Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
File: 34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa (raw, json)
Hash identifier: aMmue8j5MNlIu7OVFDXPeuy/1SoIsyufzQmNJPDxAOs=
Subject key identifier: 85:30:4D:C5:8A:57:12:70:84:D5:CC:40:9E:A1:F5:27:29:C4:56:44
Certificate issuer: /CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
Certificate serial: 4CDFD106CD4BD18D42A7D84A7586782ED9F3445B
Authority key identifier: C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
Signing time: Wed 12 Feb 2025 14:39:57 +0000
ROA not before: Wed 12 Feb 2025 14:34:57 +0000
ROA not after: Wed 11 Feb 2026 14:39:57 +0000
asID: 268746
IP address blocks: 45.171.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:df:d1:06:cd:4b:d1:8d:42:a7:d8:4a:75:86:78:2e:d9:f3:44:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
Validity
Not Before: Feb 12 14:34:57 2025 GMT
Not After : Feb 11 14:39:57 2026 GMT
Subject: CN=85304DC58A57127084D5CC409EA1F52729C45644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:84:1e:9d:cd:6a:42:6d:d1:d3:b4:88:c1:8f:
44:a8:f4:9a:94:60:b5:b1:b2:5e:28:3a:4a:3d:f2:
39:ca:5e:0a:77:c0:a9:15:b1:45:2a:25:43:71:b0:
cd:67:a5:41:c3:9d:a3:8d:11:fb:18:37:a1:23:8d:
58:04:bc:76:35:78:86:73:24:a1:ca:84:22:29:5b:
aa:ec:84:a9:41:74:4f:95:77:40:2f:89:53:6e:2b:
7d:55:08:ee:c4:3f:d1:ec:76:58:ce:44:26:74:36:
42:49:f8:53:6c:42:20:3a:33:01:fc:b8:0f:36:dc:
d0:04:7e:6b:f3:9d:28:72:ec:4b:ae:cb:c9:9e:cb:
e3:05:02:68:d2:4f:3a:07:da:d2:de:24:c9:1d:92:
1b:26:d3:5d:bb:15:8e:59:69:ce:93:44:14:59:28:
4a:22:70:93:04:58:3d:cb:d7:3f:68:51:b8:66:bd:
89:e9:33:ef:92:42:c0:5d:64:90:b9:ed:c2:bc:df:
35:3b:e7:cd:d4:c4:ae:a4:9d:2c:aa:1d:0f:ca:a7:
8f:70:d7:64:a1:89:d9:34:63:0a:cd:1c:63:7a:5c:
11:cf:f0:bf:c4:47:83:eb:74:07:39:3b:bb:ce:5e:
a8:cb:3a:d3:7d:f2:a9:51:03:49:d4:ab:89:51:83:
db:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:30:4D:C5:8A:57:12:70:84:D5:CC:40:9E:A1:F5:27:29:C4:56:44
X509v3 Authority Key Identifier:
keyid:C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3233312e302f32342d3234203d3e20323638373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.231.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:29:2e:e3:e9:b6:26:96:ea:11:b3:cd:7a:a2:52:b6:96:67:
c2:65:09:c1:5c:54:f4:61:43:af:c9:8b:fc:ff:ca:da:1d:54:
7d:c6:12:58:c1:0e:b7:87:9d:d5:b2:3e:80:23:f8:b5:67:82:
f6:af:c8:32:e8:dd:37:c0:c8:ff:96:86:0d:2f:3d:d4:d8:6a:
5b:f8:39:65:a5:e0:16:7d:9c:0d:b2:03:44:01:fd:82:ab:b3:
8f:db:0e:ff:27:c8:48:38:56:34:48:2b:5b:04:1e:e0:01:0f:
2d:cb:c6:69:6f:51:84:61:cf:f3:60:c7:5f:7a:c4:49:03:87:
18:a5:fa:5c:27:78:0f:d4:3b:27:29:33:61:af:0a:25:a7:ca:
0e:1b:48:5b:b4:93:9c:c1:29:2f:d8:d9:8d:ce:33:40:29:c1:
0e:21:ee:5e:99:b4:ae:b6:0a:7f:2f:4b:3a:ae:24:96:89:23:
6b:a3:29:36:ad:81:68:63:dc:77:15:48:ed:95:cf:9c:16:e3:
d4:cd:95:39:83:cb:d4:8f:c7:4a:20:3e:5a:0b:60:b8:fa:75:
c3:0b:55:ab:75:b5:b5:e8:a2:cb:21:e9:77:1b:ca:1f:3d:9a:
09:42:07:1a:46:27:3b:cd:4d:94:0c:9b:35:c8:00:77:4a:c7:
7d:9f:1d:5f
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUTN/RBs1L0Y1Cp9hKdYZ4LtnzRFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc1NjM5MzQxRUIzMTBEOTEwNUNEOThBNDhGQzdDRUQx
RUM1RDY0MzAeFw0yNTAyMTIxNDM0NTdaFw0yNjAyMTExNDM5NTdaMDMxMTAvBgNV
BAMTKDg1MzA0REM1OEE1NzEyNzA4NEQ1Q0M0MDlFQTFGNTI3MjlDNDU2NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhB6dzWpCbdHTtIjBj0So9JqU
YLWxsl4oOko98jnKXgp3wKkVsUUqJUNxsM1npUHDnaONEfsYN6EjjVgEvHY1eIZz
JKHKhCIpW6rshKlBdE+Vd0AviVNuK31VCO7EP9HsdljORCZ0NkJJ+FNsQiA6MwH8
uA823NAEfmvznShy7Euuy8mey+MFAmjSTzoH2tLeJMkdkhsm0127FY5Zac6TRBRZ
KEoicJMEWD3L1z9oUbhmvYnpM++SQsBdZJC57cK83zU7583UxK6knSyqHQ/Kp49w
12Shidk0YwrNHGN6XBHP8L/ER4PrdAc5O7vOXqjLOtN98qlRA0nUq4lRg9vDAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUhTBNxYpXEnCE1cxAnqH1JynEVkQwHwYDVR0j
BBgwFoAUx1Y5NB6zENkQXNmKSPx87R7F1kMwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9zUW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lz
LzAvQzc1NjM5MzQxRUIzMTBEOTEwNUNEOThBNDhGQzdDRUQxRUM1RDY0My5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9DNzU2MzkzNDFFQjMxMEQ5MTA1
Q0Q5OEE0OEZDN0NFRDFFQzVENjQzLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9z
UW9WWEQzdndQaEhFVGZEbTNSNlozS3BFRmVWTjhGV3Bud2FwaUFLQ3lzLzAvMzQz
NTJlMzEzNzMxMmUzMjMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzgz
NzM0MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAtq+cwDQYJKoZIhvcNAQELBQADggEBAMIpLuPptiaW
6hGzzXqiUraWZ8JlCcFcVPRhQ6/Ji/z/ytodVH3GEljBDreHndWyPoAj+LVngvav
yDLo3TfAyP+Whg0vPdTYalv4OWWl4BZ9nA2yA0QB/YKrs4/bDv8nyEg4VjRIK1sE
HuABDy3LxmlvUYRhz/Ngx196xEkDhxil+lwneA/UOycpM2GvCiWnyg4bSFu0k5zB
KS/Y2Y3OM0ApwQ4h7l6ZtK62Cn8vSzquJJaJI2ujKTatgWhj3HcVSO2Vz5wW49TN
lTmDy9SPx0ogPloLYLj6dcMLVat1tbXoossh6Xcbyh89mglCBxpGJzvNTZQMmzXI
AHdKx32fHV8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 04:31:50 2025 by rpki-client