Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa
File: 34352e3136322e32382e302f32322d3234203d3e20323638353236.roa (raw, json)
Hash identifier: zqNX3MuIEatAVLDb0k49Nn2HHolj4rw/rTdQTMaWqfw=
Subject key identifier: 94:9F:D5:47:21:C4:E5:0E:A6:D1:2D:B3:89:03:19:0A:91:4A:F4:DA
Certificate issuer: /CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Certificate serial: 7C659E0B5E948AA4DE93B570D9C1301E3C1C6C8E
Authority key identifier: B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa
Signing time: Thu 06 Mar 2025 20:55:46 +0000
ROA not before: Thu 06 Mar 2025 20:50:46 +0000
ROA not after: Thu 05 Mar 2026 20:55:46 +0000
asID: 268526
IP address blocks: 45.162.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:65:9e:0b:5e:94:8a:a4:de:93:b5:70:d9:c1:30:1e:3c:1c:6c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0
Validity
Not Before: Mar 6 20:50:46 2025 GMT
Not After : Mar 5 20:55:46 2026 GMT
Subject: CN=949FD54721C4E50EA6D12DB38903190A914AF4DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ad:a4:42:f9:49:68:2d:e0:0e:0a:21:e0:6d:
01:9e:76:e8:df:0b:1b:66:b4:77:09:3d:49:11:f9:
5f:f0:51:66:57:89:31:39:f1:94:82:2c:ba:1d:45:
df:74:b9:f2:73:45:79:7a:2f:19:96:a5:a8:27:89:
d6:37:e6:60:ae:11:e4:10:11:04:91:38:76:ab:2a:
ff:96:b7:99:64:44:80:33:d5:40:80:f9:c2:45:74:
b0:05:49:c2:8e:ee:12:00:da:a8:8a:14:47:37:f2:
95:ae:fe:1b:ac:3e:12:a1:5e:51:f4:dd:a1:65:3c:
25:e3:3d:ec:24:f1:08:59:f5:fc:a4:b1:7c:b6:d1:
64:58:8a:c3:42:fa:d3:9d:7a:aa:ed:4f:d0:73:30:
b1:9b:9d:47:87:98:0f:ba:01:f2:bd:ad:58:da:59:
91:97:d6:e4:ba:3d:cb:90:f5:d1:0f:c7:6f:3f:f2:
04:c8:19:2d:8f:aa:24:5a:71:71:54:52:19:24:49:
f6:56:0b:09:8c:c0:c7:6f:c8:6d:4e:e1:5b:d0:c0:
5b:23:90:9e:2d:ca:a1:5b:d4:ef:23:f8:6c:b4:18:
7d:27:95:61:69:95:69:9b:1f:92:0e:04:c8:89:d5:
d9:07:12:f0:ce:83:42:a2:eb:fa:fb:19:45:ad:4c:
1b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:9F:D5:47:21:C4:E5:0E:A6:D1:2D:B3:89:03:19:0A:91:4A:F4:DA
X509v3 Authority Key Identifier:
keyid:B5:97:38:1F:2A:7F:DE:08:B3:63:98:AF:B0:FC:E7:E7:B6:BD:31:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B597381F2A7FDE08B36398AFB0FCE7E7B6BD31F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Ysqssza7gss96Mdf5WvLGnpHPMCJuDEF7A4tG7JohXT/1/34352e3136322e32382e302f32322d3234203d3e20323638353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.28.0/22
Signature Algorithm: sha256WithRSAEncryption
78:dd:66:1d:2a:f1:86:fb:6c:9f:1b:4a:4e:6f:f2:4a:53:58:
50:0e:c3:0d:ae:75:e1:2b:4f:e1:c8:60:d3:9d:46:bf:57:0f:
e8:de:f3:b2:d8:26:aa:cd:ea:3d:bd:3a:4d:69:60:19:3c:f0:
09:b8:9b:05:a6:49:96:83:c0:04:da:71:6f:09:88:ee:4a:23:
d6:82:f9:59:7d:29:6e:85:74:ee:5a:18:95:0d:99:00:0a:53:
da:6d:73:79:74:a5:9c:2a:d9:2b:f6:74:c2:56:6d:69:f7:15:
41:48:c0:fd:e0:02:73:5d:92:af:62:b9:62:cd:61:d5:b0:3c:
37:1b:54:92:2e:5a:44:97:bf:1c:2c:4c:6e:b4:e5:00:be:71:
4a:94:40:21:14:82:aa:5c:6b:c3:96:b0:1d:69:5b:33:6d:6e:
de:02:ee:d1:e2:5b:df:08:83:9a:7f:e0:ad:44:0d:7b:95:ae:
5d:7c:fd:14:87:3f:8e:a3:21:91:9b:09:8b:09:8a:c4:38:1e:
ba:e4:7e:68:0d:f5:8c:93:07:e4:06:9e:6f:56:8e:84:18:c8:
9f:dc:af:a2:6a:b5:9d:b2:40:23:7d:ce:13:63:b2:2b:a7:9c:
ce:ca:44:91:71:f2:dd:5f:88:6e:69:b0:f7:b4:57:2e:62:9d:
e4:02:f0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:00:13 2025 by rpki-client