Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234312e302f32342d3234203d3e20323636303736.roa
File: 34352e342e3234312e302f32342d3234203d3e20323636303736.roa (raw, json)
Hash identifier: UTWF7M68kYaNXu3TbW6gmWP4+mxVkVU/b9MG/37kOQM=
Subject key identifier: 8F:99:ED:49:66:73:CC:45:6B:66:8F:90:EE:AA:3A:99:38:44:26:0F
Certificate issuer: /CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Certificate serial: 251E8AC00C10922B8B7378F0ABD2F4798DFBB7EB
Authority key identifier: 35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234312e302f32342d3234203d3e20323636303736.roa
Signing time: Mon 03 Apr 2023 18:50:34 +0000
ROA not before: Mon 03 Apr 2023 18:45:34 +0000
ROA not after: Mon 01 Apr 2024 18:50:34 +0000
asID: 266076
IP address blocks: 45.4.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1e:8a:c0:0c:10:92:2b:8b:73:78:f0:ab:d2:f4:79:8d:fb:b7:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3501E47492484FD8CE83F17070EFD7252B14CDD0
Validity
Not Before: Apr 3 18:45:34 2023 GMT
Not After : Apr 1 18:50:34 2024 GMT
Subject: CN=8F99ED496673CC456B668F90EEAA3A993844260F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:f4:be:9c:35:60:1c:c6:8c:bf:8f:7c:44:
96:bf:fa:01:d2:56:76:8d:eb:2c:94:2f:4a:52:d8:
df:06:3c:4f:22:8c:08:4d:8e:89:bd:a2:e6:ed:70:
1c:b4:ae:ba:78:0f:eb:db:55:f4:ac:40:9e:75:5e:
0b:2e:40:a5:72:ef:ff:71:96:d7:6a:95:7c:27:65:
23:24:e8:d5:2b:ae:e9:49:99:0b:b8:fe:74:99:48:
ae:c5:6a:23:5a:eb:00:c4:1d:af:8b:a6:04:63:48:
88:ac:e9:b8:ef:5f:7a:35:5b:8e:10:2d:97:f2:43:
6a:4a:7e:15:29:0e:9d:79:05:ad:14:81:12:e1:d8:
eb:4a:83:d1:f8:e6:1c:40:b8:42:ca:d5:06:78:fd:
89:65:4f:27:54:92:84:bf:80:cf:16:8e:f9:5c:be:
4e:7e:fa:92:69:db:85:99:45:d9:0e:b1:8a:ee:91:
fa:56:a4:21:43:08:70:68:65:aa:b8:ae:f2:c7:3a:
05:a2:84:fd:0b:ec:11:0f:29:83:08:4d:a7:83:fd:
f2:f6:fc:95:5a:f4:19:21:6d:16:9c:f8:88:4f:8e:
77:27:a8:85:df:10:e6:74:8f:fa:91:75:7e:3f:16:
6c:17:47:71:f3:ab:c0:cd:4d:1e:8a:b8:e5:16:2b:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:99:ED:49:66:73:CC:45:6B:66:8F:90:EE:AA:3A:99:38:44:26:0F
X509v3 Authority Key Identifier:
keyid:35:01:E4:74:92:48:4F:D8:CE:83:F1:70:70:EF:D7:25:2B:14:CD:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3501E47492484FD8CE83F17070EFD7252B14CDD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Kes74tnSkY9touWozFjgcQR7RmLh1z8xrpbHf9bTGvB/0/34352e342e3234312e302f32342d3234203d3e20323636303736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.241.0/24
Signature Algorithm: sha256WithRSAEncryption
17:2d:78:d7:41:db:2c:39:76:f1:88:d8:b3:da:ae:4d:a6:63:
9b:73:0a:94:65:ff:ac:12:04:e7:c2:b7:64:be:fb:97:af:10:
8b:a2:55:8d:2a:d5:7f:fb:77:2e:c9:22:cb:27:10:e6:26:34:
42:0c:c0:c9:3b:09:05:8e:06:93:45:34:ae:1a:7b:a1:06:1b:
5d:7d:01:bd:ca:32:9b:d4:60:fa:ec:8a:1d:76:71:7d:69:6e:
3c:9c:5e:4b:9b:5b:68:5e:bd:8f:5d:0f:c3:33:a1:36:b9:a2:
f6:1c:c4:92:c9:13:f3:18:f6:0d:fa:cc:1c:b3:97:20:c6:f6:
ec:3a:c2:61:53:e0:66:9f:3b:70:4e:4c:36:b7:1f:fe:8e:6c:
21:58:bb:3c:b8:6d:77:cc:f0:93:a5:09:3c:15:bc:22:6c:45:
48:85:cd:98:f0:ed:45:23:e0:ad:57:96:e9:79:db:9e:96:ed:
96:86:2a:49:8b:4f:d1:dc:f3:87:5f:e1:c1:6a:c9:73:e0:15:
2b:57:d7:8c:8a:24:83:b9:7c:f5:10:31:e5:97:25:cc:11:44:
35:cc:e4:bf:02:a2:3b:17:90:d0:a2:1f:8a:76:a8:b5:ee:8a:
28:49:9a:2a:bd:e4:37:4f:98:14:ff:a5:c7:33:f0:06:a0:ac:
53:0c:8c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:25:24 2025 by rpki-client