Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa
File: 34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa (raw, json)
Hash identifier: M+ZpRD4jVR8MRSQ7SfH7AY3ly2nz0ohYwULjNzV57CY=
Subject key identifier: 4B:AE:B4:06:A8:C3:86:93:4D:A2:AB:34:6E:1F:4D:63:B4:4D:FA:EC
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 355C7047F72638F8BD926DDEDC4711E5F028ADA6
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:43 +0000
ROA not before: Tue 03 Dec 2024 17:43:43 +0000
ROA not after: Tue 02 Dec 2025 17:48:43 +0000
asID: 268131
IP address blocks: 45.169.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:5c:70:47:f7:26:38:f8:bd:92:6d:de:dc:47:11:e5:f0:28:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:43 2024 GMT
Not After : Dec 2 17:48:43 2025 GMT
Subject: CN=4BAEB406A8C386934DA2AB346E1F4D63B44DFAEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:cc:68:78:84:c6:d3:ed:a4:b7:56:64:d9:
57:58:9a:a0:2a:89:61:d5:8c:84:c6:e9:80:89:a0:
31:16:e8:00:f6:5e:39:ca:04:f1:bb:9a:de:58:71:
c3:31:b8:31:c6:6c:cd:7f:55:80:49:5d:2a:05:82:
30:57:35:f7:58:80:82:55:30:66:2f:20:60:9a:e4:
81:44:4e:1a:ec:22:a8:48:15:40:24:fe:78:52:2a:
c4:f3:80:f5:75:29:74:91:30:e7:ef:fb:d6:d9:90:
d2:1d:c4:6f:6b:2c:77:af:78:e5:f8:6c:15:65:f2:
7c:e0:47:56:bc:d4:a5:b0:42:56:48:b0:58:7c:3f:
53:38:ab:e3:c8:e9:e7:17:be:d4:4f:9e:69:bb:0c:
2b:33:94:ee:a4:95:98:85:90:25:41:99:9c:2e:a3:
64:a6:06:1c:16:29:da:95:69:b5:6e:6d:15:01:0d:
f0:b7:f1:56:78:10:2e:42:be:10:7a:64:55:65:17:
8e:16:80:d3:77:84:9c:41:8f:1f:22:21:69:a5:e2:
13:70:b8:b0:e3:69:77:2d:88:5c:12:61:27:e6:42:
b8:bd:8b:c8:d0:25:8e:f3:1e:04:07:b2:8c:59:b9:
b9:e9:19:95:43:8a:fe:ea:43:ec:1f:ba:a1:55:9c:
a7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AE:B4:06:A8:C3:86:93:4D:A2:AB:34:6E:1F:4D:63:B4:4D:FA:EC
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3138392e302f32342d3234203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.189.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:52:f4:2d:9e:06:0e:3d:be:d1:e0:9e:8d:c3:71:71:9e:5c:
f1:bd:25:25:50:f2:95:ef:c5:32:8f:f9:a1:39:40:33:00:a6:
43:d9:05:6d:c8:16:6a:28:6f:30:0b:65:67:a5:e0:6c:3e:03:
5f:0b:68:19:c3:72:41:4b:8a:41:4d:00:88:f9:fe:60:e7:d6:
dc:3e:ab:c8:a8:12:f7:94:4d:53:a1:66:2a:71:66:e7:07:82:
1e:f7:6c:e5:34:af:6a:83:ad:4d:08:b2:3b:5d:f5:2b:db:da:
cc:ea:17:4c:63:a2:98:67:9f:c0:fe:3f:b8:63:f2:5d:b6:a3:
2e:ff:d3:dc:1c:3a:c0:15:9e:7c:24:75:28:ce:45:f4:c3:bb:
9c:30:48:2c:69:66:ca:72:2a:65:88:05:53:d7:3a:f2:52:d9:
a8:67:ff:b0:33:bd:ad:35:89:10:83:cc:77:53:f5:eb:6d:c5:
fa:2f:88:1b:a0:80:75:b0:e3:5d:92:b0:76:75:c5:a0:27:44:
72:93:ac:e7:ca:df:70:a5:f6:90:53:89:92:6f:d0:62:aa:be:
ee:c1:09:97:93:38:20:1f:cc:d2:c9:90:37:46:ce:3f:6c:80:
ec:13:44:fa:34:ab:8f:9d:6b:00:e4:41:04:dc:9d:5e:25:6e:
4d:78:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:52:48 2025 by rpki-client