Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36382e302f32342d3234203d3e20323637323232.roa
File: 34352e3232392e36382e302f32342d3234203d3e20323637323232.roa (raw, json)
Hash identifier: OqeJB+mozeDEhDovDsxXjuzpU5+h4/FmiYTzQoaLAFc=
Subject key identifier: 30:AC:2F:5F:6A:29:10:A9:A9:7C:D0:6D:90:AB:A0:1D:C2:C3:01:D2
Certificate issuer: /CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Certificate serial: 58FB05EF96847B00499F098ABB41A6DFBA5B7993
Authority key identifier: 43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36382e302f32342d3234203d3e20323637323232.roa
Signing time: Thu 06 Mar 2025 09:21:54 +0000
ROA not before: Thu 06 Mar 2025 09:16:54 +0000
ROA not after: Thu 05 Mar 2026 09:21:54 +0000
asID: 267222
IP address blocks: 45.229.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:fb:05:ef:96:84:7b:00:49:9f:09:8a:bb:41:a6:df:ba:5b:79:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=433BD4694845BA65CA4AE1BF622A1C599CB53F72
Validity
Not Before: Mar 6 09:16:54 2025 GMT
Not After : Mar 5 09:21:54 2026 GMT
Subject: CN=30AC2F5F6A2910A9A97CD06D90ABA01DC2C301D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:0f:c1:95:c3:31:02:ff:d9:15:87:e5:30:
1e:db:e8:33:1e:06:38:ee:ae:2f:99:38:c5:b3:fc:
b5:65:c5:bc:18:7b:35:f3:92:48:58:f8:6c:a7:16:
c8:d2:a1:8a:dc:70:d9:e6:23:5e:4b:ab:02:e0:16:
75:85:f9:fe:8f:94:28:e4:59:01:9d:d2:5d:91:b1:
2e:6a:c8:c2:ad:ff:e1:4a:7f:c5:10:48:03:72:ac:
e9:90:b1:63:49:d4:de:28:58:f4:20:50:9c:7e:c6:
af:56:14:31:74:dd:c4:fc:05:d9:9e:22:29:10:4b:
f4:dd:d0:ac:6b:cd:d2:86:04:b4:12:d9:de:7f:0c:
4c:c1:30:f6:c6:78:c6:6c:e1:07:df:4a:97:7b:22:
6c:25:40:87:4a:84:40:68:ed:29:97:90:d9:b4:82:
0c:e2:9c:c7:3f:7a:03:aa:93:03:90:cc:d4:59:df:
1b:9a:b4:da:01:a6:f5:14:1d:9d:48:66:b2:03:6a:
4f:49:0a:75:5c:d7:df:eb:d3:28:dc:3c:94:3e:63:
67:f2:41:ca:2e:80:bd:11:5f:e9:08:42:4a:97:0c:
58:87:9f:f1:53:26:cf:42:7f:ad:78:70:fb:75:88:
fd:16:af:08:d0:69:1b:28:f2:9c:f8:8d:31:0e:32:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:AC:2F:5F:6A:29:10:A9:A9:7C:D0:6D:90:AB:A0:1D:C2:C3:01:D2
X509v3 Authority Key Identifier:
keyid:43:3B:D4:69:48:45:BA:65:CA:4A:E1:BF:62:2A:1C:59:9C:B5:3F:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/433BD4694845BA65CA4AE1BF622A1C599CB53F72.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e3qTPZpDcbmoZvhmxfBwY3sdRvtv6VsKTy44yyQMhke/1/34352e3232392e36382e302f32342d3234203d3e20323637323232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.68.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:91:a6:06:52:96:dc:79:a2:ae:18:bd:4d:f3:20:c2:82:67:
f2:a9:fd:24:bd:aa:9b:dd:d6:90:2d:cf:5d:83:9c:f2:f1:8a:
ef:22:e4:c5:a7:6b:89:cf:a1:25:ff:13:17:6d:44:30:31:dd:
ee:9f:c4:97:13:a0:0a:ad:06:61:38:8a:a1:f0:02:af:d1:bb:
65:9b:a0:22:e0:49:45:8a:bb:20:98:1c:6a:ee:b4:01:91:05:
c0:65:6b:cf:20:96:ed:20:45:f9:38:56:e0:77:7c:b9:2c:c8:
3b:88:a5:73:34:35:9c:61:6a:c4:a3:d7:84:d3:7b:2e:75:c2:
ff:71:6a:a5:e0:c5:36:7f:92:09:c3:c9:7a:50:68:ea:e7:95:
4c:3e:e9:cd:c5:76:a4:74:68:82:a1:77:5f:57:a9:fe:72:f0:
7b:43:86:1a:f6:46:4f:65:c8:13:54:62:0d:1c:9a:0d:e0:f1:
7b:94:e8:a1:e3:01:16:98:b6:97:6b:b6:3c:c9:1e:25:27:89:
d8:40:90:31:8e:da:a3:d6:f1:27:c9:bd:e4:27:e2:a6:0d:19:
29:42:d3:0e:ca:6f:97:90:ec:60:a8:19:07:15:c7:d6:5e:66:
9f:83:c7:5e:99:4d:8a:8f:ad:16:c6:e2:e7:42:7d:25:3b:e3:
86:01:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:41:45 2025 by rpki-client