Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa
File: 34352e372e302e302f32322d3234203d3e20323637333838.roa (raw, json)
Hash identifier: TwmC/+tBsxFzrihMGB8sJGUhk9LnbU5h5meQW1anaJY=
Subject key identifier: E8:59:AE:8C:7C:6E:B9:17:50:2F:56:DA:00:5C:58:20:3C:7D:0A:D9
Certificate issuer: /CN=7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A
Certificate serial: 15DFC0455A02291B53DDD0474F41E452E6033E29
Authority key identifier: 7B:82:A2:A1:CC:9C:DE:4A:7F:FE:90:0F:6C:1F:20:4C:40:AE:01:9A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa
Signing time: Wed 29 Jan 2025 19:07:10 +0000
ROA not before: Wed 29 Jan 2025 19:02:10 +0000
ROA not after: Wed 28 Jan 2026 19:07:10 +0000
asID: 267388
IP address blocks: 45.7.0.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:df:c0:45:5a:02:29:1b:53:dd:d0:47:4f:41:e4:52:e6:03:3e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A
Validity
Not Before: Jan 29 19:02:10 2025 GMT
Not After : Jan 28 19:07:10 2026 GMT
Subject: CN=E859AE8C7C6EB917502F56DA005C58203C7D0AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:d9:83:e2:89:f4:c6:d4:f4:c0:8e:04:3e:
21:3f:c3:89:7a:9d:8f:88:48:f4:77:9c:28:2f:a9:
bc:7f:1c:39:49:9d:94:88:36:7e:60:59:7e:f5:28:
39:28:ae:73:24:f5:42:8a:1f:7e:cf:2e:61:7a:a6:
e7:3f:ee:ab:d5:dd:0a:68:f9:c6:5c:31:3d:55:85:
37:cd:d1:37:66:41:76:ab:fa:6f:12:33:e0:76:54:
b8:82:f4:5d:4d:59:ae:3b:95:62:bd:36:69:14:28:
97:f6:df:e4:ba:f3:6c:cc:5b:0f:5b:46:fb:57:cb:
65:3d:f2:64:f1:ff:40:50:50:07:9f:5a:4a:dd:4f:
4c:63:c2:aa:c0:01:f1:24:76:ea:c7:d2:1c:48:21:
e9:69:2d:c1:bb:96:69:62:dc:b8:23:dd:61:2a:d9:
25:42:12:65:25:dd:c5:c6:64:26:77:a1:a3:77:d0:
11:4b:53:db:fb:33:21:15:c5:1a:cd:89:f0:ee:24:
03:b0:34:4a:ce:6a:9d:1f:fc:f4:2e:9d:b0:32:9e:
e7:34:1a:93:df:0b:18:bc:5e:8e:8c:64:29:1d:b5:
33:c3:8f:84:51:eb:12:55:3b:4c:87:3a:a4:fb:4d:
69:93:79:db:c4:35:af:32:39:71:f9:2e:14:25:85:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:59:AE:8C:7C:6E:B9:17:50:2F:56:DA:00:5C:58:20:3C:7D:0A:D9
X509v3 Authority Key Identifier:
keyid:7B:82:A2:A1:CC:9C:DE:4A:7F:FE:90:0F:6C:1F:20:4C:40:AE:01:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B82A2A1CC9CDE4A7FFE900F6C1F204C40AE019A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e302e302f32322d3234203d3e20323637333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.0.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:6d:ed:fb:a2:72:0a:12:b1:3d:69:0d:5e:5e:a7:58:fb:c4:
54:f2:8f:d7:11:6f:1b:c3:ef:59:7a:46:42:d9:6e:ed:71:65:
cc:eb:b2:b9:2e:de:d3:5d:ba:47:2d:c2:ab:ca:06:59:f0:1d:
aa:19:3d:ad:7e:53:77:ad:7e:da:92:5b:65:03:49:ae:86:2a:
2b:85:8f:c8:f8:72:7d:d5:5b:98:3b:19:55:6a:a6:72:77:20:
b9:aa:0a:ba:d5:b1:02:f0:cc:72:75:04:99:5f:34:c6:fc:ba:
82:f3:c6:24:67:af:cf:72:6a:53:94:16:a8:a0:41:ac:ae:bd:
b9:2e:a4:d2:ef:61:3a:69:97:61:e7:aa:88:7d:6a:f4:fd:17:
a8:e6:dc:5b:2e:03:48:51:07:9e:c7:c6:c8:d5:40:75:22:ef:
82:75:b4:c5:7a:1b:ee:b6:a8:c6:bd:bd:c4:57:01:4b:33:17:
88:2d:3c:af:48:f6:c8:b8:17:cf:54:72:6e:e9:cc:1e:81:01:
f3:23:8d:95:8c:e2:6e:49:18:a1:a3:45:0b:c2:2b:de:b0:0f:
9a:f1:9e:4c:94:09:f0:2a:9d:81:ed:a9:4d:fa:ee:e1:2f:ed:
ac:71:76:1b:5e:6e:b4:1a:2e:c5:51:f3:5f:b7:a3:c9:55:59:
78:b4:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:29:26 2025 by rpki-client