Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32332d3233203d3e20323639363637.roa
File: 34352e3139312e36322e302f32332d3233203d3e20323639363637.roa (raw, json)
Hash identifier: W3UYJR9jGRmRbTDgcLmVdSwmHUYojJT/hY/HCaay3Bg=
Subject key identifier: 25:48:7B:F3:B0:14:5F:4A:67:5B:69:40:62:27:5A:2C:8E:8B:CE:D3
Certificate issuer: /CN=022A5382F6AB07ABD3C44930CF179443F389439D
Certificate serial: 5C8D79B7BBF5AA0DF1E382807DF67528014360EC
Authority key identifier: 02:2A:53:82:F6:AB:07:AB:D3:C4:49:30:CF:17:94:43:F3:89:43:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022A5382F6AB07ABD3C44930CF179443F389439D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32332d3233203d3e20323639363637.roa
Signing time: Wed 04 Dec 2024 20:37:05 +0000
ROA not before: Wed 04 Dec 2024 20:32:05 +0000
ROA not after: Wed 03 Dec 2025 20:37:05 +0000
asID: 269667
IP address blocks: 45.191.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:8d:79:b7:bb:f5:aa:0d:f1:e3:82:80:7d:f6:75:28:01:43:60:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022A5382F6AB07ABD3C44930CF179443F389439D
Validity
Not Before: Dec 4 20:32:05 2024 GMT
Not After : Dec 3 20:37:05 2025 GMT
Subject: CN=25487BF3B0145F4A675B694062275A2C8E8BCED3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:9a:b4:dd:d4:16:fc:8d:83:18:d0:ca:ce:
76:62:12:04:50:21:e0:9f:0c:54:36:fb:0a:7f:77:
64:b6:74:63:e5:5d:59:c4:55:3e:92:9e:63:bb:85:
2c:69:71:73:1e:10:ce:c3:ca:a6:3b:ca:7c:98:75:
83:bf:c7:0c:d5:08:41:5e:b7:e4:6b:f2:d7:02:ba:
5e:b3:bb:32:16:36:5e:ac:6e:f5:2e:bb:42:36:fe:
3f:1c:40:97:21:f4:23:a4:03:21:0c:95:aa:8f:d8:
ef:05:70:64:ec:bc:93:1a:1d:d6:32:b6:f4:89:e9:
ea:57:ff:9f:c1:81:88:48:51:ab:fe:08:df:f2:42:
b9:0e:39:d0:47:dd:ea:c6:6b:a8:44:50:12:cc:47:
27:18:a3:53:b2:01:bb:46:c1:92:dd:d1:d5:54:3a:
52:20:ba:cb:80:2a:ec:52:0e:e3:56:28:be:45:5c:
69:20:fd:57:bd:25:25:55:29:86:30:5e:8c:e1:9f:
ab:ad:99:8a:48:54:6c:76:c7:85:5b:41:10:6d:1b:
2c:3b:c5:27:70:d6:92:b5:0f:54:d9:b9:80:a3:6e:
eb:e8:99:8c:29:62:fd:77:5d:eb:cb:a1:c4:59:be:
9d:f0:38:ed:c5:ca:e4:23:3b:c6:f2:63:0c:64:47:
c6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:48:7B:F3:B0:14:5F:4A:67:5B:69:40:62:27:5A:2C:8E:8B:CE:D3
X509v3 Authority Key Identifier:
keyid:02:2A:53:82:F6:AB:07:AB:D3:C4:49:30:CF:17:94:43:F3:89:43:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/022A5382F6AB07ABD3C44930CF179443F389439D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022A5382F6AB07ABD3C44930CF179443F389439D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/34352e3139312e36322e302f32332d3233203d3e20323639363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.62.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:f7:82:c4:b1:39:10:52:d4:f5:d5:c3:cb:66:87:39:c8:b2:
d2:a2:40:51:da:88:c9:ab:e2:7f:46:38:80:fb:53:3f:e4:bb:
a7:b9:a5:da:0e:44:de:57:7f:9c:01:57:82:2c:8c:f3:87:08:
fa:c8:99:3e:72:6d:a4:48:a4:cf:62:e2:73:e9:f0:13:9e:0e:
ab:22:e5:81:2a:a3:2a:05:9f:83:3f:2e:ce:7d:e4:0e:fd:4d:
0a:02:88:1e:79:45:15:4e:d1:91:34:8b:70:a4:b9:8d:83:29:
ac:14:fe:5b:eb:23:ac:d9:42:d1:20:07:b7:d7:cb:74:4d:9f:
12:bb:50:37:13:1a:3f:e6:d7:57:2f:ee:c3:2e:bd:62:c5:6a:
2f:ea:b3:6f:6d:29:d8:29:b6:a7:4c:0f:61:3b:21:00:ca:f2:
8d:cc:d0:8c:7f:49:d2:34:e4:e0:41:cc:f1:29:9d:34:2c:4c:
70:9f:3f:58:44:99:8f:74:1f:4e:db:cd:bd:b7:61:3e:22:3a:
ce:3b:35:fb:be:e9:b3:1f:7a:dd:dd:53:3e:d0:df:91:3e:fe:
50:ff:0a:85:41:dc:da:f0:9d:28:91:15:51:d8:59:45:0d:01:
c0:8e:4f:ae:2d:0c:e2:9d:b2:f3:6c:27:94:75:e9:11:a4:c4:
36:8d:dc:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:56:37 2025 by rpki-client