Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa
File: 34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa (raw, json)
Hash identifier: NOlEBs4fyqrTcIU12q/SD9sO7mcaA0agcZ9yxzWVcUs=
Subject key identifier: 21:FD:54:71:10:DD:FD:B1:1A:BE:22:CA:18:3A:49:CA:C8:64:0F:B4
Certificate issuer: /CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Certificate serial: 360785B9AB3A4F3D6DA272F18C9D7DA03813FB51
Authority key identifier: BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa
Signing time: Tue 03 Dec 2024 17:48:43 +0000
ROA not before: Tue 03 Dec 2024 17:43:43 +0000
ROA not after: Tue 02 Dec 2025 17:48:43 +0000
asID: 268131
IP address blocks: 45.169.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:07:85:b9:ab:3a:4f:3d:6d:a2:72:f1:8c:9d:7d:a0:38:13:fb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD0B43860A0889125EAC647FBE9712DB5CD78027
Validity
Not Before: Dec 3 17:43:43 2024 GMT
Not After : Dec 2 17:48:43 2025 GMT
Subject: CN=21FD547110DDFDB11ABE22CA183A49CAC8640FB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:7c:91:7b:2c:48:76:b3:2e:f8:45:79:45:
45:ef:64:96:d8:07:81:07:b2:f4:56:54:36:c0:db:
8e:b2:c9:84:d9:11:a1:29:bb:d7:05:96:1d:d3:9f:
5a:b3:9d:83:e8:b2:a8:e7:23:8c:fc:27:5f:23:b2:
dd:6a:0c:02:59:59:be:04:e5:ff:75:4a:3e:a5:02:
b6:3c:13:11:a5:ef:31:ce:b0:7d:ad:05:3b:74:88:
8e:6b:16:01:03:d6:b4:8a:b5:1a:84:27:6e:89:c8:
a9:c3:bf:e9:47:24:b0:04:d1:9d:b0:99:3d:77:ca:
9e:a2:cc:3d:80:2b:b4:1f:06:1d:0e:e5:b3:fd:b2:
de:aa:23:17:21:92:33:b3:6c:bf:80:63:92:45:55:
ee:14:03:b2:04:06:26:2e:3d:8e:1b:f9:57:07:9e:
73:6c:8e:e2:bc:06:e8:c7:ec:52:83:15:0f:4c:f7:
b8:f9:c0:0b:5c:a9:ab:7c:72:8c:ec:4f:39:8f:3e:
31:0d:7d:cc:4d:06:63:df:a0:06:1b:75:48:f9:b2:
a3:5a:19:85:fe:b4:08:50:61:d5:5b:dc:b2:31:7c:
f4:cc:03:8e:ed:43:2f:aa:43:03:e2:51:95:83:9f:
c2:a2:5f:8a:a7:8a:52:c3:13:c1:b3:ac:c7:76:e5:
9b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FD:54:71:10:DD:FD:B1:1A:BE:22:CA:18:3A:49:CA:C8:64:0F:B4
X509v3 Authority Key Identifier:
keyid:BD:0B:43:86:0A:08:89:12:5E:AC:64:7F:BE:97:12:DB:5C:D7:80:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/BD0B43860A0889125EAC647FBE9712DB5CD78027.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD0B43860A0889125EAC647FBE9712DB5CD78027.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7be7EP4egxBVbc96H3WvB1GMSewk9T7JY2tWGUZrNFBG/0/34352e3136392e3139312e302f32342d3234203d3e20323638313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:da:09:aa:e3:68:1e:9e:84:f5:5e:3f:10:c4:3e:67:4d:1c:
d6:97:0c:47:b2:dd:cb:09:3e:b0:db:ac:2a:6d:5d:7f:45:99:
e4:2c:34:39:0c:cb:73:de:8e:fd:7e:9e:3b:68:61:c6:81:4d:
e5:49:9f:25:a0:f2:34:48:43:33:f7:8d:a3:d7:ab:e9:59:f6:
02:c2:99:50:69:d6:be:a8:fb:67:93:e1:aa:dd:07:79:fc:fb:
18:2a:1b:dd:3d:12:21:23:1b:a0:01:ed:6b:c3:20:87:00:fd:
f6:4b:2a:1d:bc:d2:18:01:03:c4:fc:e7:f6:cd:88:4e:7c:8a:
32:ee:11:93:ea:57:31:a3:cd:c6:09:fa:88:d5:ef:e3:15:9a:
0d:db:43:6a:0a:d9:64:d4:d9:13:d9:ef:a6:72:40:2c:e7:58:
8d:2b:0f:cf:ab:65:34:af:f0:69:ec:8d:f5:6a:cf:91:ec:c9:
39:a4:7f:fb:79:c2:60:4d:55:17:dd:c4:90:1c:8b:cf:0a:1e:
e2:82:df:9c:bd:0a:75:87:7e:ed:ed:a5:9d:49:fa:2b:dc:2a:
35:3d:6f:4e:1d:f3:2e:44:6e:c9:f2:12:e8:51:e4:bb:44:64:
74:0c:8d:2b:25:57:a4:65:a7:6d:e5:eb:81:07:ad:bc:25:9b:
35:9a:89:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:28:49 2025 by rpki-client