Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32342d3234203d3e20323638313335.roa
File: 34352e3137302e342e302f32342d3234203d3e20323638313335.roa (raw, json)
Hash identifier: J50gMWOz171Nvc8/zCVFAYXXX19QB09LX6HZid+xEfE=
Subject key identifier: 7A:89:B4:CF:89:52:D6:C4:9A:85:03:64:B0:CA:A9:C7:A1:56:1C:30
Certificate issuer: /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial: 3FCC4CCB8F300694038AE247A7DDD70156FB4A3E
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32342d3234203d3e20323638313335.roa
Signing time: Fri 12 May 2023 13:17:05 +0000
ROA not before: Fri 12 May 2023 13:12:05 +0000
ROA not after: Fri 10 May 2024 13:17:05 +0000
asID: 268135
IP address blocks: 45.170.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:cc:4c:cb:8f:30:06:94:03:8a:e2:47:a7:dd:d7:01:56:fb:4a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Validity
Not Before: May 12 13:12:05 2023 GMT
Not After : May 10 13:17:05 2024 GMT
Subject: CN=7A89B4CF8952D6C49A850364B0CAA9C7A1561C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f9:91:fc:87:dd:a9:85:c7:f5:1d:2d:9c:45:
4b:7c:e5:98:93:23:d8:40:c6:63:6f:32:b5:55:1d:
8c:fd:0c:8d:64:33:f9:d8:74:5b:3a:d8:c3:63:d6:
23:94:82:d2:45:1f:f9:e5:b0:00:03:41:d3:3d:46:
98:92:58:db:5c:f7:03:61:4b:9a:34:f4:d8:24:84:
e4:5b:6c:cf:8b:34:cd:6c:4d:bc:b3:0b:0f:d4:44:
31:29:44:83:6a:49:aa:71:96:10:a3:34:07:10:56:
e0:4f:7b:44:3a:9f:c7:79:0c:8e:d2:26:87:65:8b:
65:86:4e:d7:81:96:cf:95:95:0c:fa:9a:7e:6c:ee:
79:5d:7a:ce:c6:e7:ae:3a:17:3b:16:f6:d8:d9:2e:
a5:6e:2b:0d:9c:dc:fb:36:f1:f7:59:ba:fc:7e:73:
13:34:4c:3f:a9:a9:61:95:38:7a:46:a2:40:e3:a8:
bc:87:db:a6:f1:ed:0d:41:d3:36:c8:38:c3:88:f9:
72:15:a8:e4:2b:6e:55:2a:cd:1e:83:51:3b:3f:fa:
c8:3a:24:85:80:ad:97:5e:92:3e:51:35:79:4c:17:
21:ce:a0:1a:5e:b9:b5:72:98:55:92:04:13:f4:0d:
2a:31:67:09:ef:19:79:91:30:b9:ef:18:89:2d:00:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:89:B4:CF:89:52:D6:C4:9A:85:03:64:B0:CA:A9:C7:A1:56:1C:30
X509v3 Authority Key Identifier:
keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/34352e3137302e342e302f32342d3234203d3e20323638313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.4.0/24
Signature Algorithm: sha256WithRSAEncryption
22:cc:fc:ba:80:b0:c5:ab:b5:8d:70:17:90:00:a7:e9:37:72:
db:d8:96:b1:3b:a5:5e:34:e2:76:19:8f:14:10:a7:da:2f:35:
17:1a:32:58:a9:e4:4b:48:b6:c1:88:5d:fd:a2:2e:04:8a:ce:
19:cb:fc:ae:66:e9:96:01:1f:d5:ad:a3:1e:af:ce:ea:cc:de:
e5:b1:ab:2f:96:ef:51:b3:39:31:33:13:51:f1:b4:20:53:41:
5e:b5:c5:c9:4f:7f:c9:42:5f:4e:90:7b:7a:4f:39:7d:88:54:
94:4c:03:02:02:0e:79:78:9f:c4:2d:ca:fb:2d:6c:d5:2d:65:
9f:dd:d2:e4:07:4d:73:0b:fc:31:1b:a0:cb:a2:3a:be:77:e4:
ff:91:0a:65:ab:7c:3b:f9:0b:68:ed:52:ff:c9:27:28:28:48:
e3:a5:3a:c5:fe:50:bf:6b:b0:a6:2e:8c:a3:54:de:5d:40:8d:
ef:d8:16:14:f9:ea:e6:79:00:68:b1:4d:7c:5c:1b:13:12:46:
74:ec:18:e1:97:9a:cc:09:bc:0b:ec:85:1a:eb:6a:f0:5f:35:
b1:a5:95:4c:16:be:0f:59:96:1c:ea:39:03:9a:42:d8:d5:9d:
3c:9b:7b:b4:66:59:a8:11:cc:e0:21:75:d7:6d:d8:0c:ba:2c:
34:c2:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:06:30 2025 by rpki-client