ4N0VERTBDQzQxNTQyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzUwNDg5QTA4NEFBMzgwNDU4
QTE5QUMxMkU4RDg3RURFMENDNDE1NDIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dlaTNtaWR1Ymg4eHFTempleU5kNExMMXBaaFJ0SjFUQm9KeGM1UlZjaUY4LzEv
MzQzNTJlMzEzNjM4MmUzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM4
MzAzMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALagMMA0GCSqGSIb3DQEBCwUAA4IBAQC8XULm+2Mf
5ahOww3AXZDy3g+mvKPtWvthshckqPNCglE36eSK3ft69LhbyM0TGTXWYO4BSU7W
JLJBoLinYzpaypMj8PIOHxXQthdn5gQckdeL97dCip4cg+pEeuLGJc6DEZxawrgu
8d8woKE7pBP3yvFS/5B4O4Wa8bykGwkuncY3ZIdvXsEJiCStaMIxmH3ahK7Qj5Bk
mLefYoDKbKQ/thanHHjp+W5Uy/uBuUaGuU8pdczc9FLITRW8v1jQ5w/oFNXL0Nk8
+OyV4Xk4+wmIb/59P+7UzzwYeMcPc8I3PWaC1Z3C5dWZ1tFaL/MjKZN38DSHIIMP
kgYTnMPFUGDX
-----END CERTIFICATE-----
Generated at Fri Apr 11 14:20:30 2025 by rpki-client