Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa
File: 34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa (raw, json)
Hash identifier: /6YkWsb2bV1UlDVJzsXEc6uA0mNh9HzpWripU1MobTA=
Subject key identifier: 25:BF:4C:6C:A5:DC:12:91:75:17:90:5F:23:B5:0A:64:A6:70:CC:99
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 60AB8B13487DFFF88F3CB40B1E348982D6B36C7A
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:39 +0000
ROA not before: Tue 03 Dec 2024 17:43:39 +0000
ROA not after: Tue 02 Dec 2025 17:48:39 +0000
asID: 268131
IP address blocks: 45.169.188.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ab:8b:13:48:7d:ff:f8:8f:3c:b4:0b:1e:34:89:82:d6:b3:6c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:39 2024 GMT
Not After : Dec 2 17:48:39 2025 GMT
Subject: CN=25BF4C6CA5DC12917517905F23B50A64A670CC99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:13:0e:05:ea:35:46:e5:9d:1d:20:25:35:
7a:ac:27:48:31:dc:be:e4:4b:f6:bf:82:6d:a4:29:
7e:7b:56:d8:dd:21:bc:4b:e4:95:8b:b3:fa:8a:9d:
ac:ed:c5:4f:39:80:df:82:cc:68:50:3b:fb:05:15:
17:05:3b:e5:1e:13:cc:78:8c:f0:a6:75:76:de:61:
55:de:00:8f:f7:ff:1e:06:90:88:17:02:59:01:03:
e8:3c:5d:53:28:f5:82:52:50:e6:c4:3e:3c:9a:35:
11:ff:bb:3e:c1:43:bd:23:7b:59:c7:ad:53:b7:26:
6c:a1:28:e2:8d:28:f9:1c:97:4f:62:5e:6e:b2:76:
99:63:3c:5e:9c:5b:8b:0d:fd:45:5b:eb:8f:80:df:
5e:0e:90:90:fa:28:04:2f:f0:16:4a:ce:3c:21:98:
66:82:bf:0d:4a:db:6b:31:2f:dd:84:56:42:99:4c:
a8:d1:9e:8f:36:bd:1e:be:8e:20:75:d6:b0:8f:fa:
30:e2:f5:22:21:4f:af:b2:69:d0:fe:a0:3c:c1:aa:
aa:86:67:90:4b:6e:49:f8:4e:e9:cf:19:8b:cf:20:
5b:e3:45:98:8c:d3:9f:27:8c:24:af:14:10:b8:fe:
f7:98:c4:f8:e5:c4:0b:5f:08:67:a4:8f:32:24:1d:
e0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BF:4C:6C:A5:DC:12:91:75:17:90:5F:23:B5:0A:64:A6:70:CC:99
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138382e302f32332d3233203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.188.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:a3:63:89:01:53:76:7c:ef:8d:7e:71:3b:6e:13:be:10:0a:
72:f1:37:07:ab:71:84:da:2b:4a:12:99:35:d2:6a:ba:21:62:
ec:10:a3:55:ba:d5:3e:f9:83:3b:03:89:d3:a1:b2:66:77:f8:
a9:e1:7b:4c:b0:28:38:31:da:9a:e1:5e:f3:23:d9:4a:f8:f0:
06:2c:a2:38:db:4d:97:56:79:d6:17:70:40:9e:7b:ef:c0:9f:
aa:8f:36:31:bb:8a:4c:71:ef:e1:b1:14:a6:30:48:7d:b5:cf:
46:7f:57:97:fc:8b:ea:a0:36:c1:01:43:cf:5a:12:d7:c4:eb:
c7:59:f2:ab:2d:e1:e8:46:6b:46:b2:71:90:d2:f1:4d:6d:f3:
25:f5:12:b0:d3:2a:e0:0a:7f:1f:25:7e:a6:27:dd:0b:62:3f:
b6:08:2d:6e:01:fe:0a:57:54:f3:3e:85:b4:b0:fc:ab:71:c9:
03:ea:55:50:f6:f7:0c:55:c3:c7:97:46:7a:10:12:2c:f0:91:
21:44:51:e3:8b:0e:bb:c5:6a:c4:1d:15:b5:9d:09:22:84:d9:
88:c0:c5:0f:89:4e:a3:da:87:9b:94:c5:be:8f:60:7c:b5:80:
8b:ad:57:11:55:16:4d:14:56:e4:be:fb:1a:d3:41:ff:18:17:
6e:3c:8d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:28:53 2025 by rpki-client