Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa
File: 34352e3232352e36342e302f32322d3234203d3e20323632383437.roa (raw, json)
Hash identifier: SYxMD6anktYmNaH0RcV32IblULVXyM+FF2Bo7N3XqRI=
Subject key identifier: BD:8D:64:50:C3:5A:6B:80:65:CC:23:41:0B:61:88:FD:4E:C7:D6:07
Certificate issuer: /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial: 66DBBE5E20FAC90A6D751E4BDAEC6C54570858C3
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa
Signing time: Sun 11 Dec 2022 18:41:03 +0000
ROA not before: Sun 11 Dec 2022 18:36:03 +0000
ROA not after: Sun 10 Dec 2023 18:41:03 +0000
asID: 262847
IP address blocks: 45.225.64.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:db:be:5e:20:fa:c9:0a:6d:75:1e:4b:da:ec:6c:54:57:08:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Validity
Not Before: Dec 11 18:36:03 2022 GMT
Not After : Dec 10 18:41:03 2023 GMT
Subject: CN=BD8D6450C35A6B8065CC23410B6188FD4EC7D607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c4:07:76:7a:24:71:da:ee:be:14:38:8d:b0:
b3:4f:d3:74:1c:b0:0e:dc:4f:8c:ab:d8:1f:c0:ab:
9b:dd:9b:e6:3f:8e:6c:a6:62:9b:d6:7f:36:62:dc:
6f:3d:74:a9:79:40:9b:33:5d:ea:92:27:4c:ac:c9:
52:86:16:07:0e:18:63:ef:17:77:98:6e:55:fd:21:
3c:29:8d:42:e1:66:3e:cb:72:91:d2:6d:ce:6f:dd:
10:35:49:04:e9:fa:ee:c8:09:ae:5f:25:c6:f0:24:
87:f7:dd:6a:e4:36:d2:97:a7:76:49:12:19:99:83:
21:81:66:d3:1f:dd:95:7f:12:63:1a:99:25:39:ac:
c7:09:d6:3c:e6:b6:9e:ad:aa:13:96:5c:9d:cc:a8:
ad:1f:99:b2:e9:c3:92:6f:b7:88:e7:cc:0d:42:31:
8c:06:e2:9d:6f:c1:ed:e6:f9:e5:91:99:a7:78:83:
9f:d1:fd:56:63:ad:98:55:a2:db:cd:8c:d3:0b:af:
fb:51:ea:a4:bd:e2:e7:37:07:0d:99:63:dc:c5:40:
90:e3:69:cb:21:0d:87:34:69:8a:70:69:68:0f:19:
e3:20:f5:02:ba:ba:a2:57:d2:d0:46:d7:b5:c9:ae:
8c:f4:4f:1d:41:06:f9:27:54:85:63:3b:27:ce:13:
f4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8D:64:50:C3:5A:6B:80:65:CC:23:41:0B:61:88:FD:4E:C7:D6:07
X509v3 Authority Key Identifier:
keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/34352e3232352e36342e302f32322d3234203d3e20323632383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.225.64.0/22
Signature Algorithm: sha256WithRSAEncryption
85:a2:96:15:d8:61:6b:7b:77:63:9d:ee:43:41:f3:f0:27:5e:
c8:6e:9f:b8:2a:cb:89:52:d0:23:2f:6d:dc:13:7c:94:49:fc:
e1:d8:d3:15:b6:9c:10:28:88:2b:6d:32:d0:61:02:b4:c0:d6:
5c:72:e0:a1:1c:46:11:f6:83:e6:89:20:1e:a5:47:69:f1:23:
dc:b0:25:b1:d8:d0:2b:c9:4d:f3:50:e6:62:3f:cc:8a:8d:fb:
fd:9c:92:05:ca:eb:9e:77:fc:2e:48:54:26:ea:8f:f2:35:77:
02:b2:6e:31:0f:70:f6:5c:bc:e6:e8:7c:a9:2f:d3:d4:4c:81:
f8:72:a5:bb:c4:1a:26:34:c8:80:ff:05:04:29:36:f6:78:06:
4c:25:cd:c0:36:b1:a2:26:7d:e2:26:81:e7:34:2d:94:db:01:
e7:6b:c9:68:b7:26:2c:86:c5:f6:80:af:9a:6c:c9:45:bb:78:
0b:b3:6a:a3:c1:c9:21:2d:c5:ae:78:cf:29:d8:dd:23:4b:3c:
40:14:b8:9b:e5:4d:18:96:a4:ac:1d:0b:72:6f:57:70:b1:04:
62:03:f7:51:8f:23:92:3d:3f:f8:39:c3:e2:2b:a6:e8:a9:64:
f8:5d:a9:94:4d:6d:b5:ed:92:5e:b5:b6:6e:39:63:11:35:4b:
be:e8:2b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:06:58 2025 by rpki-client