Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33362e302f32332d3233203d3e20323639343431.roa
File: 34352e3138352e33362e302f32332d3233203d3e20323639343431.roa (raw, json)
Hash identifier: REkUOp7gAY7j01Byy7dsw5aE5F4Ru2CY8nvdxqq161Q=
Subject key identifier: 55:7E:B2:CF:63:74:9B:C0:35:68:6D:ED:C8:93:E6:43:76:F5:0F:C1
Certificate issuer: /CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Certificate serial: 7D4EB99EE439870D80F4C74AC2CDD63DFD9C73A2
Authority key identifier: 83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33362e302f32332d3233203d3e20323639343431.roa
Signing time: Thu 09 Jan 2025 04:45:42 +0000
ROA not before: Thu 09 Jan 2025 04:40:42 +0000
ROA not after: Thu 08 Jan 2026 04:45:42 +0000
asID: 269441
IP address blocks: 45.185.36.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:4e:b9:9e:e4:39:87:0d:80:f4:c7:4a:c2:cd:d6:3d:fd:9c:73:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Validity
Not Before: Jan 9 04:40:42 2025 GMT
Not After : Jan 8 04:45:42 2026 GMT
Subject: CN=557EB2CF63749BC035686DEDC893E64376F50FC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:5d:1a:cd:0c:99:3a:47:2c:78:26:61:1a:d6:
75:bd:4b:a1:04:f3:14:b9:f2:5c:8b:c2:10:da:bd:
4e:6a:51:4c:63:0c:1a:46:9e:2b:d8:33:28:82:21:
21:d6:0f:4d:ec:8c:49:5a:28:ea:8d:12:40:5f:70:
b5:fa:17:77:8d:f7:3b:b0:07:6e:2d:9c:23:ca:17:
b6:16:99:1e:28:99:ee:39:c5:52:27:4a:16:f1:4e:
3b:c3:ce:04:18:56:2d:3b:11:5b:b8:e9:1f:19:32:
35:ea:3c:e1:84:8d:1d:3a:cb:77:35:3b:ef:d2:b6:
77:3e:f5:61:ba:0f:08:1a:fd:fc:22:19:b2:a1:1d:
0c:3e:37:e4:26:7b:71:ac:d8:b9:16:42:e1:e2:a9:
f0:a7:22:06:25:25:7c:f5:7a:fc:31:dd:7e:c5:63:
09:30:1f:12:9b:cb:60:fe:a5:03:e4:14:55:ca:96:
3d:36:3e:56:27:cd:c6:90:69:36:8b:00:69:57:5e:
18:1a:8a:09:dd:25:8e:44:7b:8c:8e:ce:1f:5c:59:
4a:72:16:90:67:6a:1d:82:70:39:95:a8:60:d6:c2:
a2:f4:74:27:37:c0:f6:cb:ef:fe:ec:a2:20:bf:2a:
60:ed:73:4e:93:a0:66:b8:4b:0e:02:2b:d3:9d:b9:
19:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:7E:B2:CF:63:74:9B:C0:35:68:6D:ED:C8:93:E6:43:76:F5:0F:C1
X509v3 Authority Key Identifier:
keyid:83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33362e302f32332d3233203d3e20323639343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.36.0/23
Signature Algorithm: sha256WithRSAEncryption
07:13:5a:b2:d1:fb:08:b7:e7:bf:53:4b:84:1d:69:2b:a7:84:
78:5f:9b:35:21:2f:70:1d:be:35:a8:23:ee:ac:2b:38:35:55:
8d:b0:9f:5a:29:fb:88:fb:be:fb:2b:b7:9a:b3:ea:75:ee:86:
de:55:31:67:d0:d9:7d:f1:0d:5b:8d:47:43:9d:8a:af:46:29:
51:4c:92:3a:18:50:51:33:e1:e4:85:56:8d:36:64:11:fc:a9:
ce:d8:b7:e8:24:7d:ca:bd:27:d7:fe:af:0c:c4:c5:ce:24:c5:
da:80:6a:0d:39:bc:53:99:d0:31:83:21:1a:a2:a6:0f:f6:bf:
0b:b9:3a:bd:37:0c:27:12:6f:35:90:57:46:35:2c:45:42:2a:
00:12:b7:c0:7a:f5:44:02:03:66:a0:bd:73:19:2e:8f:7c:84:
d8:eb:b7:76:6d:9a:7a:59:f8:cf:9a:a2:69:97:ea:1e:e0:13:
22:61:4b:cc:64:66:3c:57:0c:ad:86:e5:02:97:f3:85:52:92:
c2:c8:1d:8d:3c:50:ae:7c:8c:9b:22:03:1d:84:1c:7e:80:74:
b3:e2:98:ff:e1:56:4b:2e:e8:75:c6:d1:af:bd:50:57:ce:91:
5c:48:d1:3d:c2:30:f9:83:e4:89:92:98:4a:f3:15:25:d5:7e:
24:cc:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:36:33 2025 by rpki-client