Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e2033323233.roa
File: 32342e3135322e33362e302f32342d3234203d3e2033323233.roa (raw, json)
Hash identifier: XOdIumc2fHoyxLc09GtuzMUDpZ2syV4To5WGjoMq6lI=
Subject key identifier: 0E:CD:69:BD:64:9D:D2:5D:7F:56:EA:19:D5:25:C1:6D:D3:A1:F7:2C
Certificate issuer: /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial: 2EA75EF5241C1B13395BA51B6B026C8DBA77964F
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e2033323233.roa
Signing time: Sun 05 Jan 2025 05:06:43 +0000
ROA not before: Sun 05 Jan 2025 05:01:43 +0000
ROA not after: Sun 04 Jan 2026 05:06:43 +0000
asID: 3223
IP address blocks: 24.152.36.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:a7:5e:f5:24:1c:1b:13:39:5b:a5:1b:6b:02:6c:8d:ba:77:96:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
Validity
Not Before: Jan 5 05:01:43 2025 GMT
Not After : Jan 4 05:06:43 2026 GMT
Subject: CN=0ECD69BD649DD25D7F56EA19D525C16DD3A1F72C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d4:0c:8e:b5:76:36:38:3d:ea:19:0c:18:d6:
5f:10:65:20:ed:dd:29:33:d8:de:5c:5b:35:60:75:
e5:23:6c:82:b8:2f:a4:92:40:a7:b5:30:a1:33:b2:
e6:a2:af:0b:d8:f0:59:dc:e0:bf:3f:e3:e0:30:b4:
04:7b:6b:dc:2e:06:ce:28:32:39:af:10:9e:5d:d5:
66:0e:b5:f0:91:60:89:1a:20:e9:30:a7:3e:09:82:
2e:52:9d:eb:03:48:93:c1:89:80:57:c7:58:9a:b0:
47:46:2e:70:1e:09:05:49:a0:0f:65:d9:9c:36:3b:
54:7b:ff:d1:6c:f1:77:e0:92:1f:97:75:6b:b7:2b:
a3:33:30:5a:cd:5f:c8:9d:0a:42:61:66:db:e6:de:
ce:f4:f0:aa:c1:bb:ad:eb:32:a2:94:e9:48:bc:4f:
aa:79:b1:a6:43:53:88:75:73:d4:27:74:e0:7b:61:
e2:1a:88:93:50:fe:5f:75:6f:6e:90:2b:cc:54:0d:
33:32:0a:e0:db:91:db:00:da:2c:b8:53:ee:e0:86:
c7:ad:62:e6:57:73:1f:5d:2e:3d:e0:0b:ac:c0:4c:
e9:48:ae:aa:97:04:b1:35:35:a0:04:99:d3:e8:21:
8e:03:53:f7:2c:07:72:1c:32:de:5f:22:4a:af:58:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CD:69:BD:64:9D:D2:5D:7F:56:EA:19:D5:25:C1:6D:D3:A1:F7:2C
X509v3 Authority Key Identifier:
keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/32342e3135322e33362e302f32342d3234203d3e2033323233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
24.152.36.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:81:50:7e:c0:22:0b:ff:52:9f:db:24:b1:e2:bb:34:1e:81:
a7:72:3d:ce:4c:13:4c:2a:0c:b9:10:be:50:87:20:ba:2b:c1:
a7:92:91:51:74:a9:8b:98:76:10:4a:a7:0f:bb:36:de:9c:2f:
13:48:ad:64:f1:41:63:e5:1a:af:6e:1c:e7:4f:a1:42:f4:8f:
dd:b3:5f:7a:03:14:50:41:b5:1d:36:9f:53:91:99:d5:ab:4a:
67:03:f5:f0:e2:21:99:8b:5a:c6:56:72:ab:40:d8:b5:e9:9d:
d4:64:97:8c:11:0a:90:2e:59:56:47:77:fa:89:40:cc:41:d9:
2b:c9:c0:c0:7f:af:fb:de:f4:7a:3f:a5:0e:5b:be:43:06:32:
c4:95:27:79:90:e9:ff:06:2b:ea:43:ba:56:2d:d0:40:b2:2b:
c7:3c:c0:2f:20:92:87:cd:d7:a3:b5:e5:84:47:1f:0c:4c:6f:
e7:20:24:b9:37:d3:d9:3e:c7:5f:e1:3d:d2:ad:62:0c:42:64:
32:6a:ed:0c:91:da:d1:3a:e5:08:6a:a9:09:40:80:c0:3d:35:
7a:6e:2e:d1:fa:16:29:e9:d8:6b:78:b4:90:00:75:a8:a1:fa:
86:0c:2b:a0:55:37:bf:32:84:bc:7e:4a:ce:05:06:bf:94:8e:
e1:d1:89:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:16 2025 by rpki-client