Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa
File: 34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa (raw, json)
Hash identifier: xgr/tcSRt4yqL7n5Eowko+mbkSSkSUP7HngS6B4fO3w=
Subject key identifier: 20:C0:EB:5E:D1:F0:3D:9F:77:5C:C9:67:B0:6C:05:1B:0D:5F:8C:6E
Certificate issuer: /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial: 6F47BBDC4DE1B3C428ECB4A0CE215192F87F5788
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa
Signing time: Fri 10 Jan 2025 13:55:59 +0000
ROA not before: Fri 10 Jan 2025 13:50:59 +0000
ROA not after: Fri 09 Jan 2026 13:55:59 +0000
asID: 267093
IP address blocks: 45.228.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:47:bb:dc:4d:e1:b3:c4:28:ec:b4:a0:ce:21:51:92:f8:7f:57:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
Validity
Not Before: Jan 10 13:50:59 2025 GMT
Not After : Jan 9 13:55:59 2026 GMT
Subject: CN=20C0EB5ED1F03D9F775CC967B06C051B0D5F8C6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e7:96:36:be:13:e7:84:02:0d:d0:6d:79:18:
66:5a:f2:7a:bd:b8:0b:48:6e:39:e1:e6:41:58:b7:
e5:a6:dd:45:64:c5:89:0c:23:d8:ca:b7:b1:1e:98:
79:cc:df:0f:fc:de:2c:35:18:d5:60:2b:78:fc:8f:
ce:ad:1b:1a:59:d9:cf:01:e8:57:a3:61:9d:e0:ca:
96:2f:15:39:e3:a1:cb:75:08:06:5d:f9:19:69:a1:
fd:f7:89:01:8f:11:91:bc:55:b1:39:e0:d7:cd:ca:
82:31:20:f0:21:b2:ae:2c:33:28:48:9a:4c:9f:be:
2e:a6:dc:a0:9c:fb:e2:c9:93:6a:dc:1f:4d:83:98:
c3:0b:3b:5a:88:24:41:17:34:60:4b:34:b3:19:75:
f3:cb:c6:60:20:ac:04:09:47:7d:d5:fd:ca:de:14:
20:37:86:73:22:43:97:2b:3c:1b:f4:33:de:6f:c8:
6f:31:a4:4e:64:a7:5a:4e:75:43:7e:30:b2:1a:48:
44:b7:e7:73:46:96:2a:ee:42:3c:d2:96:b9:59:11:
4b:b7:bc:66:df:b7:c8:ca:9b:81:56:75:e1:ce:8d:
ca:50:22:2d:07:04:c0:04:f8:f7:92:5f:0d:c4:81:
0d:6c:7b:39:c4:c3:a6:df:90:e1:aa:f8:7b:4a:af:
f0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C0:EB:5E:D1:F0:3D:9F:77:5C:C9:67:B0:6C:05:1B:0D:5F:8C:6E
X509v3 Authority Key Identifier:
keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/34352e3232382e3139352e302f32342d3234203d3e20323637303933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.195.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:4a:55:ff:72:6a:71:db:53:28:73:02:dd:64:6e:3a:73:3f:
24:39:65:c4:0b:3e:05:60:73:50:5e:d8:b6:ff:0a:cb:0d:30:
51:7e:c2:25:fa:e5:66:25:d4:89:27:9e:9b:52:eb:51:6a:3e:
80:d2:6c:42:94:ae:a6:3f:dc:d0:61:a8:cf:27:f5:06:b6:08:
05:b4:12:77:89:04:cd:9f:d9:87:78:31:3f:f8:c3:19:c4:36:
a8:b0:0a:5d:9a:eb:48:11:af:b0:0c:e1:e1:13:94:4f:c3:8b:
5f:06:73:f2:fe:65:b6:d0:11:24:21:c5:5f:de:11:0e:ff:ce:
eb:f1:27:87:4c:b9:7d:72:b8:90:a0:80:66:05:03:79:09:6d:
9d:71:17:01:58:59:07:af:54:20:c6:43:a1:97:09:be:c9:82:
18:91:c2:c1:ad:79:f2:d9:1c:89:8e:7c:4f:06:be:1b:c8:70:
04:12:49:78:08:4b:af:1d:fa:6d:0b:e5:1b:d8:92:ec:8e:d1:
99:c4:4d:83:3f:ce:48:b2:0a:a2:98:8f:dc:3c:b6:31:6b:60:
c9:61:ad:50:cb:d7:e2:07:01:c1:5d:c8:0c:f1:60:73:c2:e8:
2a:d4:4a:32:8d:ae:70:9e:93:d1:0d:0c:b8:f5:cb:5f:f1:0a:
e1:bc:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:37:23 2025 by rpki-client