Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
File: 34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa (raw, json)
Hash identifier: MZ/CopjtHQxSkwPMYNzbHaTeTWIOKOwPV5YECWUvWF4=
Subject key identifier: 0B:0D:EF:17:41:AE:8B:A8:BB:81:C0:68:8D:D9:B2:DD:CD:A2:DB:B7
Certificate issuer: /CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
Certificate serial: 3557CD1D8755648377B0E455386887D6E38889FC
Authority key identifier: 09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
Signing time: Mon 08 Apr 2024 17:09:31 +0000
ROA not before: Mon 08 Apr 2024 17:04:31 +0000
ROA not after: Mon 07 Apr 2025 17:09:31 +0000
asID: 268155
IP address blocks: 45.170.152.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:57:cd:1d:87:55:64:83:77:b0:e4:55:38:68:87:d6:e3:88:89:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09B85FA7726BDDF717827F3B06CC5A3113D7D202
Validity
Not Before: Apr 8 17:04:31 2024 GMT
Not After : Apr 7 17:09:31 2025 GMT
Subject: CN=0B0DEF1741AE8BA8BB81C0688DD9B2DDCDA2DBB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:23:d4:72:d6:fb:43:81:8f:85:e4:dc:29:20:
5d:52:de:61:7f:95:aa:ba:a6:a4:42:b9:41:c9:f7:
16:5f:a3:a9:07:9d:d9:61:37:87:33:35:46:86:04:
17:72:5e:9a:28:10:58:e9:bb:94:3e:62:3e:81:b4:
fa:59:95:4a:55:26:1c:4f:a6:c3:66:64:c1:67:06:
92:db:ad:e1:6f:6b:14:a5:9b:66:b4:c2:07:22:8e:
35:ff:a2:8d:8e:2a:71:1c:7a:11:ea:38:43:c5:cc:
d6:30:ff:72:9e:dd:72:3e:ca:2a:c7:58:79:e4:31:
e1:cb:a5:67:a9:f4:d8:04:6c:f9:66:5c:c2:e3:cd:
39:02:53:4a:ca:a9:21:58:ae:84:c6:38:3f:d2:22:
71:08:f8:80:8c:fc:12:22:69:a6:b9:21:da:c9:b7:
2b:17:94:cb:26:1f:15:c0:e8:0f:1b:61:eb:1d:1d:
b8:d8:57:ce:0f:f3:f1:76:cd:70:54:92:7f:63:49:
7e:b7:67:46:51:e5:7c:74:22:e6:0a:2e:25:81:5f:
06:33:27:b5:60:01:58:3a:88:d6:b8:c1:0c:4e:26:
c0:56:6d:4b:c7:01:0f:da:ce:79:69:ab:8f:9c:3a:
94:b3:31:8e:6e:35:9e:9e:b5:33:e5:68:33:3f:54:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0D:EF:17:41:AE:8B:A8:BB:81:C0:68:8D:D9:B2:DD:CD:A2:DB:B7
X509v3 Authority Key Identifier:
keyid:09:B8:5F:A7:72:6B:DD:F7:17:82:7F:3B:06:CC:5A:31:13:D7:D2:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09B85FA7726BDDF717827F3B06CC5A3113D7D202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4uRWTSVrt9w5UCYJTVvKMZc9FEVTq3tHZZyj6DMnX3rp/1/34352e3137302e3135322e302f32322d3234203d3e20323638313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.170.152.0/22
Signature Algorithm: sha256WithRSAEncryption
39:85:ec:44:21:37:56:6e:30:4b:37:f3:3d:41:89:0b:eb:1a:
d0:28:8f:b2:6f:56:d4:8e:cb:54:5b:13:ae:64:e6:02:71:73:
78:22:a6:50:72:34:37:89:ad:58:15:1a:b7:50:c5:2c:1e:ff:
29:cc:d9:80:fc:07:55:69:4c:51:f7:6a:e2:17:da:7e:86:76:
c9:d2:3f:44:cb:70:d0:9d:6c:f2:0e:56:b3:cd:1d:1e:d3:25:
70:5f:db:51:f5:26:5a:c0:83:c2:35:68:ef:80:03:ab:1c:ca:
2e:40:4e:5d:fc:f9:5a:04:ef:cd:52:03:6c:59:00:45:d0:b7:
c5:78:9f:69:05:e7:b3:67:6b:65:a3:8c:a4:37:f0:ee:26:58:
cc:6c:d7:f0:a7:8e:67:5d:2c:88:7c:fc:76:97:d2:ce:14:a6:
d1:be:19:79:d5:ab:d7:8f:45:40:6e:fe:1d:7d:e7:81:91:3b:
c2:68:19:e7:a3:ea:be:f9:d8:92:f8:5f:97:0b:39:b4:17:e0:
af:51:78:e6:a4:a2:cf:da:f7:2d:48:65:0d:f9:b5:c7:27:e3:
04:6b:9b:fe:37:12:20:fa:73:9a:b5:50:43:5d:39:42:21:3c:
24:70:60:5d:c8:56:8c:77:66:5d:2b:81:e8:d3:ff:f0:f7:16:
ac:a1:90:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:40:46 2025 by rpki-client