Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/34352e3232352e33322e302f32342d3234203d3e203631353834.roa
File: 34352e3232352e33322e302f32342d3234203d3e203631353834.roa (raw, json)
Hash identifier: F0vI94VoKdMyR+OBcnuVhp0Qrg7nfLiUnl58nNNccEw=
Subject key identifier: 88:B2:BA:E6:7F:DE:AE:BD:7D:C6:85:BB:EA:0E:61:C4:B8:91:A0:2A
Certificate issuer: /CN=6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A
Certificate serial: 56DB509DAA056D8BBD465119DA348D524494575F
Authority key identifier: 6A:39:87:EE:9B:CC:77:9A:F7:F1:2E:B0:5A:91:DC:AC:02:CB:61:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/34352e3232352e33322e302f32342d3234203d3e203631353834.roa
Signing time: Mon 26 Jun 2023 11:53:44 +0000
ROA not before: Mon 26 Jun 2023 11:48:44 +0000
ROA not after: Mon 24 Jun 2024 11:53:44 +0000
asID: 61584
IP address blocks: 45.225.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:db:50:9d:aa:05:6d:8b:bd:46:51:19:da:34:8d:52:44:94:57:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A
Validity
Not Before: Jun 26 11:48:44 2023 GMT
Not After : Jun 24 11:53:44 2024 GMT
Subject: CN=88B2BAE67FDEAEBD7DC685BBEA0E61C4B891A02A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a2:39:da:08:69:ee:98:45:9d:4b:ec:54:0e:
50:fa:4e:ac:bc:4a:8e:2e:df:93:c5:1c:10:1c:bd:
d7:26:84:ac:f2:ec:3a:3f:42:98:84:2a:b9:24:10:
aa:03:43:06:8c:53:2a:04:f2:09:4c:52:60:80:cb:
48:df:b7:d6:00:3b:3d:7c:41:85:30:41:4c:ac:2b:
8a:81:38:14:03:ab:d4:4c:23:0e:e9:1f:a1:27:cb:
2f:fb:68:d9:3c:30:d1:29:13:cc:8d:41:ab:24:90:
d1:91:d7:4f:0f:25:3a:b3:75:ea:20:6b:49:3b:5e:
48:78:b0:3b:68:1e:bd:80:ce:85:7b:56:52:2e:d6:
65:aa:bb:96:66:15:82:c3:07:d8:f5:66:a3:31:fe:
54:8a:dd:50:a0:2f:4c:75:cb:9f:21:a2:4c:a8:3a:
14:ea:3b:1e:08:da:40:f1:53:2d:a1:0a:de:27:38:
78:8d:f3:d1:c0:2e:10:16:c7:4a:b8:70:a5:54:76:
c9:19:52:c1:71:ee:fa:a5:54:f1:d4:18:c4:17:41:
43:25:55:59:ec:69:73:3a:83:6b:f6:2a:1c:47:7b:
ef:f9:3e:76:7e:a2:fb:73:1a:c9:1b:ac:34:63:18:
99:69:d7:6d:dd:44:02:0a:88:5b:c9:7e:21:3a:77:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B2:BA:E6:7F:DE:AE:BD:7D:C6:85:BB:EA:0E:61:C4:B8:91:A0:2A
X509v3 Authority Key Identifier:
keyid:6A:39:87:EE:9B:CC:77:9A:F7:F1:2E:B0:5A:91:DC:AC:02:CB:61:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6A3987EE9BCC779AF7F12EB05A91DCAC02CB611A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/djMX3eriBmQBm6cFWrruYimYsS7cyq4zsxAo8tUBETu/1/34352e3232352e33322e302f32342d3234203d3e203631353834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.32.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c2:2f:26:af:cc:70:bf:fb:f3:a4:48:69:26:84:94:4e:43:
1d:f4:a8:c2:b7:b0:6f:56:0e:df:38:28:c6:eb:e1:31:41:aa:
08:45:c1:a0:c2:7b:ca:c0:1f:ef:33:cd:fc:84:cf:7d:7b:59:
ca:fb:b7:e9:18:d8:12:7f:74:b6:bc:77:b5:fb:b6:55:13:fa:
d0:6b:43:16:72:f9:a6:ed:ad:d4:a8:ec:37:19:17:ad:8d:ec:
ea:d4:2d:ee:45:f4:f5:09:e8:f1:e1:5f:f4:ae:42:f4:80:1c:
8b:5c:e1:18:84:bb:9f:41:29:98:25:48:c4:fc:0e:b2:00:3f:
d9:ed:21:f2:e5:00:a9:01:f1:62:23:9c:80:7c:fd:33:42:84:
3d:47:0a:4f:5c:48:f5:55:1a:e7:a9:8f:b2:87:cd:a6:25:83:
db:0d:30:3d:a0:0f:65:c8:3e:f2:f9:f9:fe:d2:13:65:4f:2e:
f3:5f:7d:26:c3:b0:e3:35:cc:63:12:bb:36:b4:cd:7e:bc:af:
9c:b9:38:d4:a3:60:27:ed:c1:7a:fd:56:6c:bd:72:b0:ac:34:
d6:66:1a:73:e5:3d:7c:f4:7a:b6:a2:90:21:b9:97:bc:c9:ba:
42:8b:54:84:88:50:7e:91:89:85:f6:c7:8c:e7:0d:85:d7:d3:
74:f0:67:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:32:58 2025 by rpki-client