Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136302e302f32322d3332203d3e20323639373234.roa
File: 34352e3138392e3136302e302f32322d3332203d3e20323639373234.roa (raw, json)
Hash identifier: hFL0g5toHrFdWLcFOwWVnPZ3ufY22SlQxTCFEi5fg/k=
Subject key identifier: F4:BF:17:B9:99:D6:8A:6A:77:F3:A7:0A:EF:5A:4B:96:AF:AF:C2:1D
Certificate issuer: /CN=49E580A065EA4E02BA9ACD797F53E062CB6AAC63
Certificate serial: 06DAB0599D723FA963EE3A35BA37FD3E9D77869E
Authority key identifier: 49:E5:80:A0:65:EA:4E:02:BA:9A:CD:79:7F:53:E0:62:CB:6A:AC:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136302e302f32322d3332203d3e20323639373234.roa
Signing time: Tue 12 Nov 2024 18:07:18 +0000
ROA not before: Tue 12 Nov 2024 18:02:18 +0000
ROA not after: Tue 11 Nov 2025 18:07:18 +0000
asID: 269724
IP address blocks: 45.189.160.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:da:b0:59:9d:72:3f:a9:63:ee:3a:35:ba:37:fd:3e:9d:77:86:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49E580A065EA4E02BA9ACD797F53E062CB6AAC63
Validity
Not Before: Nov 12 18:02:18 2024 GMT
Not After : Nov 11 18:07:18 2025 GMT
Subject: CN=F4BF17B999D68A6A77F3A70AEF5A4B96AFAFC21D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5a:0b:7d:4f:b9:49:29:45:62:0b:e9:d9:d8:
33:8e:30:01:9e:33:ca:a2:2e:f4:8e:81:cc:7f:e4:
dd:af:5f:93:ed:d3:8b:bf:1a:6b:1d:dd:3b:96:b1:
6f:c3:15:ae:fb:cd:d4:10:9e:88:27:4d:06:d7:3f:
f2:df:4a:fd:61:ab:99:64:b5:36:bd:77:92:87:19:
f3:88:40:79:56:b4:ec:38:d5:b7:01:af:e5:3c:fd:
a9:48:41:d0:46:23:06:bd:7e:54:02:9b:f8:ee:1d:
cf:90:c6:f6:70:37:16:c8:ac:21:19:02:d9:9c:79:
b5:af:dd:8a:20:da:33:52:a2:5e:34:38:14:3e:a9:
1c:9d:0a:0c:7b:82:06:b5:b1:a3:d0:ee:7a:bf:9b:
eb:85:d5:ab:8c:f6:f9:75:87:9d:db:54:91:67:0c:
e3:f5:04:6c:eb:f7:d0:21:10:54:8b:39:ae:de:59:
f0:c3:bc:50:1b:39:db:80:96:48:58:8f:32:85:f8:
77:22:5b:ec:6a:a0:8e:a9:a8:44:b5:71:71:29:ed:
f5:f0:ef:07:1e:b7:ef:9f:7d:b3:8d:79:65:a6:b4:
0a:db:ef:de:94:e5:7c:3a:8b:7e:bc:2a:d7:d5:9e:
82:89:d1:66:ee:37:00:4f:d7:23:af:aa:3a:4f:48:
d9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:17:B9:99:D6:8A:6A:77:F3:A7:0A:EF:5A:4B:96:AF:AF:C2:1D
X509v3 Authority Key Identifier:
keyid:49:E5:80:A0:65:EA:4E:02:BA:9A:CD:79:7F:53:E0:62:CB:6A:AC:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49E580A065EA4E02BA9ACD797F53E062CB6AAC63.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z2XCaJx3F6rdM9bBvaiLfZ1yq7exFr3DKEoyQm7vavS/0/34352e3138392e3136302e302f32322d3332203d3e20323639373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.189.160.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:8b:09:2a:9b:13:45:c5:c2:5b:79:5a:fb:5a:b3:35:77:e4:
b6:08:f9:54:60:5f:9b:f7:33:c5:1c:c9:60:f9:1d:9d:d3:10:
4e:9c:ac:c1:47:b1:a1:cd:38:c3:f2:37:1d:37:c3:9e:0c:d4:
de:a2:7d:d5:e8:58:ad:85:95:a5:64:8d:01:07:16:e8:e4:52:
fe:92:b8:4c:d1:c4:32:ea:92:b8:a6:2e:7b:ee:77:5e:b6:b7:
55:c4:2a:7e:25:1b:ae:1d:a4:56:d0:7c:6e:45:a1:d2:c7:e3:
8f:ce:86:97:29:d5:7b:6d:61:7b:3f:bc:f6:41:42:b0:14:c4:
ec:3a:83:a8:2f:b2:15:cb:e1:5e:0f:b5:05:f9:38:19:1d:84:
ac:37:59:29:1f:b4:53:5b:a2:73:b9:d7:61:12:9d:47:ec:92:
32:c1:c9:2d:7b:14:21:d0:17:18:24:5e:f6:c6:af:e7:23:7e:
3c:7d:62:51:0f:66:e0:0c:92:fd:5d:32:c0:9c:f3:c8:87:ef:
a8:06:04:69:47:5b:62:6a:26:ba:7e:9a:fa:5c:b5:e9:0c:7e:
40:85:57:5d:e8:f5:e9:32:e7:d8:a5:ca:33:4e:7d:5c:ae:00:
2f:6b:48:e5:54:f5:03:fa:17:16:bf:09:a3:b4:8d:1a:c3:a3:
a3:28:1f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:24:07 2025 by rpki-client