Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132322e302f32332d3233203d3e20323636303731.roa
File: 34352e342e3132322e302f32332d3233203d3e20323636303731.roa (raw, json)
Hash identifier: Pv6TQXqcVVHc6cmmNA/F6o5eUToSu/MF4avTnyPVQxQ=
Subject key identifier: E1:FE:19:B0:90:B1:79:DC:F0:9E:03:D4:69:97:17:13:2C:D3:48:D1
Certificate issuer: /CN=1C0D57B6A3245283DC081118F5FA77723813EFED
Certificate serial: 55E7E95B6CE1F63E10A5D4D75AA7A51DD35D2817
Authority key identifier: 1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132322e302f32332d3233203d3e20323636303731.roa
Signing time: Thu 11 Jan 2024 12:28:31 +0000
ROA not before: Thu 11 Jan 2024 12:23:31 +0000
ROA not after: Thu 09 Jan 2025 12:28:31 +0000
asID: 266071
IP address blocks: 45.4.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e7:e9:5b:6c:e1:f6:3e:10:a5:d4:d7:5a:a7:a5:1d:d3:5d:28:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1C0D57B6A3245283DC081118F5FA77723813EFED
Validity
Not Before: Jan 11 12:23:31 2024 GMT
Not After : Jan 9 12:28:31 2025 GMT
Subject: CN=E1FE19B090B179DCF09E03D4699717132CD348D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:14:0f:4a:1d:cd:0a:3f:35:de:3e:7b:40:9f:
57:a5:2c:27:d2:33:1a:19:42:1b:85:77:1e:4e:0d:
cd:3f:49:12:01:20:68:c7:86:b6:d9:39:be:b0:93:
7d:50:72:38:b5:de:ca:db:5a:e4:52:c4:f6:30:e0:
fe:4f:2f:87:a1:51:32:9a:7e:31:d8:53:47:07:57:
eb:0e:a0:14:29:3f:3b:62:ab:86:be:f6:07:de:fa:
e3:90:a5:32:a4:66:f2:9f:3c:32:a0:06:ba:6e:8a:
ef:21:73:5b:16:c6:42:0f:56:c9:f4:d2:8e:c2:7c:
40:5a:52:5c:d7:6e:25:53:5d:58:75:d2:d8:cf:f1:
b8:29:89:79:09:3c:bf:3d:e5:c9:ba:cd:e2:6f:67:
70:d7:0f:83:3c:71:c2:dc:c1:53:56:c8:18:8a:63:
de:d5:fa:1b:18:57:de:7a:4c:7f:76:cc:49:55:a8:
0d:1f:19:03:d6:40:1a:47:d7:6b:62:b2:b5:be:10:
98:77:1e:9f:07:54:bc:f6:c0:58:e4:3b:f8:aa:d9:
81:28:2b:de:43:04:07:b3:4d:fd:ca:5f:b7:4e:e3:
74:01:e3:90:47:f4:88:63:48:32:c1:f3:16:69:b8:
4d:1a:0c:67:e6:51:41:bc:8a:8c:35:44:b3:ae:45:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FE:19:B0:90:B1:79:DC:F0:9E:03:D4:69:97:17:13:2C:D3:48:D1
X509v3 Authority Key Identifier:
keyid:1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/1C0D57B6A3245283DC081118F5FA77723813EFED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/34352e342e3132322e302f32332d3233203d3e20323636303731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.122.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:ff:0b:27:e4:9d:06:03:b4:9d:92:b9:3c:19:dd:0c:44:fa:
e7:d5:5a:cb:03:0a:95:50:3b:ea:bd:4c:13:75:6f:d9:c0:ea:
9e:b0:d1:82:78:e0:fe:e3:1f:c9:0d:f0:fc:d7:cc:02:5c:c2:
fa:8c:e5:d5:0b:f6:e5:39:f9:06:47:8f:fd:d9:b7:70:af:c0:
35:a6:11:95:e0:e8:4a:ba:92:9c:f8:85:6f:f8:03:ea:b6:91:
81:17:48:28:f7:a3:f0:1e:a7:48:f0:42:07:77:be:cc:d1:57:
b6:41:7e:e9:9f:7b:3f:b9:2a:39:11:37:de:49:8c:60:4e:27:
c9:1c:63:55:54:d9:4d:54:27:63:33:de:a4:e4:ab:78:e6:78:
a4:3b:ed:2c:2c:d1:70:95:7c:34:ab:45:17:e9:30:82:bd:35:
0c:37:80:52:36:fa:c9:a3:02:0a:6b:f3:b2:8b:55:68:78:aa:
67:3c:11:a8:f8:46:c6:be:bb:7f:56:94:49:29:6a:05:18:af:
0c:d9:99:b2:24:44:1b:fe:2b:b1:d7:61:10:f2:8a:56:1c:ef:
cf:0b:f7:ec:47:df:4e:d1:0b:d0:2a:5f:e6:57:55:2c:36:c8:
12:71:8b:0f:43:0d:34:20:11:1f:b1:76:37:cf:69:26:3b:5a:
7c:db:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:23 2025 by rpki-client