Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/34352e342e36342e302f32322d3232203d3e203238323230.roa
File: 34352e342e36342e302f32322d3232203d3e203238323230.roa (raw, json)
Hash identifier: 6YySmVas540wXZ/eBpwE7IE1VxkKPaEYj58sPG+L0jg=
Subject key identifier: 2F:1B:8A:35:40:93:90:62:03:74:A2:28:01:24:58:E4:7E:72:BB:19
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 0FEEA1CB17616186549098B2B65B0A0690789395
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/34352e342e36342e302f32322d3232203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:21 +0000
ROA not before: Mon 08 Apr 2024 20:00:21 +0000
ROA not after: Mon 07 Apr 2025 20:05:21 +0000
asID: 28220
IP address blocks: 45.4.64.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:ee:a1:cb:17:61:61:86:54:90:98:b2:b6:5b:0a:06:90:78:93:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:21 2024 GMT
Not After : Apr 7 20:05:21 2025 GMT
Subject: CN=2F1B8A35409390620374A228012458E47E72BB19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:5e:3d:2d:e1:a3:0b:c3:6a:59:bd:c1:8f:
9f:df:4e:10:44:e4:99:a2:d8:27:1c:c6:36:80:ee:
08:52:30:8e:0b:45:d8:de:a2:75:ed:57:76:eb:f4:
cb:36:cf:6a:1a:f5:ab:b8:18:3c:0d:8b:74:0b:93:
14:59:6d:d7:20:ee:1c:75:20:6d:cc:d1:21:14:6b:
bb:b3:e3:5f:ca:aa:89:71:77:3d:8b:e0:35:54:2e:
9d:ff:23:49:32:ca:1c:6a:92:65:b8:7b:28:80:2b:
bf:73:8a:c6:4f:21:8f:3c:ad:0f:6f:6d:4f:04:5e:
e4:8e:c9:3c:00:a1:ed:89:da:a4:bc:e4:d3:f6:a2:
ce:5a:f2:ae:d9:67:f2:7b:cf:34:59:fd:29:4f:66:
8c:3f:c1:ca:1f:27:67:1c:f4:a4:69:d9:3c:5f:94:
9e:9a:b9:0a:91:94:89:f3:3b:aa:9c:85:32:a1:db:
55:66:36:7b:43:a9:6d:50:64:7d:e0:23:f2:08:12:
9a:72:b3:25:ce:4e:44:31:dc:f3:cf:d7:cd:59:e5:
b0:cd:97:05:4d:87:26:85:35:8e:04:50:fe:51:5b:
1f:e2:7a:43:83:3f:74:c9:e8:b8:65:9c:92:6c:f3:
eb:e5:97:9b:96:e9:c9:d8:90:3f:b2:7b:cb:51:cd:
6d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1B:8A:35:40:93:90:62:03:74:A2:28:01:24:58:E4:7E:72:BB:19
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/34352e342e36342e302f32322d3232203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:aa:7a:9f:10:d2:d7:72:48:70:a6:e3:11:98:38:99:41:d4:
cc:d7:13:b6:6b:b8:17:0f:d9:e2:56:cd:6a:71:a2:54:35:ff:
33:10:9a:cb:23:7b:66:39:79:1d:2d:68:9b:c0:4b:0b:75:0b:
98:4b:1b:79:33:74:23:f6:ca:60:d0:a0:a7:3f:47:ee:c4:bc:
f0:28:6c:72:e2:0e:aa:6c:b1:e8:52:a2:9a:9a:e3:30:09:98:
3a:a2:86:3d:12:68:19:11:67:66:ce:58:aa:fd:1b:88:43:c8:
53:86:bc:fa:33:50:6d:84:1e:a5:ba:29:82:20:b4:1f:84:39:
f8:7b:45:66:1d:09:4e:87:6f:a6:7c:23:38:8d:d7:77:eb:7f:
33:5d:e5:89:ae:3d:f4:51:5a:ca:eb:f3:97:d3:ae:3b:b4:57:
df:1a:50:b9:cd:91:e6:3e:ec:e8:72:90:7b:c7:39:8e:de:2f:
ef:70:1d:c7:12:0e:06:ba:e4:83:19:19:6e:3a:4c:8c:66:ba:
67:8d:2e:5c:ed:02:92:a5:c6:54:92:47:a1:6d:32:5a:12:ee:
7b:b4:ef:07:08:38:08:21:25:eb:c7:00:a2:54:18:fd:4b:f2:
5f:77:ee:da:73:2c:ab:8e:7a:a4:17:75:60:45:16:3b:48:32:
3e:c5:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:30:49 2025 by rpki-client