Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa
File: 34352e372e312e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier: VvKHgC25V+o3omLY4Ess3CPSsvxAs6d6eT84x0/95Jo=
Subject key identifier: 3D:61:80:68:3F:8C:0F:AE:5E:35:E1:88:BC:AF:97:DF:7F:80:A7:F9
Certificate issuer: /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial: 68D3FE9A5E2CFAEAC9DD34896FDA34106B617730
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa
Signing time: Mon 28 Oct 2024 14:40:59 +0000
ROA not before: Mon 28 Oct 2024 14:35:59 +0000
ROA not after: Mon 27 Oct 2025 14:40:59 +0000
asID: 267388
IP address blocks: 45.7.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d3:fe:9a:5e:2c:fa:ea:c9:dd:34:89:6f:da:34:10:6b:61:77:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Validity
Not Before: Oct 28 14:35:59 2024 GMT
Not After : Oct 27 14:40:59 2025 GMT
Subject: CN=3D6180683F8C0FAE5E35E188BCAF97DF7F80A7F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:a6:19:f9:87:ca:33:97:52:01:d7:e3:93:
fa:e9:ff:22:55:bd:26:0d:7a:60:1d:a8:f0:bf:bb:
b1:af:0c:a7:a7:76:92:3b:de:d6:64:f2:5d:d4:7b:
76:9a:4e:f0:e5:a8:db:52:9c:19:cd:a4:3d:f2:ad:
33:40:95:d0:e5:35:4b:d1:6f:ea:1e:6b:74:16:64:
cb:5c:3c:7e:b4:d5:b8:3f:49:da:a5:10:a0:13:a5:
de:8f:55:33:91:12:80:c9:ec:e7:80:96:6e:ac:9b:
f5:49:2c:d8:fd:cd:5c:b3:55:1e:b1:a5:49:e6:87:
aa:9e:83:26:ec:7b:92:2d:93:67:31:6f:30:9a:5e:
7b:6d:b4:08:d3:a1:66:2e:cb:59:0a:84:de:5f:d1:
10:59:6a:be:76:62:34:43:04:06:83:41:0a:72:b5:
1b:82:b7:bc:1d:b7:f7:90:fb:4d:87:e7:26:6f:70:
fc:8e:3f:29:3a:14:7f:0b:6e:15:d0:41:74:5e:f9:
dc:48:42:f8:56:13:e6:3c:85:f1:6f:72:79:07:76:
d2:1e:ef:90:71:6b:95:db:9c:b7:94:fc:a3:93:b0:
f0:b5:69:19:3b:19:b3:8e:1d:6b:e1:db:e6:1f:af:
48:32:ea:c5:e7:6f:40:ee:a8:d3:ba:dd:d7:c3:b1:
22:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:61:80:68:3F:8C:0F:AE:5E:35:E1:88:BC:AF:97:DF:7F:80:A7:F9
X509v3 Authority Key Identifier:
keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e312e302f32342d3234203d3e20323637333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.1.0/24
Signature Algorithm: sha256WithRSAEncryption
48:28:ed:57:05:52:87:6a:ad:8e:10:7b:56:dc:e4:c8:5e:4f:
a7:65:2f:bf:6b:9c:cb:5f:c7:26:a6:4f:1d:b0:39:7e:75:45:
b7:b9:0f:6b:61:56:11:9c:09:6b:b2:33:60:2d:ff:63:81:95:
bc:36:12:c3:e4:ff:16:9d:2e:be:17:5d:d4:fd:07:b1:55:18:
ff:7f:c1:6f:a3:61:d3:b2:3e:af:91:0e:53:a9:1c:37:ba:5e:
4b:ae:f9:cb:b3:9c:a2:d6:ca:cf:5f:04:9f:f9:dd:9f:22:2f:
57:a8:77:34:b7:c6:b5:8b:8c:1f:94:f6:26:ec:44:a3:6c:52:
0a:b1:b8:62:03:b5:65:9a:00:e7:5a:cc:4b:6f:fd:3f:a3:b1:
ef:dc:90:41:b7:48:38:0b:c2:38:d7:ef:36:69:b1:b6:5d:39:
db:cc:ef:1d:be:e8:a6:71:ea:f6:0f:5a:3e:6c:c6:cb:6b:8b:
d3:ba:44:2a:49:41:fd:1f:37:0d:d8:ed:3a:ce:06:2f:29:54:
bf:6f:ed:69:c8:73:6f:9f:bb:da:4b:4f:50:cd:21:ac:c4:c9:
53:b7:bf:40:c9:4e:f6:31:a9:f5:5c:8e:b3:d3:9b:bd:81:01:
bc:b2:80:d9:0e:e5:6e:d8:72:90:55:fe:32:a0:7a:0e:e9:55:
a1:a7:06:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:29:28 2025 by rpki-client