Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e352e302f32342d3234203d3e20323638393235.roa
File: 34352e3137362e352e302f32342d3234203d3e20323638393235.roa (raw, json)
Hash identifier: qvmsPpxsX+JYpr+HCPxYUrchokkR9zOlQfuh/6YPMNA=
Subject key identifier: CA:B0:92:5E:68:5A:E7:2E:0F:72:0B:B9:03:AE:9B:32:06:B0:CF:EC
Certificate issuer: /CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Certificate serial: 2FBC20ADC6477A8B402D240AA3F937B119F6DE0B
Authority key identifier: B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e352e302f32342d3234203d3e20323638393235.roa
Signing time: Thu 06 Mar 2025 08:14:53 +0000
ROA not before: Thu 06 Mar 2025 08:09:53 +0000
ROA not after: Thu 05 Mar 2026 08:14:53 +0000
asID: 268925
IP address blocks: 45.176.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:bc:20:ad:c6:47:7a:8b:40:2d:24:0a:a3:f9:37:b1:19:f6:de:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31
Validity
Not Before: Mar 6 08:09:53 2025 GMT
Not After : Mar 5 08:14:53 2026 GMT
Subject: CN=CAB0925E685AE72E0F720BB903AE9B3206B0CFEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:9f:19:74:91:7f:e5:17:d0:57:5b:5d:b6:
23:d2:d8:e5:7e:74:7e:e2:e2:0b:ce:81:98:6b:91:
02:9e:47:ee:c4:d2:44:36:68:24:60:59:fa:2e:12:
57:17:ef:4a:bc:ba:fb:ab:1d:2e:95:9d:3b:ad:bf:
cf:ec:71:54:6b:a6:9f:a5:1e:e1:70:57:68:1f:9a:
54:e2:66:9b:e1:77:ce:09:fc:ce:2a:19:77:ce:9e:
d0:97:7e:ad:c1:d0:06:6e:23:dc:df:dd:3b:d1:dc:
b5:82:a9:b6:e5:60:3d:c0:86:87:a3:a7:5a:03:2a:
cc:9a:31:c9:e7:d4:59:c1:c6:9d:b3:14:82:90:96:
38:5b:90:83:3d:4c:79:6a:96:7d:14:e6:6b:aa:f3:
08:2f:b4:46:11:92:e9:2b:4f:76:92:70:a1:6b:e7:
37:10:db:2f:fe:06:47:5f:c5:ae:bf:54:0d:ed:a7:
2c:cb:2b:5c:99:c1:d3:f3:ab:90:fb:35:12:d6:32:
28:32:72:a1:6c:6b:ae:c2:4c:6b:d5:d7:ec:34:f9:
75:02:7c:22:d6:89:b0:fc:e0:25:a7:9f:03:ad:8f:
83:16:36:51:07:c1:19:7e:cf:88:cc:60:8d:59:02:
96:3e:c1:f6:c6:57:57:30:57:20:01:86:da:ed:c8:
c1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B0:92:5E:68:5A:E7:2E:0F:72:0B:B9:03:AE:9B:32:06:B0:CF:EC
X509v3 Authority Key Identifier:
keyid:B3:9B:B9:AA:D8:3E:BF:DF:74:6E:9B:87:3C:0E:1F:FA:FD:07:1E:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B39BB9AAD83EBFDF746E9B873C0E1FFAFD071E31.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YupLApyE8p1jaBaMRVsTWqpoTgQJtc4USTWh6VemeKt/1/34352e3137362e352e302f32342d3234203d3e20323638393235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.5.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b6:cd:1c:60:4c:67:61:a7:cf:d0:de:56:02:1f:f0:0f:c1:
be:c1:a5:14:6d:38:d7:39:df:7f:64:01:a8:4e:dd:a0:a9:a8:
0f:ba:db:97:28:27:e6:26:d6:76:33:3a:c4:1e:09:97:b4:93:
3d:3d:a1:4b:b9:d1:d6:cb:17:fc:37:13:09:06:ef:71:b8:96:
3a:49:00:6a:66:12:d6:eb:92:6d:30:81:b3:22:99:fc:a6:44:
6b:70:97:68:c8:a3:67:cc:f5:1e:15:38:14:89:81:50:f0:27:
d0:cf:03:24:e1:06:a5:87:61:37:e7:22:78:ec:8d:46:25:47:
86:7d:18:a2:4e:8a:a9:a3:43:f2:e6:cf:da:56:66:64:66:e1:
17:ce:3c:01:bd:f5:19:39:eb:a8:33:28:db:53:35:4f:31:21:
90:29:27:4a:34:eb:e8:4b:eb:bf:cf:b0:4f:dd:a9:71:66:fb:
4a:14:e8:83:25:8b:77:45:ea:78:da:5f:c5:4d:04:68:fa:a8:
d2:06:4e:f3:d6:77:99:d0:a0:a5:d2:24:f5:d8:1f:3f:9b:0e:
92:cf:12:de:06:73:39:0a:3b:e6:a0:89:5c:65:07:0a:f0:8b:
29:64:85:ad:71:f7:85:e4:e5:dd:d6:0b:0a:a7:54:63:4a:f9:
42:90:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:39:36 2025 by rpki-client