Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/34352e3139302e3131362e302f32322d3232203d3e203238363536.roa
File: 34352e3139302e3131362e302f32322d3232203d3e203238363536.roa (raw, json)
Hash identifier: sBBElSpThAF4dV6ikbSRuj0T6sshOm5q2A8Q4OVrhU0=
Subject key identifier: 43:1B:0F:6A:F2:D1:FD:DF:17:67:62:D7:E3:F9:F1:2F:DD:89:07:B4
Certificate issuer: /CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Certificate serial: 7AFB761C801CF82A108FE1758922F9138B58215D
Authority key identifier: 1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/34352e3139302e3131362e302f32322d3232203d3e203238363536.roa
Signing time: Tue 12 Sep 2023 14:14:16 +0000
ROA not before: Tue 12 Sep 2023 14:09:16 +0000
ROA not after: Tue 10 Sep 2024 14:14:16 +0000
asID: 28656
IP address blocks: 45.190.116.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fb:76:1c:80:1c:f8:2a:10:8f:e1:75:89:22:f9:13:8b:58:21:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Validity
Not Before: Sep 12 14:09:16 2023 GMT
Not After : Sep 10 14:14:16 2024 GMT
Subject: CN=431B0F6AF2D1FDDF176762D7E3F9F12FDD8907B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:91:74:26:d8:0f:71:06:2e:a7:9d:c0:e3:3a:
5c:0e:46:08:56:ca:05:ab:3e:9b:d4:69:7c:29:6d:
fd:9d:79:57:6a:3f:d8:a5:e8:38:54:36:f6:a7:88:
e1:ea:1b:e7:5b:36:ab:ed:c6:ac:c6:28:82:90:6f:
d2:98:41:07:3e:4c:5d:1a:12:92:7d:93:e5:e0:9a:
2f:d0:dc:e7:e1:4a:32:df:d4:b0:3d:a7:4a:45:90:
9a:e6:36:62:fb:3c:83:1e:4f:4f:52:58:f2:39:68:
71:53:15:cd:7b:0a:3b:83:4e:63:61:25:19:35:ec:
74:22:07:52:5c:eb:c9:3a:be:26:18:9c:0c:8d:a1:
97:2e:2b:63:4b:0c:c8:87:d1:4a:40:48:57:d0:73:
36:40:bd:b1:79:0f:ca:a0:ea:c2:ce:cd:d2:d2:33:
b2:ce:d2:9d:b7:e3:d3:f8:88:59:3d:84:b5:f0:c4:
2b:2b:44:ef:40:96:7a:2a:9b:19:49:9c:19:2d:23:
02:0f:af:15:c0:77:b1:c9:20:00:0c:63:22:de:c7:
c8:4a:5e:c1:98:ff:04:17:bc:12:29:a1:b7:a2:f5:
3e:ab:41:03:1a:ac:33:60:da:ec:71:ff:8e:a3:46:
81:b8:29:ef:d0:05:14:50:71:f8:1f:95:23:75:ad:
81:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1B:0F:6A:F2:D1:FD:DF:17:67:62:D7:E3:F9:F1:2F:DD:89:07:B4
X509v3 Authority Key Identifier:
keyid:1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/34352e3139302e3131362e302f32322d3232203d3e203238363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.116.0/22
Signature Algorithm: sha256WithRSAEncryption
41:e3:f5:60:23:bd:06:33:70:c2:7b:4d:6b:da:9a:16:2d:cd:
e5:16:71:47:43:99:96:19:fa:ae:be:f7:38:fe:df:7d:93:8e:
a0:1f:be:ee:c9:f5:49:8d:77:4a:2e:39:64:d9:2e:62:48:da:
85:b9:61:84:00:bc:fa:77:c6:33:a6:8f:e9:4f:60:fb:2f:ad:
cb:21:1f:93:ab:b1:3b:91:1b:af:34:f9:a2:54:6e:76:63:b4:
d5:8b:e4:0a:7a:3c:9f:44:dd:70:a0:45:6c:84:db:69:0e:ee:
9f:a8:76:f7:0c:24:7e:dc:1e:3b:95:11:c0:5d:ef:b6:96:ad:
82:89:53:19:39:64:25:99:7c:24:6c:56:f5:46:d6:42:d0:ad:
f7:19:1b:60:f2:1f:94:ee:b4:59:e4:f5:84:0f:0f:57:35:57:
9f:63:cf:04:1b:42:5c:72:93:f4:9d:9b:89:5e:3d:b4:5c:27:
19:e4:73:56:f6:0e:9a:70:7a:28:b8:62:32:5d:c2:cd:e4:c9:
50:a2:35:88:37:e5:0d:a4:dc:e6:3f:56:b8:64:79:81:4e:cc:
6d:56:ed:9f:c6:21:83:a6:2e:ed:69:44:68:f5:db:be:ec:4e:
55:51:66:09:d6:81:f9:e1:a4:c4:43:9c:0a:2a:0c:d8:ad:d8:
a6:2d:e1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:01:15 2025 by rpki-client