Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
File: 34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa (raw, json)
Hash identifier: ICgQONpVmg94fwKky1QJDk56tBkyV98W22ldUgiv2Zw=
Subject key identifier: 38:E6:D6:D0:A6:F7:F7:E6:91:1C:C1:C7:8E:E8:43:2C:C8:B5:F5:8E
Certificate issuer: /CN=B99BCBB2975CCC597837197FB941B244052D47D4
Certificate serial: 16E307D71407300F0A332A81FBBEE330F24F0E11
Authority key identifier: B9:9B:CB:B2:97:5C:CC:59:78:37:19:7F:B9:41:B2:44:05:2D:47:D4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BCBB2975CCC597837197FB941B244052D47D4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
Signing time: Wed 02 Apr 2025 12:16:52 +0000
ROA not before: Wed 02 Apr 2025 12:11:52 +0000
ROA not after: Wed 01 Apr 2026 12:16:52 +0000
asID: 268092
IP address blocks: 45.168.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e3:07:d7:14:07:30:0f:0a:33:2a:81:fb:be:e3:30:f2:4f:0e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B99BCBB2975CCC597837197FB941B244052D47D4
Validity
Not Before: Apr 2 12:11:52 2025 GMT
Not After : Apr 1 12:16:52 2026 GMT
Subject: CN=38E6D6D0A6F7F7E6911CC1C78EE8432CC8B5F58E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b4:0a:d7:e2:0b:ea:bd:7e:70:6d:d5:86:c9:
58:00:47:fb:d2:a6:d1:71:07:95:24:2c:09:ac:10:
be:7b:18:d9:79:15:62:44:f0:40:7f:b6:b4:16:a6:
87:9f:3d:7d:10:83:3b:33:e7:bd:95:1f:17:28:d4:
ee:f7:3e:61:c8:4a:25:09:cc:63:01:4b:81:31:e5:
fe:22:53:21:0d:ba:d5:b2:36:d6:19:6a:21:23:b5:
03:a0:c3:a2:0f:54:b2:9a:65:40:65:05:a1:d4:89:
46:02:ba:86:70:13:a4:d9:16:9e:53:f6:ff:4c:f2:
9c:8a:e3:97:48:e2:4a:e2:00:7c:47:af:02:9b:41:
b9:c2:1a:af:c1:4d:43:2b:3b:1d:4b:31:49:4c:f1:
ad:45:56:4b:bd:f8:cf:b9:1c:b7:68:26:5c:b2:15:
fc:f6:8d:0a:7d:0c:34:f5:e1:e9:c4:bc:3c:a4:9d:
db:5b:f7:c3:9f:15:f2:d9:22:e6:a4:6d:e0:f4:61:
65:72:fd:bb:4d:f4:ec:a2:b1:ad:6c:19:af:e8:04:
09:5e:fe:1f:69:20:9f:10:84:0d:9b:06:e0:ef:fc:
bb:9b:bd:d0:1c:a4:c2:e4:0e:0b:91:3d:81:ff:9c:
49:62:c6:14:fd:18:7b:3f:93:98:a4:0e:be:d9:76:
9c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:D6:D0:A6:F7:F7:E6:91:1C:C1:C7:8E:E8:43:2C:C8:B5:F5:8E
X509v3 Authority Key Identifier:
keyid:B9:9B:CB:B2:97:5C:CC:59:78:37:19:7F:B9:41:B2:44:05:2D:47:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/B99BCBB2975CCC597837197FB941B244052D47D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B99BCBB2975CCC597837197FB941B244052D47D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/0/34352e3136382e3232302e302f32322d3234203d3e20323638303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.220.0/22
Signature Algorithm: sha256WithRSAEncryption
72:88:70:b2:f9:29:4f:ee:8a:eb:b0:46:d9:43:54:65:60:d1:
3e:00:f3:6c:38:f0:ca:57:ed:0a:d2:ab:9a:1e:d1:8c:b6:a1:
70:d2:1f:7a:1f:39:94:b2:db:e8:e3:5c:6f:bb:9f:bf:dd:4b:
fd:ca:fc:45:66:e3:c4:ae:7b:b9:3a:42:14:7a:cc:16:d6:5b:
52:90:29:88:4e:3b:13:02:e8:10:0d:6d:7f:c6:7c:f7:a5:3d:
b0:a7:cb:3c:93:d8:7e:8a:6a:bd:34:9e:19:e9:fb:bc:4a:86:
ce:1d:eb:fe:e5:33:fd:dc:ff:ea:73:0f:d0:93:ae:93:ba:7f:
78:9b:16:41:3c:39:ad:25:20:41:35:e8:bf:7c:a3:3c:3b:31:
46:69:65:88:44:da:0b:c0:7b:ef:2f:de:aa:cd:59:5c:57:84:
53:a1:3d:8c:9b:f6:74:48:31:62:a2:67:e5:7a:3d:a4:43:8b:
05:33:7c:9c:b4:72:cb:02:a4:15:d3:99:2a:aa:48:3d:a2:1b:
24:ad:27:2e:e7:08:83:17:cb:11:93:ce:d4:77:91:fd:19:4e:
d5:2c:cd:08:37:df:12:b3:90:e8:42:9d:ac:ef:83:6c:94:92:
7d:36:aa:fa:04:70:1e:71:80:db:92:c3:12:d8:f5:26:c7:3c:
e4:8e:4f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 09:44:34 2025 by rpki-client