Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa
File: 34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa (raw, json)
Hash identifier: 8Q/yxBIT8oxmIspDJmLyMyv1UCLeO+bwPCsbbRl7GMg=
Subject key identifier: 0E:BF:0A:B4:91:6D:A1:B5:5A:14:77:01:39:90:C2:97:D2:9A:4C:B9
Certificate issuer: /CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Certificate serial: 03B71F450820FFB4DFBEB61F11D12A6D8383775A
Authority key identifier: 7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa
Signing time: Wed 05 Mar 2025 19:00:10 +0000
ROA not before: Wed 05 Mar 2025 18:55:10 +0000
ROA not after: Wed 04 Mar 2026 19:00:10 +0000
asID: 268011
IP address blocks: 45.167.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:b7:1f:45:08:20:ff:b4:df:be:b6:1f:11:d1:2a:6d:83:83:77:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7B02316541C9F170484214259E6C028DF7BB0F4A
Validity
Not Before: Mar 5 18:55:10 2025 GMT
Not After : Mar 4 19:00:10 2026 GMT
Subject: CN=0EBF0AB4916DA1B55A1477013990C297D29A4CB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0c:89:90:db:06:5e:7b:1a:e3:c1:29:20:c3:
dc:c7:b7:90:57:69:fb:22:00:0f:4e:58:6d:b7:f7:
01:66:f4:b8:aa:04:92:fa:43:f4:0c:d8:78:4c:7d:
55:c0:a8:cd:f7:ac:9d:fc:50:ba:14:d9:af:8a:32:
d0:45:76:0e:39:57:4c:ad:5d:98:da:d7:f7:69:b3:
db:95:3f:35:95:98:92:fa:91:19:39:5a:d9:a2:91:
c1:cd:c1:db:5c:2e:de:74:b0:aa:7b:11:50:93:11:
df:aa:94:c5:67:76:33:6f:ee:55:3f:02:45:79:79:
a8:5e:22:1e:fc:3e:fc:c9:13:f9:18:a4:a5:16:16:
c1:a9:b1:ac:c1:0c:ea:58:52:2f:f7:fd:93:b8:65:
3a:f5:9b:49:ba:11:52:7c:d9:29:3e:b4:9f:30:f8:
77:b8:36:15:e6:81:1b:b4:dc:5a:4a:d4:e4:a8:76:
7c:db:be:0b:b0:93:8d:1d:ad:c9:4a:44:f5:7b:27:
9a:a9:0d:cd:1a:92:ba:11:79:a1:21:f4:dc:35:c5:
6f:b4:31:c7:7f:ae:45:9d:05:33:77:73:61:b1:8c:
c0:d6:c0:c7:61:6c:d1:bf:4e:10:6f:59:84:00:b8:
84:ec:f6:19:17:cc:da:cd:71:9b:e0:b1:81:74:42:
18:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BF:0A:B4:91:6D:A1:B5:5A:14:77:01:39:90:C2:97:D2:9A:4C:B9
X509v3 Authority Key Identifier:
keyid:7B:02:31:65:41:C9:F1:70:48:42:14:25:9E:6C:02:8D:F7:BB:0F:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/7B02316541C9F170484214259E6C028DF7BB0F4A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7B02316541C9F170484214259E6C028DF7BB0F4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8A4RjyEiYkHXgZJpYKVBySE9hrpzrgesrgY9YUmV6zt/1/34352e3136372e3134302e302f32332d3233203d3e20323638303131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.140.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:e9:83:dd:55:94:6c:d2:57:71:ce:d9:85:06:6f:0b:8f:d3:
bb:a6:a9:84:f6:d0:21:f7:64:b1:d9:6e:cd:5a:28:e9:a4:d0:
af:8b:99:7a:e7:98:29:27:d5:3b:54:44:32:88:3a:b0:b2:c4:
53:7f:f0:3e:d3:50:41:05:90:e3:c7:44:a6:2a:76:09:f2:95:
cc:03:55:c6:34:2e:28:d7:87:e9:ad:08:e9:9a:7c:91:34:33:
3c:e0:ac:ea:05:8a:11:46:66:a4:3c:c4:6b:3d:bb:a3:02:4a:
97:f6:dd:92:d7:c8:52:32:b6:a0:fd:95:81:b8:91:8c:c5:b5:
a5:90:ce:e1:f4:d7:da:ec:10:4c:46:76:9d:9c:b1:00:09:44:
dd:c2:67:e7:f6:db:2f:a2:7a:ea:08:b1:2c:f1:3c:c5:a5:81:
a1:90:49:8b:a9:7c:74:6e:f6:bb:1c:c0:b4:32:26:37:2e:99:
12:d2:60:f3:da:49:4a:f9:b7:85:de:1d:cc:a5:e0:66:74:78:
c5:3c:71:9f:74:f1:3f:88:1b:50:c5:df:2c:09:63:8d:ca:30:
ef:ab:df:fa:7d:55:cb:0b:6b:85:1d:b4:a4:0c:a8:fa:f4:3f:
46:24:04:72:50:6a:62:d7:88:ab:34:57:42:64:3d:dd:b9:3d:
ec:3c:d7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:39:06 2025 by rpki-client