Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/34352e3136382e34382e302f32322d3332203d3e20323638303337.roa
File: 34352e3136382e34382e302f32322d3332203d3e20323638303337.roa (raw, json)
Hash identifier: 5IDoTApdaX8T5L/VsNV6Oq3v4bhIAMoEJ5wkug+FgR0=
Subject key identifier: CA:2C:7D:49:B9:C1:69:AE:4E:22:03:C7:44:E7:EF:43:79:DE:98:D1
Certificate issuer: /CN=DE56E93EED065486683E3923D7B7101C360505E8
Certificate serial: 0C3C157407F78C766B726E821E39D6B4B928A1CA
Authority key identifier: DE:56:E9:3E:ED:06:54:86:68:3E:39:23:D7:B7:10:1C:36:05:05:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE56E93EED065486683E3923D7B7101C360505E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/34352e3136382e34382e302f32322d3332203d3e20323638303337.roa
Signing time: Tue 10 Dec 2024 18:46:18 +0000
ROA not before: Tue 10 Dec 2024 18:41:18 +0000
ROA not after: Tue 09 Dec 2025 18:46:18 +0000
asID: 268037
IP address blocks: 45.168.48.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:3c:15:74:07:f7:8c:76:6b:72:6e:82:1e:39:d6:b4:b9:28:a1:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE56E93EED065486683E3923D7B7101C360505E8
Validity
Not Before: Dec 10 18:41:18 2024 GMT
Not After : Dec 9 18:46:18 2025 GMT
Subject: CN=CA2C7D49B9C169AE4E2203C744E7EF4379DE98D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:cf:5c:ea:c6:90:18:bb:eb:67:89:c5:ff:
41:ed:d5:a9:6f:e1:6b:c9:be:b3:82:c7:38:63:ac:
14:45:ee:84:b7:3f:55:68:2f:b0:b9:e1:f4:ce:51:
94:d0:f3:dd:dc:1a:28:bc:8c:3f:38:ff:c6:d0:64:
b0:ea:7c:71:bb:55:1f:e7:83:d0:09:4d:a9:9a:db:
c5:ef:cc:67:50:36:28:c0:3e:cf:0d:d8:fc:40:52:
39:c7:66:60:00:e2:56:7d:3b:56:c4:51:01:37:82:
fa:d3:60:aa:78:90:0b:4c:cc:99:07:54:2b:a2:32:
59:c0:06:86:db:ca:73:64:5f:ab:ef:27:9a:bc:8f:
45:8f:f8:b2:1c:9a:55:bb:cf:b8:e1:15:c1:18:5b:
a9:21:16:2c:af:4b:39:ac:c0:4e:b3:70:9c:17:2a:
fd:3f:dc:8c:3a:60:df:82:11:98:51:7e:7b:2e:0f:
61:4a:1e:80:ab:e5:29:a9:e8:9f:0d:6a:39:84:1c:
97:8a:f2:26:6c:ce:48:48:e5:78:31:7f:1d:22:32:
f6:3e:4d:20:3b:23:9e:8b:3e:c8:7e:ba:2b:4a:76:
55:82:44:23:2b:08:46:f7:09:f2:1d:bb:85:f3:98:
8a:e0:53:c8:be:b4:7d:56:c9:42:b6:28:3b:e0:08:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2C:7D:49:B9:C1:69:AE:4E:22:03:C7:44:E7:EF:43:79:DE:98:D1
X509v3 Authority Key Identifier:
keyid:DE:56:E9:3E:ED:06:54:86:68:3E:39:23:D7:B7:10:1C:36:05:05:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/DE56E93EED065486683E3923D7B7101C360505E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DE56E93EED065486683E3923D7B7101C360505E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/77tdsjHfsad7Hzk5mHM54U7vfHPC9vPKByPtz2rmN2vW/0/34352e3136382e34382e302f32322d3332203d3e20323638303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.48.0/22
Signature Algorithm: sha256WithRSAEncryption
44:37:d9:12:34:d2:14:3c:1a:b9:f8:10:2a:52:ad:04:81:94:
f0:86:6e:05:c5:e1:e9:06:44:b9:64:d6:89:d3:ef:d5:b8:ac:
40:c1:51:4e:66:d8:d5:13:59:f9:6c:88:e8:d6:8f:d4:9f:cb:
b8:52:06:3a:ef:eb:b2:e7:17:bf:79:b4:85:0f:ce:63:a7:6c:
81:54:3c:48:1b:2a:e3:6c:6f:15:c0:2e:09:23:0f:4d:6a:6d:
31:3d:5a:83:f3:0a:0a:67:e2:09:02:8c:53:c1:d3:01:82:78:
83:7a:87:6a:da:dc:ad:92:5d:b3:47:2b:f5:c2:13:c5:47:63:
b4:a0:08:9c:41:5b:76:bb:b8:b3:4b:a7:32:08:fe:13:fe:91:
c1:78:fc:e6:51:85:4a:7b:58:b6:e7:7e:fd:e4:c1:4c:e7:3e:
49:06:40:35:10:3d:6f:06:d5:18:76:d4:fb:f7:39:25:46:77:
87:2f:5b:47:6d:ea:6a:4a:77:69:12:c3:82:ba:36:50:6e:3e:
45:fc:3c:03:e2:fc:d4:40:af:1f:73:62:de:70:98:bf:ae:09:
22:8b:16:32:52:d1:8a:19:d1:bc:9e:11:19:c7:b3:03:d8:cc:
50:9e:f4:0f:41:73:c4:fe:b3:b2:8d:14:1c:1e:bf:d7:f6:a4:
41:ae:ba:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:58:52 2025 by rpki-client