Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3232203d3e20323639363036.roa
File: 34352e3139302e302e302f32322d3232203d3e20323639363036.roa (raw, json)
Hash identifier: xa1SHBUot2ggV40S1XtSIXjMA2Bx8cu4Z2wrHDd0kiM=
Subject key identifier: 7D:01:53:9F:6B:04:29:5C:31:89:F6:2C:B3:42:54:87:FC:64:AE:2C
Certificate issuer: /CN=85148194E7412878BCCDE25660F9052CF17D2FB1
Certificate serial: 339737920F4398D0DDEDC072C7F2F509D813FB24
Authority key identifier: 85:14:81:94:E7:41:28:78:BC:CD:E2:56:60:F9:05:2C:F1:7D:2F:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85148194E7412878BCCDE25660F9052CF17D2FB1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3232203d3e20323639363036.roa
Signing time: Tue 22 Feb 2022 18:52:32 +0000
ROA not before: Tue 22 Feb 2022 18:47:32 +0000
ROA not after: Tue 21 Feb 2023 18:52:32 +0000
asID: 269606
IP address blocks: 45.190.0.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:97:37:92:0f:43:98:d0:dd:ed:c0:72:c7:f2:f5:09:d8:13:fb:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85148194E7412878BCCDE25660F9052CF17D2FB1
Validity
Not Before: Feb 22 18:47:32 2022 GMT
Not After : Feb 21 18:52:32 2023 GMT
Subject: CN=7D01539F6B04295C3189F62CB3425487FC64AE2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:db:89:dc:ba:d8:f3:42:7c:b4:18:1d:4e:
de:b8:46:75:8e:b5:8c:fc:4a:8e:0f:6b:c8:b8:ce:
5c:86:1a:39:ed:56:75:85:37:0a:b2:a7:45:85:b2:
b1:85:7b:5b:2c:ab:02:d2:f0:f9:52:a4:61:8f:b8:
a3:33:56:33:79:96:b9:61:90:67:3b:59:79:8d:b1:
ad:ec:53:12:aa:47:95:18:39:21:3a:3e:4a:23:e5:
79:5d:9f:29:e5:1a:eb:5d:de:dd:84:d1:a9:d2:97:
e1:c1:ae:37:01:cc:08:78:39:2d:84:3e:8f:fa:24:
b8:59:c4:61:b5:61:47:88:93:0a:13:eb:3a:f2:dd:
82:12:e5:5c:f5:9f:44:d4:84:7c:b8:c4:81:9d:c2:
c0:f3:80:3b:19:3f:8a:fd:4e:c2:7c:70:28:60:c8:
68:5c:48:9c:39:92:39:05:d4:f9:88:ea:89:31:1a:
31:1e:ef:28:97:57:50:19:37:51:38:48:2e:07:cf:
5b:8e:ff:e4:b7:3d:03:65:df:46:fe:0c:29:b8:c9:
2e:2a:bb:7a:41:f5:d3:32:a5:c7:15:06:c3:95:07:
33:4e:b4:5d:ea:b3:89:1e:44:0e:15:16:5b:4f:26:
78:bc:b0:d2:8d:9b:58:68:54:b9:c8:ac:96:ee:16:
2c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:01:53:9F:6B:04:29:5C:31:89:F6:2C:B3:42:54:87:FC:64:AE:2C
X509v3 Authority Key Identifier:
keyid:85:14:81:94:E7:41:28:78:BC:CD:E2:56:60:F9:05:2C:F1:7D:2F:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/85148194E7412878BCCDE25660F9052CF17D2FB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85148194E7412878BCCDE25660F9052CF17D2FB1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qZD2BREH61e8emMGG65i8456XSxuHW4ddojjmJvYHVJ/0/34352e3139302e302e302f32322d3232203d3e20323639363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.0.0/22
Signature Algorithm: sha256WithRSAEncryption
94:56:46:6c:93:88:29:22:fd:34:26:32:e6:a0:2c:5d:bd:c8:
fd:d2:86:07:40:c6:26:be:51:bc:62:87:6f:47:87:3f:d8:e0:
1c:68:42:80:2b:b3:d3:fc:e1:a5:3e:b8:58:f6:50:5b:d5:df:
b4:1c:2a:09:94:be:96:53:80:82:01:b8:fd:57:06:5a:ef:ea:
bd:c0:28:7a:7e:5f:86:e5:32:3e:86:65:42:de:d9:41:c8:c3:
ed:f1:18:7d:2d:89:93:2b:4a:81:a8:ad:ed:6b:ba:7a:ca:28:
e4:2b:5f:42:77:cf:d7:79:8b:82:5a:29:69:ba:9b:9d:df:5c:
d5:00:39:2b:70:54:0c:db:84:58:6c:20:c9:5b:eb:94:02:8a:
57:c4:d7:64:e5:1f:6a:83:3c:17:52:ac:e4:cb:2a:ae:42:c5:
f0:86:45:a0:aa:a2:09:07:c9:e3:8f:f6:5c:fb:86:ad:e1:5c:
97:1b:f6:c7:ca:60:5a:59:34:d8:f6:e4:30:b4:10:1a:b8:8f:
38:a2:68:0b:bf:00:50:39:bb:8a:c3:1a:83:4f:83:e6:f5:8c:
0d:fe:7e:de:e2:16:07:47:58:ca:1b:a2:f4:f2:9b:32:90:1d:
25:cb:59:0e:83:64:13:63:df:b7:98:fb:0a:14:67:53:90:a9:
59:62:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:30 2025 by rpki-client