Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e322e302f32342d3234203d3e20323637333838.roa
File: 34352e372e322e302f32342d3234203d3e20323637333838.roa (raw, json)
Hash identifier: 4zjjhtr2SWK0mUceFQlNyFQ9lP/I5w6z6Pe5j0bLKNU=
Subject key identifier: 87:90:D7:96:C4:42:4A:0A:4D:A2:24:56:55:E9:80:51:8D:9C:BC:19
Certificate issuer: /CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Certificate serial: 3A76E95D281DB284787F77C1AEF4BF320CE43CBF
Authority key identifier: 4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject info access: rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e322e302f32342d3234203d3e20323637333838.roa
Signing time: Mon 28 Oct 2024 14:40:57 +0000
ROA not before: Mon 28 Oct 2024 14:35:57 +0000
ROA not after: Mon 27 Oct 2025 14:40:57 +0000
asID: 267388
IP address blocks: 45.7.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:76:e9:5d:28:1d:b2:84:78:7f:77:c1:ae:f4:bf:32:0c:e4:3c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52
Validity
Not Before: Oct 28 14:35:57 2024 GMT
Not After : Oct 27 14:40:57 2025 GMT
Subject: CN=8790D796C4424A0A4DA2245655E980518D9CBC19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f3:c9:bb:6a:01:3a:79:74:f9:0a:7e:20:fd:
8b:31:51:f8:99:ff:2f:c1:fb:87:8f:cb:80:bf:da:
09:f7:61:61:95:39:76:71:9e:29:aa:3d:ad:82:48:
35:13:b9:79:56:dc:02:1a:e0:e7:cf:d4:b6:ee:56:
3f:2f:f5:1a:c4:29:a3:3f:7c:57:8f:d5:6f:df:87:
0e:40:1e:21:f5:4a:26:71:da:dc:8b:64:ac:69:1d:
e2:59:84:31:8e:f3:cf:9a:49:13:f9:9f:79:0e:84:
af:9b:67:0b:e6:35:95:eb:0a:7a:98:9b:cb:76:cf:
01:d3:73:4f:77:d7:c3:0b:8f:41:83:2f:0f:aa:e3:
cf:d0:84:94:f6:2a:7a:d6:6e:be:8a:55:01:a2:c0:
fa:8b:e4:88:e7:c3:c7:f2:d8:03:bf:be:fa:bc:55:
01:80:d3:30:cd:6a:05:3b:2d:57:1f:15:ac:23:6a:
59:dd:b4:3c:2d:cf:70:dd:7e:de:86:91:a6:92:65:
38:26:df:6b:90:6d:aa:6f:21:46:5e:b9:0f:b6:cc:
52:cb:23:0e:6f:05:4d:69:81:82:b8:e6:96:40:9a:
85:07:0c:c5:9a:b6:78:ac:f8:35:65:a4:12:f1:7c:
23:4a:3e:7b:cd:d2:6c:8d:17:c9:d2:95:a4:86:dc:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:90:D7:96:C4:42:4A:0A:4D:A2:24:56:55:E9:80:51:8D:9C:BC:19
X509v3 Authority Key Identifier:
keyid:4D:6D:5A:54:30:B6:F5:F0:8B:2B:00:A0:6B:91:B9:C4:BA:BD:AA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4D6D5A5430B6F5F08B2B00A06B91B9C4BABDAA52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/84cPB6KkxcR9XZoiL8pho3aYpJ1durKEsGHDjpHbtG7c/0/34352e372e322e302f32342d3234203d3e20323637333838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.2.0/24
Signature Algorithm: sha256WithRSAEncryption
42:e1:c9:b3:a5:4d:72:02:3d:86:45:27:6f:81:28:72:94:5f:
63:f9:d8:60:2b:44:36:8c:a9:b7:e5:fd:53:3d:8d:91:33:bf:
6d:47:68:88:f3:1a:e7:d6:bb:11:7f:01:b9:af:b6:2c:a9:57:
40:a0:85:66:76:55:f2:6d:6a:b8:8b:f1:a9:13:70:78:a1:07:
aa:00:ac:54:3c:f3:8b:eb:ae:50:28:79:95:5e:f9:44:42:e0:
05:12:c0:26:a0:4c:0a:6c:0c:c7:7f:cd:ff:49:59:6d:82:53:
f2:0f:a4:54:16:3f:77:13:55:60:e7:ca:c3:9c:6d:b4:77:bd:
96:fb:56:3f:9e:8b:0c:04:22:7b:69:af:14:ae:3d:42:42:2e:
56:8e:ae:2b:8f:89:cb:8d:9f:83:14:73:66:f1:17:a4:48:8e:
50:94:44:5a:82:51:8f:99:44:3c:5e:c2:e8:30:ad:08:d2:31:
54:b1:04:cf:72:f9:6d:81:0b:fa:db:ff:b8:58:7b:14:b5:b0:
a1:ca:e2:d1:8c:7a:23:34:3a:21:79:bb:2f:19:d8:2d:6d:34:
41:83:bf:45:a3:ad:95:23:f7:98:29:98:45:42:7b:24:ae:ff:
31:d6:e8:c1:af:44:c0:62:ab:94:35:0e:e9:f6:c6:4d:41:54:
24:45:d6:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:09:02 2025 by rpki-client