Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33382e302f32332d3233203d3e20323639343431.roa
File: 34352e3138352e33382e302f32332d3233203d3e20323639343431.roa (raw, json)
Hash identifier: uuUfpFAAs2762xdHfXGbN/uuyBX9tg3yPxpEABpgAu4=
Subject key identifier: 02:18:46:FB:48:78:B4:79:B1:A0:88:A8:F1:C8:72:9A:66:1F:A8:94
Certificate issuer: /CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Certificate serial: 14331CB647025180F5F9BBF7415CEE6BC2C912A0
Authority key identifier: 83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33382e302f32332d3233203d3e20323639343431.roa
Signing time: Thu 09 Jan 2025 04:45:41 +0000
ROA not before: Thu 09 Jan 2025 04:40:41 +0000
ROA not after: Thu 08 Jan 2026 04:45:41 +0000
asID: 269441
IP address blocks: 45.185.38.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:33:1c:b6:47:02:51:80:f5:f9:bb:f7:41:5c:ee:6b:c2:c9:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Validity
Not Before: Jan 9 04:40:41 2025 GMT
Not After : Jan 8 04:45:41 2026 GMT
Subject: CN=021846FB4878B479B1A088A8F1C8729A661FA894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e4:e9:a0:7e:7c:7b:9a:4b:20:b3:0f:58:55:
fb:23:de:f9:78:1a:05:95:82:7f:51:f5:fe:5b:8c:
f0:48:e3:4c:9d:5c:12:39:21:f0:e1:eb:2a:b2:c8:
91:be:ce:ad:eb:87:d3:5d:a9:a0:c2:9e:23:c5:84:
b8:99:2f:5e:f7:77:e0:2f:31:a5:ec:fd:7f:19:3b:
f5:f8:cd:2f:d6:4d:b1:2c:1a:b8:b9:89:ea:03:a5:
1f:3b:68:1e:c9:f7:5e:39:fb:fe:ef:c6:e7:0d:5c:
df:ed:36:19:18:53:f2:49:28:cd:91:b4:fc:e9:ae:
88:fd:de:a2:21:51:73:21:47:18:01:8c:1e:ab:5a:
dc:4a:79:fc:b5:46:28:e7:6d:ea:7f:8c:b5:aa:f9:
9d:62:d1:eb:ed:01:1b:3a:1c:90:69:97:d0:e1:8e:
23:ca:40:83:95:d6:35:13:d6:6e:f3:df:d8:2a:69:
cd:74:0e:f6:cb:53:c6:a7:17:f8:49:84:e1:47:b4:
3c:f8:16:2a:dc:cf:d4:f8:41:cf:48:61:6f:d1:c5:
ca:d3:04:7c:db:f6:5c:ec:9d:f8:90:69:44:bd:15:
f9:11:8b:3f:e6:91:23:ff:b4:ce:59:d1:a7:e1:a1:
5f:63:7c:50:08:3a:26:fe:00:78:28:9c:78:e8:ea:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:18:46:FB:48:78:B4:79:B1:A0:88:A8:F1:C8:72:9A:66:1F:A8:94
X509v3 Authority Key Identifier:
keyid:83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/34352e3138352e33382e302f32332d3233203d3e20323639343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.38.0/23
Signature Algorithm: sha256WithRSAEncryption
03:6a:5d:c3:f6:90:8d:54:d6:a6:2b:f5:0d:ee:98:cc:3e:a6:
d8:f8:a1:4a:35:f4:df:81:7c:d1:fc:b8:66:5d:ad:df:9c:9f:
a0:a7:27:8d:5b:4b:7e:1d:8f:ef:3a:d2:8e:1a:5f:44:76:a9:
51:0a:02:13:93:ed:cf:46:0d:52:82:50:c9:fa:04:18:29:97:
c4:aa:f1:b7:37:5d:21:ff:40:1b:8e:0e:d4:cc:7f:ee:01:65:
13:b1:ac:44:0b:e5:e1:69:b5:41:d1:1c:02:f4:9f:6f:dc:9b:
3c:46:de:a3:35:3b:73:5b:11:09:be:31:58:85:9f:6b:a6:99:
ab:15:74:69:b6:08:b1:60:ba:02:35:59:62:db:ad:46:b9:c7:
e3:1e:52:54:c5:49:bd:bb:9c:31:6b:1a:0c:9b:20:47:ba:f6:
ac:5e:72:62:8b:27:55:ab:32:af:37:33:38:74:10:33:0a:8b:
ae:4e:80:94:b6:ea:7e:07:db:97:e5:07:83:82:2e:51:18:9b:
ca:3d:04:9b:6e:e4:7a:0c:d8:2a:4a:1c:71:bc:b4:29:03:f9:
f3:2f:dd:b6:a3:18:df:3a:c8:bc:a1:83:b5:c5:ca:da:07:69:
a5:2e:25:76:0d:eb:d4:4b:13:d3:b9:14:34:31:dc:56:12:d9:
42:42:eb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:35:54 2025 by rpki-client