Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa
File: 34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa (raw, json)
Hash identifier: fvtzLdCBFs2uVAcnvsgpWY2KCBITPvGTDivs3ijCHTU=
Subject key identifier: C2:02:4E:72:98:BD:3A:94:5A:8B:E7:ED:3D:20:47:28:AA:81:0D:70
Certificate issuer: /CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Certificate serial: 14FB21DBC9AABFC539AABEA59AC5499A34DBAC69
Authority key identifier: BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa
Signing time: Sun 27 Jul 2025 01:32:58 +0000
ROA not before: Sun 27 Jul 2025 01:27:58 +0000
ROA not after: Sun 26 Jul 2026 01:32:58 +0000
asID: 268588
IP address blocks: 45.163.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:fb:21:db:c9:aa:bf:c5:39:aa:be:a5:9a:c5:49:9a:34:db:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9
Validity
Not Before: Jul 27 01:27:58 2025 GMT
Not After : Jul 26 01:32:58 2026 GMT
Subject: CN=C2024E7298BD3A945A8BE7ED3D204728AA810D70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a6:ea:ac:d3:0e:67:cb:b8:b4:21:67:4f:2b:
71:7a:50:2c:14:5d:93:d3:f9:b8:56:22:bc:dc:dd:
65:89:a4:67:4e:7f:3b:5d:af:c8:a3:98:2a:f5:db:
1a:41:78:35:25:dc:d5:13:b6:b0:e2:e4:0b:1b:48:
c3:4f:b8:29:4c:46:d1:83:d7:0d:d1:24:71:11:dd:
a8:d9:e2:8c:91:3f:e5:00:87:12:89:79:41:46:53:
a9:d1:61:c7:d7:8f:13:7f:8f:0a:a5:38:8a:8f:95:
8c:e7:dc:26:d9:bb:ae:1e:4a:a4:61:9a:f5:a7:ee:
e9:c7:14:b9:95:33:db:65:e7:87:a8:de:4b:5d:b5:
d7:b3:58:40:58:b7:d0:d5:4d:97:92:7f:9e:dd:ba:
16:d7:42:a0:40:ea:9a:f4:0c:83:c1:e6:6b:87:d7:
3f:bb:16:9e:bd:db:62:6a:28:f6:d3:59:85:f5:57:
f0:4d:5b:33:fc:67:64:15:97:aa:d6:7c:13:9c:b4:
f7:6e:20:63:ba:a7:7d:0a:20:ad:a6:f7:b6:77:39:
f3:33:64:ed:c3:fd:75:b5:d2:37:47:40:2c:07:eb:
64:e6:f9:c5:dd:17:dd:d0:2f:fe:d1:e1:ca:c0:7a:
b1:2d:1e:92:db:9c:aa:03:ef:20:15:87:51:6b:16:
62:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:02:4E:72:98:BD:3A:94:5A:8B:E7:ED:3D:20:47:28:AA:81:0D:70
X509v3 Authority Key Identifier:
keyid:BF:82:1D:40:A5:9C:57:C8:C0:2B:F4:E1:2D:D0:D4:94:05:C6:A9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF821D40A59C57C8C02BF4E12DD0D49405C6A9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rFM9wSTBQ95MHhNmD44sngqRUtz8DPfPd3UTDTUVTax/0/34352e3136332e3234362e302f32342d3234203d3e20323638353838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.246.0/24
Signature Algorithm: sha256WithRSAEncryption
67:66:6b:87:36:73:a0:57:f6:21:45:45:d7:57:ce:c3:c5:57:
a0:af:98:00:87:9c:3c:49:b9:54:e7:a8:ac:34:3a:a7:ca:76:
bc:73:75:d8:f9:b3:41:77:2f:79:f7:3d:49:e8:71:5a:9e:5e:
9a:6f:0c:ba:a8:75:9a:5e:82:f6:ee:1b:92:21:6a:30:c7:5b:
c2:1a:a7:2f:61:d4:85:81:29:1e:d3:cb:2b:a3:cc:d6:22:10:
80:42:bc:50:7a:6c:b7:1c:8a:f1:30:ca:53:33:06:90:b1:d3:
b4:c6:6a:81:b7:b9:ed:61:50:87:ca:a6:93:7e:6e:a6:fd:af:
44:2a:83:8f:10:63:d5:37:f0:ce:1f:ce:da:1f:79:1d:1f:09:
83:89:62:d6:96:a1:97:bf:f4:e4:c8:5f:8a:19:4c:ae:ae:c7:
f9:0e:19:c1:6d:14:d8:a7:fa:e2:aa:fa:b8:79:59:00:5f:1f:
14:69:21:09:34:3d:d6:5e:e1:49:48:65:71:50:dd:63:3a:2c:
5d:70:15:f1:5a:e6:14:e3:70:06:6c:b3:d8:03:a0:a5:dc:f8:
9e:1d:cd:49:1b:c9:8f:b0:0b:55:8f:86:f2:7e:d0:25:19:ba:
22:64:e0:30:6a:0b:23:fa:f0:2e:f3:26:b0:39:d7:f4:83:71:
68:67:c6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:47:05 2025 by rpki-client