Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33362e302f32322d3232203d3e20323639343431.roa
File: 34352e3138352e33362e302f32322d3232203d3e20323639343431.roa (raw, json)
Hash identifier: Q7jtBq2oRCr7rqOS48Ze/nWglKpCL3JxuVlTSKcKUAQ=
Subject key identifier: DB:AB:66:D6:92:87:46:4B:AE:0A:CF:19:B6:13:13:8D:45:AC:9E:48
Certificate issuer: /CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Certificate serial: 05649C15CC15512EB63233FE9B1D5E0BBBA7B511
Authority key identifier: 83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33362e302f32322d3232203d3e20323639343431.roa
Signing time: Thu 09 Jan 2025 04:45:42 +0000
ROA not before: Thu 09 Jan 2025 04:40:42 +0000
ROA not after: Thu 08 Jan 2026 04:45:42 +0000
asID: 269441
IP address blocks: 45.185.36.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:64:9c:15:cc:15:51:2e:b6:32:33:fe:9b:1d:5e:0b:bb:a7:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Validity
Not Before: Jan 9 04:40:42 2025 GMT
Not After : Jan 8 04:45:42 2026 GMT
Subject: CN=DBAB66D69287464BAE0ACF19B613138D45AC9E48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:85:65:3d:2a:f1:90:60:78:d0:38:98:96:47:
d4:c7:50:e8:0a:b9:ef:47:63:82:72:b5:71:b2:7b:
2d:34:a0:d0:d2:1e:9d:7a:01:22:2f:49:fe:00:de:
c5:8f:6c:06:a9:43:1f:9a:c4:b4:03:ce:3b:f0:d5:
85:c6:e9:c7:cf:85:55:1d:9e:2e:24:57:94:24:f8:
ec:57:4f:78:61:a4:56:66:31:e1:3f:bb:58:af:87:
45:6c:50:1c:c9:61:d3:3c:77:8a:a6:9f:77:91:ec:
10:07:12:51:87:f2:ff:de:6a:33:3c:00:59:4f:a0:
d8:c9:8a:cb:2c:27:25:93:3b:37:90:70:07:f0:be:
2a:56:36:2e:00:a9:71:0a:22:ee:26:fb:ca:ac:5c:
bc:be:03:0d:16:0c:cc:7d:b4:6d:d1:a6:a1:9d:a5:
00:30:85:44:54:e3:3d:fd:53:02:5d:72:dd:ac:c8:
7a:cf:cf:d2:b8:a3:94:74:b0:e3:88:1a:9c:ad:86:
62:2b:6d:fe:26:11:be:08:1e:71:ee:8e:b6:fc:37:
64:43:95:3e:cf:e5:da:6b:6a:af:cc:e5:d9:bc:cb:
c4:cf:32:3c:37:71:11:ce:97:06:36:c4:cf:19:bd:
41:83:ed:83:53:67:3a:dc:7c:ea:7f:1b:d6:16:83:
2b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AB:66:D6:92:87:46:4B:AE:0A:CF:19:B6:13:13:8D:45:AC:9E:48
X509v3 Authority Key Identifier:
keyid:83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33362e302f32322d3232203d3e20323639343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.36.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:28:a2:1b:39:fa:e7:3f:1b:e1:ac:b5:af:5b:5c:75:9d:54:
9e:88:e2:ec:ac:f5:0d:68:65:e9:57:5d:96:94:78:33:ba:fb:
5c:56:2d:d8:ad:75:dd:87:04:ec:8e:e6:f5:61:71:2b:2b:77:
4d:9b:d5:fe:b7:fa:b3:07:64:48:5d:a4:85:4b:05:09:3d:65:
77:d2:0f:99:42:89:47:5c:2d:f1:2c:19:a0:40:6a:b9:29:24:
9c:9a:6a:ea:3e:f6:cc:ed:64:01:c8:4d:bd:64:56:6b:27:04:
ed:4c:89:d5:a6:df:b2:94:7d:7c:0a:fe:e7:9e:2a:a6:80:10:
9f:62:db:51:32:1f:24:3f:1a:58:f2:95:04:2c:21:b8:9e:eb:
86:e3:2d:96:11:94:ab:25:5c:a5:64:85:0c:e9:c7:3b:7c:5c:
88:b9:43:3b:1b:bb:74:36:51:22:23:47:75:c4:ff:f3:eb:93:
1d:c2:80:7c:dc:fd:0c:a8:2a:ef:4e:d2:cc:2d:24:08:42:44:
b1:b0:de:3c:c0:d9:05:2d:4a:9a:96:c2:6f:c4:67:d7:30:52:
bb:b2:8a:11:ab:69:de:96:24:51:3c:b8:e6:da:9f:78:9b:f4:
55:f7:70:fc:9d:6a:52:29:82:65:af:5e:be:87:59:bc:60:ff:
14:22:ab:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:33:05 2025 by rpki-client