Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
File: 34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa (raw, json)
Hash identifier: gs5LvXCByTT/DkjSNeb5om8LtH0d2zGuTuj5lDRzVrg=
Subject key identifier: D2:99:C1:BE:45:4B:DC:18:01:E4:FA:F3:ED:F5:0D:62:99:F0:BE:AA
Certificate issuer: /CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Certificate serial: 623B125454DA771E93BAAFC84CE4F0624309B8FF
Authority key identifier: 4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
Signing time: Fri 31 Jan 2025 18:02:25 +0000
ROA not before: Fri 31 Jan 2025 17:57:25 +0000
ROA not after: Fri 30 Jan 2026 18:02:25 +0000
asID: 267027
IP address blocks: 45.227.168.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3b:12:54:54:da:77:1e:93:ba:af:c8:4c:e4:f0:62:43:09:b8:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Validity
Not Before: Jan 31 17:57:25 2025 GMT
Not After : Jan 30 18:02:25 2026 GMT
Subject: CN=D299C1BE454BDC1801E4FAF3EDF50D6299F0BEAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cb:8d:27:e3:56:fc:74:3b:2a:95:70:a3:f8:
6c:31:d6:bc:ab:1f:e2:97:ec:e4:d5:0c:b1:9e:68:
58:74:73:ba:e8:39:b3:12:36:b6:3d:0c:29:77:68:
70:1b:68:fb:31:e2:c3:da:34:91:53:84:11:17:c1:
62:39:99:5a:29:ef:b7:00:a4:64:75:07:6e:92:74:
e5:de:b1:9a:1c:4a:54:d6:52:24:80:94:67:7a:da:
c0:9e:2a:10:80:b0:ca:22:5a:ba:7e:18:0b:ae:be:
85:86:cb:56:00:d9:61:41:af:bf:cb:88:5d:01:fb:
b7:82:3f:93:3c:9b:12:3f:88:18:ea:40:21:a1:12:
55:87:42:1b:05:0a:e2:93:64:5d:06:c2:32:70:83:
28:05:5f:d1:9c:e5:b5:62:3c:d4:ea:25:01:4d:7e:
94:c2:e7:c9:41:7a:59:2f:26:9c:19:ff:60:75:60:
07:be:b8:67:85:c6:7f:b0:34:07:90:f1:88:05:25:
1e:4b:48:03:d5:3a:02:0a:bf:00:e6:99:9d:7e:94:
1c:8b:27:ee:ee:64:95:aa:9f:89:6d:a6:e1:55:a1:
2f:48:5f:94:53:68:47:5d:82:31:b6:cc:de:17:4d:
a9:60:1c:8b:80:e6:02:af:28:4b:a1:40:b8:44:ca:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:99:C1:BE:45:4B:DC:18:01:E4:FA:F3:ED:F5:0D:62:99:F0:BE:AA
X509v3 Authority Key Identifier:
keyid:4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/34352e3232372e3136382e302f32332d3233203d3e20323637303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.168.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:b0:3d:a0:26:36:dd:23:a3:29:1c:bb:c2:c0:68:38:48:3f:
68:59:d7:41:15:da:b1:d3:62:66:4c:be:6c:19:c7:e2:40:cb:
25:55:81:df:87:e4:5f:0f:86:6a:c1:84:e7:a8:63:7d:81:50:
e2:97:f0:91:01:84:a1:de:63:54:e4:5c:db:73:37:03:53:e8:
62:3e:dc:fd:07:18:e5:7c:6a:8a:42:84:b0:1d:72:96:f7:6b:
0e:f8:18:2f:b4:9e:0d:53:ab:4a:f9:46:87:e5:36:f6:96:89:
80:a5:e0:ee:7f:17:97:07:ca:eb:d3:4b:b1:03:3b:38:1f:13:
03:23:38:69:8c:76:07:d1:ab:eb:1c:ce:e2:ba:25:a6:7d:83:
8f:dd:45:6d:e0:4e:a4:ff:17:36:1f:86:91:7d:dc:e2:05:6f:
57:ae:83:d2:6d:e4:9c:34:c7:5c:72:1a:5d:e0:25:da:1e:e9:
8b:88:49:09:73:19:0c:46:bb:3c:b3:c4:c0:10:59:5d:0c:a4:
29:3d:d4:4b:ec:cf:66:a1:ad:61:08:37:32:5d:5e:44:67:5e:
ee:f5:ea:92:9f:95:56:69:10:00:f2:dc:dc:75:ca:54:97:0a:
98:ac:6e:c7:f6:16:e4:1e:98:9b:d1:3c:89:a2:6c:c5:08:e1:
2b:1c:28:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:40:49 2025 by rpki-client