Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31322e302f32342d3234203d3e20323639353637.roa
File: 34352e3138382e31322e302f32342d3234203d3e20323639353637.roa (raw, json)
Hash identifier: f6C7haDxRxhqVZ0nektszTkOdgzMlQD0+SO/NzXbCuM=
Subject key identifier: 72:E5:00:1F:4E:7D:A1:5C:86:C8:13:07:67:DA:60:CB:CE:8A:BE:41
Certificate issuer: /CN=9D5B3059BB98435A876805A73F362F594F73CE08
Certificate serial: 4DF3E0AC4A36D89B9596F4263ED88AC173B65E26
Authority key identifier: 9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31322e302f32342d3234203d3e20323639353637.roa
Signing time: Wed 18 Jun 2025 20:20:54 +0000
ROA not before: Wed 18 Jun 2025 20:15:54 +0000
ROA not after: Wed 17 Jun 2026 20:20:54 +0000
asID: 269567
IP address blocks: 45.188.12.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:f3:e0:ac:4a:36:d8:9b:95:96:f4:26:3e:d8:8a:c1:73:b6:5e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D5B3059BB98435A876805A73F362F594F73CE08
Validity
Not Before: Jun 18 20:15:54 2025 GMT
Not After : Jun 17 20:20:54 2026 GMT
Subject: CN=72E5001F4E7DA15C86C8130767DA60CBCE8ABE41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a4:a1:8a:d2:f7:79:3b:5a:45:79:f8:34:c7:
55:c3:5a:4f:9f:fe:39:0c:68:ea:d7:96:c4:39:9c:
95:49:e8:f0:87:f3:66:9c:dc:10:93:9e:54:36:99:
96:3f:01:ce:28:06:dc:99:da:b4:c1:17:3e:57:3a:
8c:05:5c:36:e8:85:3f:4c:d7:3c:29:e0:39:7f:61:
c0:67:09:79:9f:f6:06:7a:44:6f:90:b9:ad:73:77:
35:7d:ef:02:67:33:97:11:7d:a8:4c:42:de:79:be:
36:dc:c5:9c:71:53:9d:8d:37:96:f1:29:68:04:45:
9f:9a:a5:be:d6:58:b0:10:61:70:61:b1:86:18:83:
67:ef:b1:c4:cc:31:84:cd:2c:b6:3e:09:63:86:70:
73:00:77:01:6e:d2:19:d6:5b:60:8e:a9:07:df:ec:
bd:b4:09:6c:35:9e:06:07:9f:56:2c:94:a0:4e:ac:
0d:f4:f0:02:dc:42:ff:cf:0d:5f:cf:13:ff:35:75:
dc:fa:ae:a3:ed:f3:3f:5d:53:57:6b:5c:19:78:d6:
e2:35:73:45:d0:3f:c5:32:42:c3:53:ca:ed:58:72:
3c:ed:6a:d1:4a:e7:8d:09:72:37:68:91:73:48:e0:
d3:22:13:96:9e:2e:55:2f:6a:f6:f5:6e:d3:aa:77:
1e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:00:1F:4E:7D:A1:5C:86:C8:13:07:67:DA:60:CB:CE:8A:BE:41
X509v3 Authority Key Identifier:
keyid:9D:5B:30:59:BB:98:43:5A:87:68:05:A7:3F:36:2F:59:4F:73:CE:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/9D5B3059BB98435A876805A73F362F594F73CE08.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5B3059BB98435A876805A73F362F594F73CE08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5UC1sHt3rqzbYgCEDYiwVYnRVhiiKZtRYn9W7dPNpinJ/0/34352e3138382e31322e302f32342d3234203d3e20323639353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.12.0/24
Signature Algorithm: sha256WithRSAEncryption
44:11:f8:9b:46:25:9e:a5:31:5c:80:0b:19:39:d8:e7:d2:43:
e1:db:4d:2d:e5:6b:11:0e:61:25:d8:aa:52:16:78:bd:4d:ca:
17:cf:54:d6:07:4f:e2:2b:bc:01:29:45:c1:ce:c2:bd:60:32:
a9:0c:31:f2:80:17:ce:7c:e4:52:6c:39:9e:e8:97:f7:a2:7c:
f3:5b:89:80:9e:e2:39:95:10:17:34:01:1a:74:d0:e6:85:a3:
31:1f:38:5d:ea:0a:3a:74:91:e1:e5:f2:f4:f1:0d:47:63:00:
6f:31:3c:ad:da:64:fd:ce:f9:d4:08:e8:5f:62:fa:de:85:0c:
56:81:ec:88:75:88:1d:a8:c1:66:1e:44:9d:f6:2d:a3:10:25:
41:ff:c2:8c:3d:99:f3:1c:3d:ce:06:5d:f9:9b:dc:71:6d:e9:
93:54:4d:59:a2:16:d5:ef:8d:95:bc:47:02:e1:6a:e5:f9:16:
e0:10:13:e3:2a:4b:65:4e:35:53:7f:f5:e6:20:45:df:12:47:
7b:8b:b1:32:4b:31:0e:9d:0a:56:9b:50:f6:ea:dd:ef:1c:72:
17:01:fe:69:a8:30:51:55:fa:4a:36:10:da:e9:65:8d:c1:52:
91:27:9c:56:16:3f:46:76:24:e0:16:6f:0b:7f:df:c1:c6:05:
11:e2:3b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 12:01:00 2025 by rpki-client