Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3234203d3e20323639363036.roa
File: 34352e3139302e302e302f32322d3234203d3e20323639363036.roa (raw, json)
Hash identifier: KhJEHa7D1lQto4+u9DafQ5lYvXfTddn/O3zNG0JuByM=
Subject key identifier: A7:C7:29:E7:44:3A:94:8E:02:F7:41:0F:57:BD:75:66:19:11:D9:AC
Certificate issuer: /CN=C444BE84CBD5E178D6931CB6CFEF2555D45D7751
Certificate serial: 2FAA16D10E646464F9A76B922B6D22B81333E9B1
Authority key identifier: C4:44:BE:84:CB:D5:E1:78:D6:93:1C:B6:CF:EF:25:55:D4:5D:77:51
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3234203d3e20323639363036.roa
Signing time: Thu 02 Jan 2025 12:37:42 +0000
ROA not before: Thu 02 Jan 2025 12:32:42 +0000
ROA not after: Thu 01 Jan 2026 12:37:42 +0000
asID: 269606
IP address blocks: 45.190.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:aa:16:d1:0e:64:64:64:f9:a7:6b:92:2b:6d:22:b8:13:33:e9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C444BE84CBD5E178D6931CB6CFEF2555D45D7751
Validity
Not Before: Jan 2 12:32:42 2025 GMT
Not After : Jan 1 12:37:42 2026 GMT
Subject: CN=A7C729E7443A948E02F7410F57BD75661911D9AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b1:a4:f7:ba:1f:06:78:a3:d9:fa:4a:1b:65:
95:4a:bd:f7:60:d3:7d:e4:8c:0a:fe:0b:7c:4d:d7:
9b:8a:c5:9d:9e:91:2a:6c:86:2b:f0:c1:84:f6:33:
fe:07:45:df:be:b6:d5:99:ef:9d:49:a9:47:03:67:
2f:0e:7c:d7:23:d7:02:c5:fe:c7:4c:f4:92:78:e3:
96:b3:25:c7:b2:8f:c4:61:d8:95:07:73:70:25:9c:
1b:a3:59:9b:3d:3b:80:6c:a8:95:39:a4:f3:c2:d6:
6f:41:45:72:37:2f:e5:99:72:63:39:fc:63:c5:b3:
e2:20:d2:f0:fa:e3:7a:9e:d2:9e:09:e3:6b:dc:9f:
e5:d7:32:38:80:75:b8:c3:90:13:46:d6:6b:64:a1:
96:7d:0e:aa:ef:ff:b6:90:89:03:93:9a:d6:da:b0:
96:55:94:8f:30:a1:4c:46:f3:3a:84:a7:a5:20:1a:
df:ca:83:59:76:d2:8b:0c:68:09:3c:7c:1e:e5:e3:
8b:87:db:db:e0:37:36:de:46:4b:c4:6f:8f:83:43:
83:1a:17:6b:59:4f:32:df:6e:55:49:4d:c7:41:50:
3c:2b:21:c5:59:50:a5:44:af:7e:23:9a:48:f4:c9:
bd:01:ea:60:93:23:29:51:3b:3a:69:9a:0e:18:0a:
58:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:29:E7:44:3A:94:8E:02:F7:41:0F:57:BD:75:66:19:11:D9:AC
X509v3 Authority Key Identifier:
keyid:C4:44:BE:84:CB:D5:E1:78:D6:93:1C:B6:CF:EF:25:55:D4:5D:77:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C444BE84CBD5E178D6931CB6CFEF2555D45D7751.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3234203d3e20323639363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.0.0/22
Signature Algorithm: sha256WithRSAEncryption
81:2d:55:d7:39:0b:96:ff:e0:bd:cb:d8:c0:96:ba:0a:c7:6f:
a8:c1:17:6f:6b:8e:a5:99:b5:02:d9:fd:c5:e1:6f:91:be:b5:
a4:26:1e:15:9c:b7:6c:dc:fc:d2:db:15:48:bf:a5:cf:82:3c:
80:bb:89:ff:58:0c:c8:83:0f:a4:5d:e6:3d:43:e6:a8:56:c8:
66:03:e8:bc:f7:01:86:62:bf:f0:df:6a:8f:41:47:50:ab:49:
70:46:4a:3f:53:b2:78:3b:4a:12:b0:72:9f:52:d1:b3:2f:c6:
db:c1:ad:fa:b3:65:6e:1b:34:78:80:c6:5f:5b:4a:4a:ac:6a:
63:7c:98:db:a2:6f:5d:e3:86:45:fa:7e:f9:4b:ba:51:9f:9b:
9a:ed:35:4e:db:1b:94:39:c7:d2:16:03:43:03:65:04:87:1d:
1a:b8:1b:5d:fe:84:c6:c6:d3:0a:93:2f:13:dd:23:b8:5a:58:
66:49:13:1b:94:41:48:3b:1f:a6:10:ad:5f:e4:f1:1a:4c:1d:
1c:50:58:ae:46:96:6f:a7:c7:30:dd:6e:62:c6:30:2e:80:b9:
df:40:ed:26:9a:f7:1f:bf:1e:10:4d:27:d6:46:43:fa:87:64:
61:f5:05:dd:05:f2:4f:bb:00:1d:ad:e8:25:c3:81:46:86:af:
f9:aa:8c:93
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUL6oW0Q5kZGT5p2uSK20iuBMz6bEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzQ0NEJFODRDQkQ1RTE3OEQ2OTMxQ0I2Q0ZFRjI1NTVE
NDVENzc1MTAeFw0yNTAxMDIxMjMyNDJaFw0yNjAxMDExMjM3NDJaMDMxMTAvBgNV
BAMTKEE3QzcyOUU3NDQzQTk0OEUwMkY3NDEwRjU3QkQ3NTY2MTkxMUQ5QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzsaT3uh8GeKPZ+kobZZVKvfdg
033kjAr+C3xN15uKxZ2ekSpshivwwYT2M/4HRd++ttWZ751JqUcDZy8OfNcj1wLF
/sdM9JJ445azJceyj8Rh2JUHc3AlnBujWZs9O4BsqJU5pPPC1m9BRXI3L+WZcmM5
/GPFs+Ig0vD643qe0p4J42vcn+XXMjiAdbjDkBNG1mtkoZZ9Dqrv/7aQiQOTmtba
sJZVlI8woUxG8zqEp6UgGt/Kg1l20osMaAk8fB7l44uH29vgNzbeRkvEb4+DQ4Ma
F2tZTzLfblVJTcdBUDwrIcVZUKVEr34jmkj0yb0B6mCTIylROzppmg4YClh5AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUp8cp50Q6lI4C90EPV711ZhkR2awwHwYDVR0j
BBgwFoAUxES+hMvV4XjWkxy2z+8lVdRdd1EwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHFaRDJCUkVINjFlOGVtTUdHNjVpODQ1NlhTeHVIVzRkZG9qam1KdllI
VkovMC9DNDQ0QkU4NENCRDVFMTc4RDY5MzFDQjZDRkVGMjU1NUQ0NUQ3NzUxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0M0NDRCRTg0Q0JENUUxNzhE
NjkzMUNCNkNGRUYyNTU1RDQ1RDc3NTEuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRxWkQyQlJFSDYxZThlbU1HRzY1aTg0NTZYU3h1SFc0ZGRvamptSnZZSFZKLzAv
MzQzNTJlMzEzOTMwMmUzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzYzOTM2
MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2+ADANBgkqhkiG9w0BAQsFAAOCAQEAgS1V1zkLlv/g
vcvYwJa6CsdvqMEXb2uOpZm1Atn9xeFvkb61pCYeFZy3bNz80tsVSL+lz4I8gLuJ
/1gMyIMPpF3mPUPmqFbIZgPovPcBhmK/8N9qj0FHUKtJcEZKP1OyeDtKErByn1LR
sy/G28Gt+rNlbhs0eIDGX1tKSqxqY3yY26JvXeOGRfp++Uu6UZ+bmu01TtsblDnH
0hYDQwNlBIcdGrgbXf6ExsbTCpMvE90juFpYZkkTG5RBSDsfphCtX+TxGkwdHFBY
rkaWb6fHMN1uYsYwLoC530DtJpr3H78eEE0n1kZD+odkYfUF3QXyT7sAHa3oJcOB
Roav+aqMkw==
-----END CERTIFICATE-----
Generated at Wed May 7 18:54:33 2025 by rpki-client