Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32322d3232203d3e20323638303833.roa
File: 34352e3136382e3230342e302f32322d3232203d3e20323638303833.roa (raw, json)
Hash identifier: 7j850lwNDfZPMrnIhCRECr5TgPljXqLWNRY/8o+Pdhg=
Subject key identifier: C7:71:F2:64:2B:6C:E0:21:78:CF:80:C4:60:D7:D1:E4:11:3C:F4:F3
Certificate issuer: /CN=1697926DE3CD00AA3AC5E65249B50EF179E9908C
Certificate serial: 3A80893BAE75CC581361491D4E58F521A3DE76BD
Authority key identifier: 16:97:92:6D:E3:CD:00:AA:3A:C5:E6:52:49:B5:0E:F1:79:E9:90:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32322d3232203d3e20323638303833.roa
Signing time: Mon 13 Jan 2025 14:20:38 +0000
ROA not before: Mon 13 Jan 2025 14:15:38 +0000
ROA not after: Mon 12 Jan 2026 14:20:38 +0000
asID: 268083
IP address blocks: 45.168.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:80:89:3b:ae:75:cc:58:13:61:49:1d:4e:58:f5:21:a3:de:76:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697926DE3CD00AA3AC5E65249B50EF179E9908C
Validity
Not Before: Jan 13 14:15:38 2025 GMT
Not After : Jan 12 14:20:38 2026 GMT
Subject: CN=C771F2642B6CE02178CF80C460D7D1E4113CF4F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:c0:bd:1e:85:6e:35:28:2c:ca:be:28:44:
04:f6:25:45:c2:9e:f6:40:3b:3b:d0:7e:c8:76:47:
bf:6f:02:c0:80:ec:4f:21:08:c9:d9:73:5d:00:bc:
12:5f:03:b2:d2:c6:ab:76:28:3b:fd:6b:ca:65:a8:
d7:af:32:51:68:e4:a4:14:cf:8f:c8:e6:36:49:30:
ed:70:79:ef:2f:ed:5a:d0:38:db:24:8b:84:20:34:
4f:aa:2e:65:9a:22:c4:49:8d:b5:94:4a:f9:96:3d:
ca:40:77:62:c3:84:8e:c9:15:4c:7f:72:1e:76:f1:
e5:82:c2:c4:c9:12:50:70:b2:7f:11:45:20:b7:95:
58:36:bc:6a:92:23:44:46:06:1c:f3:72:a7:14:41:
cc:d8:39:9d:56:be:cb:b0:37:4e:38:81:c8:ee:4f:
24:be:6b:c4:db:d0:c0:f5:5d:b8:3d:c6:c3:3a:4f:
fb:ef:87:67:bf:66:eb:84:e2:6a:0e:89:3f:c4:3a:
e5:ee:5b:c3:63:a2:9c:f2:29:3a:39:d9:b8:ff:aa:
c8:7d:ff:2e:64:c5:f8:2e:72:2a:cd:82:a6:7f:9b:
83:c3:af:cd:19:3d:c9:56:62:d1:92:39:43:00:08:
af:2f:12:3f:5c:b7:83:7f:70:86:31:f8:0a:2b:93:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:71:F2:64:2B:6C:E0:21:78:CF:80:C4:60:D7:D1:E4:11:3C:F4:F3
X509v3 Authority Key Identifier:
keyid:16:97:92:6D:E3:CD:00:AA:3A:C5:E6:52:49:B5:0E:F1:79:E9:90:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/1697926DE3CD00AA3AC5E65249B50EF179E9908C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1697926DE3CD00AA3AC5E65249B50EF179E9908C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NRAZqTUi9C2gYdm8MhEir6NsveCUXxywwjZYJ8ES9MT/0/34352e3136382e3230342e302f32322d3232203d3e20323638303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.204.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:eb:3e:fc:1d:99:b1:ee:f9:93:0f:f3:8a:5f:b2:2c:24:12:
7a:6e:02:b4:c0:b9:0c:24:70:91:99:60:06:f6:22:75:0a:1a:
d6:83:cf:e2:73:73:aa:8a:ad:5d:9b:49:60:8e:50:cc:05:4e:
65:0e:92:70:56:fd:e9:bb:6b:d5:5d:1a:61:c1:56:b5:c2:5f:
98:ef:91:0b:91:98:b7:e9:4a:8c:eb:05:34:11:8b:06:4b:8c:
8a:d0:7d:2e:63:b2:a8:12:9e:63:b6:69:b0:da:f3:70:4f:62:
1d:da:6e:4d:c4:82:6f:57:64:67:58:e1:b7:71:00:94:35:44:
a2:77:90:f2:be:9c:b9:8a:34:bb:c9:b9:df:50:72:37:06:86:
1d:0f:34:ed:ff:dd:f0:30:45:8c:49:54:52:38:b3:ed:29:5d:
25:60:f6:7c:7b:02:a6:3f:62:66:18:48:43:bf:cd:ee:cf:46:
7a:74:f1:e1:04:53:dd:42:e3:60:46:cb:e0:23:e9:45:c3:01:
a4:dd:1d:e7:3a:b1:4c:63:81:e6:5d:40:d0:88:a0:06:98:52:
45:79:10:f5:9a:a7:aa:a7:27:27:96:50:c8:85:43:79:a9:98:
e2:92:8d:7c:b0:e4:65:b8:1d:03:5d:41:c7:dd:0c:40:b5:e2:
10:a2:fc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:47:59 2025 by rpki-client