Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32342d3234203d3e203631353932.roa
File: 34352e3232342e3231362e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier: sA+ZYLNMwob3DnxlPSMTMJnoQw8ZLxptmAMFso1tfWM=
Subject key identifier: 07:AF:93:02:2D:BD:66:CE:A7:D3:5A:04:B6:E5:7D:73:63:D0:70:B7
Certificate issuer: /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial: 4BA30E2B6C876A2F14B0602516EABC8ED1035E79
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32342d3234203d3e203631353932.roa
Signing time: Wed 12 Feb 2025 14:31:02 +0000
ROA not before: Wed 12 Feb 2025 14:26:02 +0000
ROA not after: Wed 11 Feb 2026 14:31:02 +0000
asID: 61592
IP address blocks: 45.224.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a3:0e:2b:6c:87:6a:2f:14:b0:60:25:16:ea:bc:8e:d1:03:5e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Validity
Not Before: Feb 12 14:26:02 2025 GMT
Not After : Feb 11 14:31:02 2026 GMT
Subject: CN=07AF93022DBD66CEA7D35A04B6E57D7363D070B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:22:c7:e4:0d:ea:c6:82:b2:dd:01:46:d0:2f:
08:81:2a:00:72:57:c7:02:a1:62:f3:a2:9e:e3:04:
0d:5b:a8:c9:4e:bf:b7:f3:4f:e5:c3:41:5b:04:3f:
62:ed:8d:5c:8a:d6:c4:56:f9:2c:02:d1:f4:fd:54:
a2:52:9e:68:26:bf:66:c2:4e:c9:b6:28:78:e1:3d:
df:30:22:fa:d0:9f:53:5a:f4:a8:d5:94:e6:e7:06:
29:62:58:bf:a5:6f:8c:4e:eb:ce:13:b9:11:ab:d0:
ea:25:db:8c:0e:9e:dc:d2:ce:fd:9d:18:52:a0:27:
04:92:f2:18:75:70:26:3c:47:a7:ee:d3:c7:5c:a3:
d1:fb:f5:36:4b:b6:b3:44:33:e6:b8:53:4a:90:4d:
f6:cc:e2:cb:4c:3b:1a:32:ae:19:87:2a:b5:b9:fb:
04:f5:ef:35:b9:c0:4a:40:33:4d:43:ac:27:c0:c0:
f3:1d:98:27:d8:29:64:05:8a:4c:0b:65:92:82:08:
43:d3:14:6c:1a:85:92:a2:e7:e5:19:bf:31:c8:70:
06:22:6c:7f:84:80:f9:46:02:7e:b5:7e:0d:dd:ea:
b9:ce:16:0b:b7:6b:4d:72:22:ed:40:ed:27:39:19:
a9:97:3d:b7:b7:78:4f:12:c9:c1:69:fe:3c:e3:0b:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AF:93:02:2D:BD:66:CE:A7:D3:5A:04:B6:E5:7D:73:63:D0:70:B7
X509v3 Authority Key Identifier:
keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3232342e3231362e302f32342d3234203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.216.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:e2:e6:a4:13:2b:20:ef:7e:6f:bf:b7:36:6a:77:8a:b4:be:
b1:fb:69:fc:3d:65:91:81:94:80:a1:7f:d1:6b:15:fe:d6:06:
3f:0e:1d:56:58:ff:d5:87:ed:3f:8e:eb:67:25:1c:1a:d4:78:
19:0e:c7:25:81:09:37:51:cf:b7:4c:a6:f3:90:7a:a5:5b:1a:
6a:77:1d:fc:8f:ef:6c:38:33:06:75:84:f5:4c:00:f1:49:a0:
58:c5:3a:29:fa:bd:ea:89:81:18:a1:6d:35:be:43:b1:f2:c4:
4e:3b:42:20:22:23:e7:a8:90:66:1d:c5:66:db:d9:24:bd:fe:
66:bf:15:5d:9a:b8:96:63:b1:f3:a0:c0:8a:4a:37:41:4b:ab:
13:10:a9:eb:fd:06:9e:cb:03:81:99:9d:94:2d:74:a6:5a:b8:
52:72:a4:25:80:f8:ea:bd:4e:38:0a:64:7b:ec:48:44:71:c2:
fe:d1:a2:de:6c:00:af:8a:66:6e:33:22:57:1f:60:ae:60:24:
29:68:79:1c:8e:07:4e:b3:33:ef:aa:c0:e2:38:4d:72:43:7a:
8e:54:6b:08:2d:c1:83:58:70:c9:c7:8e:b1:5d:5a:84:87:bf:
67:e8:5a:16:53:d4:8e:9b:76:30:f3:d6:b0:e7:22:a4:5f:cb:
25:72:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:37 2025 by rpki-client