Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa
File: 34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier: wW1AYRIWnLT2+9i255d3wrWlJgs7R8uYiDTp+MQiIbw=
Subject key identifier: 3D:55:6F:60:AF:58:D5:8B:EE:5A:E4:F1:51:97:CE:E4:BE:6E:9F:59
Certificate issuer: /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial: 168682D7194E8D5EEA61A0F9CB27C77877D78599
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa
Signing time: Wed 29 Jan 2025 13:28:02 +0000
ROA not before: Wed 29 Jan 2025 13:23:02 +0000
ROA not after: Wed 28 Jan 2026 13:28:02 +0000
asID: 263047
IP address blocks: 45.188.224.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:86:82:d7:19:4e:8d:5e:ea:61:a0:f9:cb:27:c7:78:77:d7:85:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
Validity
Not Before: Jan 29 13:23:02 2025 GMT
Not After : Jan 28 13:28:02 2026 GMT
Subject: CN=3D556F60AF58D58BEE5AE4F15197CEE4BE6E9F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:14:87:71:37:cc:90:5e:26:70:dc:6e:e9:a6:
a0:53:09:3d:9d:e5:a2:16:bd:ea:33:64:1c:0a:07:
a6:8e:04:f7:62:61:40:74:b6:8d:76:95:71:2a:1a:
69:24:23:c4:e3:e5:65:b9:31:40:a5:72:05:7e:cb:
3b:c3:2f:1e:0c:11:dc:7e:be:70:c1:a1:c1:ac:17:
38:e0:80:99:d9:7c:cb:f7:69:42:06:71:71:9a:31:
53:1e:f9:15:9a:d6:49:d3:25:f2:5f:df:af:c3:03:
34:5b:57:e1:4e:a5:27:86:a9:a0:a4:8b:ff:57:11:
08:5a:45:17:c8:df:bb:fe:92:bd:85:a8:83:56:8c:
dc:f8:62:77:48:51:f3:7a:50:d5:28:78:06:5c:21:
84:0d:ad:f8:0b:e4:88:08:0b:fa:73:11:90:16:48:
f3:6b:50:0e:aa:28:fb:be:cd:d1:a2:22:01:65:72:
10:d1:4d:c5:0f:e2:2e:90:8f:77:84:fc:25:0b:6e:
46:ec:1e:61:ac:94:e9:bc:b5:5b:47:a1:69:15:5d:
0c:27:77:f9:02:da:72:f5:3f:ca:ce:1b:1d:4c:58:
31:60:4c:ee:cb:f6:89:3e:26:59:47:3f:34:04:e9:
bf:d3:ea:47:fb:a0:00:fe:3a:11:38:d9:85:d4:31:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:55:6F:60:AF:58:D5:8B:EE:5A:E4:F1:51:97:CE:E4:BE:6E:9F:59
X509v3 Authority Key Identifier:
keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3138382e3232342e302f32322d3332203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.224.0/22
Signature Algorithm: sha256WithRSAEncryption
36:b9:0e:c3:ea:b8:82:3f:88:79:26:a7:57:21:e4:d6:48:9a:
2a:35:86:30:99:82:d6:e7:f5:d7:dc:4c:ee:85:99:67:2b:77:
a1:fd:97:d5:d5:e4:6e:79:45:f5:00:98:a6:33:4d:be:32:c4:
65:79:12:dd:50:68:26:27:e2:1c:c0:de:8f:6b:6c:52:48:e2:
0a:1d:f1:b4:d8:ab:40:32:01:f5:58:93:e1:89:86:13:61:f8:
8e:c7:f4:b6:a8:16:8d:d8:3d:b8:1c:7e:2c:d5:92:c7:22:31:
73:de:8a:bf:21:cf:8e:76:c3:53:57:1c:f9:15:f8:3c:31:dc:
7e:cc:1d:27:31:57:4f:b0:a8:26:3b:c6:14:25:18:e1:9d:1b:
83:8b:7c:19:69:07:8e:bd:ca:d7:72:82:38:7c:a6:1d:2b:9f:
65:40:56:ec:77:8c:7e:34:2a:fd:da:19:d5:f5:b6:df:66:88:
06:1a:a5:51:2a:52:49:a7:59:d3:76:41:17:cc:3e:df:70:90:
bd:7e:78:73:bb:b5:b2:28:34:56:6d:fa:02:98:d8:02:57:75:
a6:d2:1b:86:b2:98:7a:7c:96:db:7b:a7:1a:cb:2a:88:27:d0:
16:93:c3:95:e7:ca:2f:31:7e:3c:e7:77:9f:aa:5f:e3:ae:31:
b0:56:77:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:30:36 2025 by rpki-client