Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/34352e3136332e32342e302f32322d3234203d3e20323634353635.roa
File: 34352e3136332e32342e302f32322d3234203d3e20323634353635.roa (raw, json)
Hash identifier: d68xHNw92RrBfcIIy71Nrlcf2E9HhEKM7s3SxW0EfQ8=
Subject key identifier: EC:09:55:3E:35:C7:05:1F:66:66:3C:56:76:BC:D5:43:AC:BD:75:76
Certificate issuer: /CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
Certificate serial: 0D01A519B9F315ABE6280238D616E049F0BAA5D7
Authority key identifier: 71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/34352e3136332e32342e302f32322d3234203d3e20323634353635.roa
Signing time: Wed 03 Apr 2024 12:38:06 +0000
ROA not before: Wed 03 Apr 2024 12:33:06 +0000
ROA not after: Wed 02 Apr 2025 12:38:06 +0000
asID: 264565
IP address blocks: 45.163.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:01:a5:19:b9:f3:15:ab:e6:28:02:38:d6:16:e0:49:f0:ba:a5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB
Validity
Not Before: Apr 3 12:33:06 2024 GMT
Not After : Apr 2 12:38:06 2025 GMT
Subject: CN=EC09553E35C7051F66663C5676BCD543ACBD7576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7e:c0:55:1f:87:c0:eb:14:ab:59:f1:d9:72:
1b:dc:2f:88:61:d8:87:b3:6f:c0:76:f7:36:ba:69:
a9:d5:5b:17:79:f4:17:7a:b4:82:31:da:70:ed:55:
9f:17:31:aa:b6:7f:7f:5e:aa:2a:ad:76:15:b5:7d:
ff:7f:65:83:7f:b5:aa:44:18:08:bb:6f:40:35:20:
75:8a:bd:5c:1f:20:81:b9:12:53:82:1f:65:cb:27:
29:b6:1f:8b:68:c1:9a:43:99:0e:d3:bc:f1:e6:2b:
08:33:50:32:e3:cc:02:58:d1:70:20:b5:3a:f8:4f:
37:e7:26:43:ee:1f:83:89:08:bc:29:0d:cf:6d:07:
55:3a:aa:38:5d:2f:7d:f3:50:2f:06:01:da:f9:95:
53:15:b9:bc:9f:2e:d1:48:03:8d:8e:fa:e3:8c:6a:
44:38:0b:8d:04:05:3d:fa:fe:65:c4:66:b3:44:d4:
ee:31:c1:bc:35:12:ee:de:84:24:b9:07:e6:32:11:
c5:4a:72:9e:d2:2c:08:a4:6e:f3:9e:34:23:b8:8d:
29:88:33:82:2f:77:6c:71:ab:8c:35:f1:78:21:73:
48:62:88:19:6a:1c:1a:fa:7f:95:8d:51:9b:e9:3a:
f5:10:e9:d6:34:d0:92:0f:9c:2d:46:60:41:95:b1:
cd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:09:55:3E:35:C7:05:1F:66:66:3C:56:76:BC:D5:43:AC:BD:75:76
X509v3 Authority Key Identifier:
keyid:71:D7:A8:21:9C:D2:E4:A7:32:B4:D5:C8:ED:F0:F1:63:A5:07:2E:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71D7A8219CD2E4A732B4D5C8EDF0F163A5072EDB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NuAS657d4BxpLBdiD8eTKqJsyWNbg6b4igfdMrusqqr/0/34352e3136332e32342e302f32322d3234203d3e20323634353635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.24.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:65:33:73:e0:53:7c:7f:c0:4d:4d:50:e0:23:ea:a4:ee:eb:
1c:cd:c9:97:08:99:db:7b:2e:f4:bb:c2:d8:76:94:76:ba:c2:
23:12:a9:e7:08:81:16:fb:47:01:e1:8a:37:ef:7c:01:88:b1:
ec:ac:bc:0c:2d:4e:82:63:bf:55:df:00:d2:3b:19:4e:24:e5:
b1:f9:4a:da:2a:72:ff:4d:5e:5d:26:ba:d1:f0:bb:76:d4:94:
39:8e:61:87:d3:99:06:8d:00:80:dc:9b:63:bd:6a:58:68:80:
dd:1e:dc:e0:79:41:f4:b0:e8:be:9d:72:51:0a:19:73:e7:f9:
89:fc:43:77:d9:b6:0b:14:2c:bc:77:75:dd:a1:76:e0:b3:a1:
36:b9:bf:41:5b:f2:27:00:b5:55:c0:31:8e:dc:43:bb:ac:9b:
8e:11:b2:4f:c5:4a:b9:ed:b2:c2:cd:3f:08:c8:ae:54:f9:82:
7a:27:b3:d9:06:da:94:f9:5f:3e:26:e8:48:f9:e0:03:f8:06:
07:55:ae:c6:2f:6d:e5:48:58:d7:d2:bf:c3:2a:7f:b3:08:b2:
b9:70:c1:cb:5c:4a:2a:2a:c0:3f:9c:70:c1:13:cd:78:03:3c:
7d:1d:24:55:3b:04:de:5b:06:dd:6f:64:57:7c:9c:bb:94:2e:
13:5a:28:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:11 2025 by rpki-client