Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa
File: 34352e3136382e32352e302f32342d3332203d3e20323638303336.roa (raw, json)
Hash identifier: pBhS6BzUvwnHCz/xkCBoPrcbrJ1uunF1mZMyHwL3bV4=
Subject key identifier: 13:20:34:5A:F2:B9:4B:66:12:1E:E9:89:DB:58:D2:D4:F5:80:51:4B
Certificate issuer: /CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
Certificate serial: 640DCA23C859C2B344E9E8320BB998B3A4DE7700
Authority key identifier: 9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
Subject info access: rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa
Signing time: Wed 04 Dec 2024 12:20:13 +0000
ROA not before: Wed 04 Dec 2024 12:15:13 +0000
ROA not after: Wed 03 Dec 2025 12:20:13 +0000
asID: 268036
IP address blocks: 45.168.25.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:0d:ca:23:c8:59:c2:b3:44:e9:e8:32:0b:b9:98:b3:a4:de:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9B679E5B793CBDF49D875F5BD7BDF01252A88452
Validity
Not Before: Dec 4 12:15:13 2024 GMT
Not After : Dec 3 12:20:13 2025 GMT
Subject: CN=1320345AF2B94B66121EE989DB58D2D4F580514B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:49:be:48:e5:be:7a:33:59:b0:d0:ea:65:1e:
eb:52:de:d4:a6:e9:f4:5f:d6:43:42:9f:a2:a2:76:
75:cd:e6:69:3b:29:d4:5b:6a:2a:43:d7:75:a0:85:
f2:1e:9c:f0:9a:d2:b2:15:b7:b0:2d:24:dd:56:c5:
ff:ca:3a:a4:3e:95:b4:33:a6:7b:7f:77:9d:72:6c:
95:f9:1c:94:84:f3:24:b7:ca:36:49:91:9f:95:a2:
6a:c1:07:f3:94:78:88:32:47:54:87:2a:9a:49:41:
9a:cc:ff:ba:ac:fa:76:fb:d7:4d:6e:f8:4c:4e:9a:
75:ad:3e:b9:9c:76:2d:25:93:84:dd:b1:1e:2f:d8:
be:b9:09:da:be:44:70:65:39:43:0b:49:ec:7b:72:
1d:79:e2:28:76:66:47:1c:cb:c1:01:90:d9:2d:ae:
86:4c:1a:6a:34:03:bb:6e:61:1f:64:85:dd:41:82:
7d:a7:aa:14:1a:02:36:ce:cc:12:70:3f:b6:00:66:
e3:78:dd:67:63:29:c8:9f:6e:08:56:91:3e:61:a4:
c8:2d:f6:6f:f4:30:ca:7d:ac:22:aa:02:89:79:d4:
2d:5a:84:4e:45:a1:cb:2f:7b:4c:c7:e2:35:94:d2:
18:13:79:0f:59:10:c9:03:3a:45:47:e9:5b:1a:8f:
64:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:20:34:5A:F2:B9:4B:66:12:1E:E9:89:DB:58:D2:D4:F5:80:51:4B
X509v3 Authority Key Identifier:
keyid:9B:67:9E:5B:79:3C:BD:F4:9D:87:5F:5B:D7:BD:F0:12:52:A8:84:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/9B679E5B793CBDF49D875F5BD7BDF01252A88452.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9B679E5B793CBDF49D875F5BD7BDF01252A88452.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/22vrpt1oFoGSCLE2sZa23H2LCdD2bvqgkfcmh2dFBs3g/0/34352e3136382e32352e302f32342d3332203d3e20323638303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.25.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:4a:9a:13:ad:2b:80:0e:c7:6c:01:ba:86:e3:a2:36:7f:58:
43:52:a9:34:8d:03:7c:11:82:13:0e:f8:56:3c:bf:bf:4e:2d:
77:27:28:50:68:b3:11:a6:df:57:5b:3c:97:1f:e6:e6:2c:5c:
98:6f:73:38:39:b3:f4:c7:e8:47:7d:ab:0b:75:3c:aa:81:e1:
10:35:3f:9f:32:1c:24:e8:70:67:8c:9c:c5:43:05:c5:25:2e:
eb:de:59:3c:66:b1:87:37:d5:6f:07:47:8a:bc:90:a9:1a:f3:
ef:d9:5c:6c:9c:e8:2d:f9:02:58:79:5c:0a:cf:4d:4c:43:8b:
f8:ce:20:de:27:fe:54:45:0a:ca:c9:a9:3c:58:b6:dd:58:19:
5f:f5:4a:60:46:8c:88:f9:dc:89:b2:88:06:e9:87:86:c7:07:
9a:65:f4:46:c5:fd:da:a6:85:a3:57:fb:fe:9e:28:87:3e:40:
19:47:dc:96:a9:46:c9:fb:f9:d7:bb:d3:d7:a0:fb:df:4b:ed:
aa:63:ac:3b:98:a0:25:09:99:a5:65:3d:af:b5:95:91:68:9a:
ae:f4:26:db:d5:db:6c:6b:fe:c2:74:ea:27:64:69:2c:f0:3d:
e7:6b:8b:02:04:c6:cc:3f:61:73:82:52:97:e1:c0:61:81:1e:
3d:58:f0:7e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZA3KI8hZwrNE6egyC7mYs6TedwAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUI2NzlFNUI3OTNDQkRGNDlEODc1RjVCRDdCREYwMTI1
MkE4ODQ1MjAeFw0yNDEyMDQxMjE1MTNaFw0yNTEyMDMxMjIwMTNaMDMxMTAvBgNV
BAMTKDEzMjAzNDVBRjJCOTRCNjYxMjFFRTk4OURCNThEMkQ0RjU4MDUxNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSb5I5b56M1mw0OplHutS3tSm
6fRf1kNCn6KidnXN5mk7KdRbaipD13WghfIenPCa0rIVt7AtJN1Wxf/KOqQ+lbQz
pnt/d51ybJX5HJSE8yS3yjZJkZ+VomrBB/OUeIgyR1SHKppJQZrM/7qs+nb7101u
+ExOmnWtPrmcdi0lk4TdsR4v2L65Cdq+RHBlOUMLSex7ch154ih2Zkccy8EBkNkt
roZMGmo0A7tuYR9khd1Bgn2nqhQaAjbOzBJwP7YAZuN43WdjKcifbghWkT5hpMgt
9m/0MMp9rCKqAol51C1ahE5Focsve0zH4jWU0hgTeQ9ZEMkDOkVH6Vsaj2QrAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEyA0WvK5S2YSHumJ21jS1PWAUUswHwYDVR0j
BBgwFoAUm2eeW3k8vfSdh19b173wElKohFIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMjJ2cnB0MW9Gb0dTQ0xFMnNaYTIzSDJMQ2REMmJ2cWdrZmNtaDJkRkJz
M2cvMC85QjY3OUU1Qjc5M0NCREY0OUQ4NzVGNUJEN0JERjAxMjUyQTg4NDUyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlCNjc5RTVCNzkzQ0JERjQ5
RDg3NUY1QkQ3QkRGMDEyNTJBODg0NTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzIydnJwdDFvRm9HU0NMRTJzWmEyM0gyTENkRDJidnFna2ZjbWgyZEZCczNnLzAv
MzQzNTJlMzEzNjM4MmUzMjM1MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALagZMA0GCSqGSIb3DQEBCwUAA4IBAQAaSpoTrSuA
DsdsAbqG46I2f1hDUqk0jQN8EYITDvhWPL+/Ti13JyhQaLMRpt9XWzyXH+bmLFyY
b3M4ObP0x+hHfasLdTyqgeEQNT+fMhwk6HBnjJzFQwXFJS7r3lk8ZrGHN9VvB0eK
vJCpGvPv2VxsnOgt+QJYeVwKz01MQ4v4ziDeJ/5URQrKyak8WLbdWBlf9UpgRoyI
+dyJsogG6YeGxweaZfRGxf3apoWjV/v+niiHPkAZR9yWqUbJ+/nXu9PXoPvfS+2q
Y6w7mKAlCZmlZT2vtZWRaJqu9Cbb1dtsa/7CdOonZGks8D3na4sCBMbMP2FzglKX
4cBhgR49WPB+
-----END CERTIFICATE-----
Generated at Tue Apr 29 19:53:15 2025 by rpki-client