Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32322d3232203d3e20323637333633.roa
File: 34352e3233342e36382e302f32322d3232203d3e20323637333633.roa (raw, json)
Hash identifier: 8T/CFYgacoV4c/KF+LepSzatEQ1iKojaa+S/MnRfeHg=
Subject key identifier: 0A:4A:91:BE:01:5A:E9:F9:7C:61:BA:8D:CE:9C:52:4B:EB:7E:48:50
Certificate issuer: /CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Certificate serial: 523A6EEDB915DE01711CEE508FFFAF63E71A27D6
Authority key identifier: D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32322d3232203d3e20323637333633.roa
Signing time: Thu 06 Mar 2025 13:54:56 +0000
ROA not before: Thu 06 Mar 2025 13:49:56 +0000
ROA not after: Thu 05 Mar 2026 13:54:56 +0000
asID: 267363
IP address blocks: 45.234.68.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3a:6e:ed:b9:15:de:01:71:1c:ee:50:8f:ff:af:63:e7:1a:27:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA
Validity
Not Before: Mar 6 13:49:56 2025 GMT
Not After : Mar 5 13:54:56 2026 GMT
Subject: CN=0A4A91BE015AE9F97C61BA8DCE9C524BEB7E4850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:89:91:99:87:4b:85:b3:a5:e8:49:36:3e:3c:
37:6f:c7:f5:06:ad:d1:ee:c6:52:09:5f:0a:d5:bb:
d0:fa:01:6d:c7:87:3d:00:71:49:f7:1c:76:87:22:
0a:ec:94:3c:95:b9:4f:49:30:e4:6d:2e:3d:3d:e4:
7a:4b:bf:72:0c:53:53:76:83:63:29:d0:fc:ac:1e:
6e:71:81:35:db:37:2a:50:b3:cf:93:9a:c5:44:f3:
da:44:24:76:54:ee:76:c5:52:40:16:5a:e1:b2:2f:
10:86:64:be:4a:88:eb:c3:de:8a:5a:76:5b:14:88:
54:1d:2b:65:f4:0b:ce:e1:c3:53:e1:a5:63:39:1f:
07:63:82:14:5a:b4:3a:b6:98:9b:81:55:6e:5c:da:
43:1d:8d:59:a9:1b:78:bc:1b:52:c7:1f:1c:68:21:
93:a7:ad:22:73:29:7c:e0:76:d8:b6:42:a5:86:40:
ff:e0:12:f6:26:9a:38:be:e3:ee:13:0d:da:49:a9:
f9:5b:73:e7:2c:87:24:ec:f1:7d:76:21:13:7a:b0:
54:58:f6:8c:45:5e:11:b7:c2:25:0b:6b:95:d1:95:
c7:8b:1b:b3:d6:11:f4:b5:8f:e2:bf:a9:0e:b9:1b:
53:44:47:c6:6d:87:25:ef:c9:d6:31:bf:93:c0:1e:
7f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:91:BE:01:5A:E9:F9:7C:61:BA:8D:CE:9C:52:4B:EB:7E:48:50
X509v3 Authority Key Identifier:
keyid:D7:C6:5B:91:75:A8:C5:5D:D1:BE:8B:5D:6F:51:15:2D:72:C5:05:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7C65B9175A8C55DD1BE8B5D6F51152D72C505AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/1/34352e3233342e36382e302f32322d3232203d3e20323637333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.68.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:c6:b8:77:8e:45:d4:8c:bd:ea:6a:09:2a:44:dd:70:f8:04:
8e:fb:86:dd:ba:5b:ec:01:61:b4:28:50:0c:79:27:42:25:6e:
0e:bb:56:71:98:bf:72:75:f7:11:9e:5b:a1:90:7a:ff:15:34:
d5:86:80:e5:39:08:e4:ee:5b:a6:59:cd:a1:bc:61:6d:8a:2b:
1a:55:c1:aa:a0:7a:f7:f2:f5:92:74:0e:2e:d5:74:44:58:4c:
80:cb:09:57:43:a1:6a:b9:e9:93:1a:0a:2c:e9:cb:2a:9f:f6:
e3:09:5d:fb:03:d5:2d:cf:7d:61:18:cb:80:d0:02:60:6d:71:
f1:b9:65:99:75:3b:e2:a8:b2:11:20:80:bc:51:cc:c9:07:b8:
7d:4f:78:15:62:a0:d1:d4:f7:01:d2:06:aa:22:3f:9d:8c:12:
2c:aa:d2:d4:85:6e:76:f9:91:da:6c:bd:57:09:33:f8:2b:6a:
9a:a7:88:da:b4:66:e1:fc:e7:c4:e6:98:6d:76:76:05:13:bc:
96:5d:c4:07:58:e7:a7:0f:d8:4c:a6:44:a4:1c:80:0f:78:bc:
a2:b8:15:8e:90:c5:56:ba:39:f7:3a:9b:dd:c2:42:ec:96:d1:
de:2b:de:35:4e:20:3b:60:da:96:b4:f8:b3:b1:45:1f:70:9a:
4e:a5:98:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:08:22 2025 by rpki-client