Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa
File: 34352e3136312e32312e302f32342d3234203d3e20323638343430.roa (raw, json)
Hash identifier: O5YrjsJlF+wkCqs7u+G7RNEd9xtqo4z0Bd+96QIIQek=
Subject key identifier: F5:BF:23:B3:74:A4:A2:D9:25:88:8A:56:5F:C0:08:97:22:5D:EC:3B
Certificate issuer: /CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Certificate serial: 10DB9552D1287D7D92DEDD2B519B783CA5A46042
Authority key identifier: 3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa
Signing time: Mon 05 May 2025 20:58:38 +0000
ROA not before: Mon 05 May 2025 20:53:38 +0000
ROA not after: Mon 04 May 2026 20:58:38 +0000
asID: 268440
IP address blocks: 45.161.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:db:95:52:d1:28:7d:7d:92:de:dd:2b:51:9b:78:3c:a5:a4:60:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA
Validity
Not Before: May 5 20:53:38 2025 GMT
Not After : May 4 20:58:38 2026 GMT
Subject: CN=F5BF23B374A4A2D925888A565FC00897225DEC3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:0b:26:8a:55:26:6c:2b:58:06:4c:6c:9f:
6e:44:5b:79:6c:3c:ec:b5:57:73:16:7c:cb:13:b3:
9b:eb:ca:46:75:a2:42:fc:e8:31:03:0f:ad:2d:6c:
a4:6d:d7:86:c3:19:21:08:ad:b3:24:47:5e:d1:47:
ec:0d:56:a2:cd:d7:ee:59:91:64:d3:fa:23:bd:0f:
af:de:4b:73:83:e7:46:f0:bb:7d:21:fb:e6:16:f9:
d3:e0:8f:a2:ec:11:cd:0c:42:16:f7:1f:ed:4c:c4:
55:1c:fd:c4:37:bd:11:f2:9f:7e:89:d8:f6:25:8c:
da:9d:0d:0e:65:55:50:2b:09:0d:15:7b:9a:ef:05:
0a:4a:d4:84:4d:00:ad:39:58:58:62:c3:41:c3:3f:
5b:38:b8:19:22:27:7d:c0:6b:2d:9f:c5:b3:80:0d:
8f:9f:a3:6d:50:4c:95:c6:e7:fb:3b:d2:37:dd:52:
73:70:b8:63:e2:11:a1:47:63:46:d8:7f:65:9f:10:
1c:2a:7a:18:9b:b5:18:14:1f:8c:98:b6:ee:86:99:
f1:f0:8e:38:76:8b:af:27:40:e0:df:33:33:dc:6c:
28:9d:b5:6d:ae:63:5b:74:c6:6f:83:0a:f8:d5:76:
d2:fd:c8:9a:98:aa:27:f7:e0:c6:42:48:96:84:68:
a8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BF:23:B3:74:A4:A2:D9:25:88:8A:56:5F:C0:08:97:22:5D:EC:3B
X509v3 Authority Key Identifier:
keyid:3E:C1:D6:02:0A:56:64:8E:4D:80:57:9E:DE:6A:9A:E6:4E:D1:AD:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3EC1D6020A56648E4D80579EDE6A9AE64ED1ADCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HbM3GcD9vbhXuXt6czJdin5YCv92asdECneSsrp1de2Y/0/34352e3136312e32312e302f32342d3234203d3e20323638343430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.21.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:0f:a9:2c:78:2a:82:bf:04:4d:63:3f:34:9b:cb:a4:80:68:
0b:94:25:05:2c:61:6f:e3:44:4f:48:e7:89:4f:ed:16:d2:0e:
a3:c5:27:16:8e:fc:bd:f7:db:80:e7:97:54:27:07:b6:a1:bf:
0e:b6:17:b0:87:df:b8:18:b9:13:3b:46:b3:92:30:d0:11:f9:
72:6e:42:f3:0e:20:9a:7a:c9:29:f3:dd:cd:06:0a:87:e4:65:
78:c3:06:db:65:2b:2f:b7:79:d0:83:04:7e:6c:c7:c2:5f:f8:
fc:85:e8:bd:11:8a:36:32:bb:1d:1f:65:5e:f3:96:4f:17:ef:
a4:29:26:9f:f3:2f:17:00:49:a9:f7:ef:cf:7b:cf:03:f5:a8:
2c:41:d6:30:b4:70:55:b6:49:8f:ab:9f:45:1c:89:16:d7:98:
bc:70:eb:9f:41:83:84:4f:b1:7d:fe:f7:19:85:db:15:5d:5f:
09:ec:dd:8f:9a:bc:54:bf:f2:30:2f:0d:8e:21:ee:63:6d:3c:
07:3e:7a:b9:00:8b:00:fe:68:c2:36:fd:6d:7a:bc:da:b7:8f:
26:e1:69:14:5f:a5:89:e2:1b:d3:6c:fe:f9:16:53:2c:22:26:
a9:e7:d2:3b:e9:a0:c3:87:08:bd:7b:43:88:ff:d0:a3:4c:fd:
81:73:b0:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:06:52 2025 by rpki-client