Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa
File: 34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa (raw, json)
Hash identifier: /v+Fx0lv4p+XvnllKdW9xBDFdm+fSOcBjy975uGnVGk=
Subject key identifier: B3:20:21:63:45:91:20:A3:FC:C1:67:FA:8E:FF:05:99:F6:36:BA:FF
Certificate issuer: /CN=12D8BB9048654EB8B6770450FAD878383CB2E373
Certificate serial: 7179F6CE66288741F74069AD2916063E97B0AD02
Authority key identifier: 12:D8:BB:90:48:65:4E:B8:B6:77:04:50:FA:D8:78:38:3C:B2:E3:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12D8BB9048654EB8B6770450FAD878383CB2E373.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa
Signing time: Wed 12 Jun 2024 22:06:09 +0000
ROA not before: Wed 12 Jun 2024 22:01:09 +0000
ROA not after: Wed 11 Jun 2025 22:06:09 +0000
asID: 267006
IP address blocks: 45.226.220.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:79:f6:ce:66:28:87:41:f7:40:69:ad:29:16:06:3e:97:b0:ad:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12D8BB9048654EB8B6770450FAD878383CB2E373
Validity
Not Before: Jun 12 22:01:09 2024 GMT
Not After : Jun 11 22:06:09 2025 GMT
Subject: CN=B3202163459120A3FCC167FA8EFF0599F636BAFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8a:ba:3d:76:a3:28:63:bd:ce:20:e0:dc:c3:
4e:58:ee:17:cb:f0:14:0a:57:c5:67:c1:08:72:5e:
1b:2f:69:6e:3f:c4:fc:3b:fe:05:6b:8c:e1:94:40:
c5:98:8b:0e:d2:b9:ad:dc:65:eb:df:50:7d:1d:c1:
2a:f3:08:84:e0:b9:60:a0:67:dd:2c:78:27:4a:0f:
52:b3:65:0f:f6:dc:e8:d5:43:10:a3:fa:fc:23:26:
05:42:cb:f7:80:4e:48:66:f1:19:e7:8f:67:89:93:
0b:05:c3:07:25:8c:d0:2b:f6:2a:c9:2d:c0:d6:0b:
af:03:ab:ef:1d:06:85:10:d8:cb:34:6e:c1:c7:fc:
87:48:89:4d:fb:d2:e8:8b:27:7c:c6:b9:c9:de:e7:
63:06:38:8e:9b:d4:47:a8:db:18:dd:7c:b4:42:c1:
79:4f:a5:ca:f7:97:63:c6:4a:e1:2e:8e:53:0f:42:
8a:a4:16:9f:62:0b:88:25:00:c4:0c:33:5a:18:4f:
a4:bd:e5:59:12:c4:bb:7b:32:e2:c7:37:40:5f:98:
21:bc:9b:51:2f:a3:76:f3:69:45:c2:10:55:0e:47:
48:46:71:c0:93:f3:b5:4b:cf:35:a1:cf:2f:cb:54:
d2:14:fc:3e:7f:8a:b3:b3:24:bd:03:89:bb:a5:88:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:20:21:63:45:91:20:A3:FC:C1:67:FA:8E:FF:05:99:F6:36:BA:FF
X509v3 Authority Key Identifier:
keyid:12:D8:BB:90:48:65:4E:B8:B6:77:04:50:FA:D8:78:38:3C:B2:E3:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/12D8BB9048654EB8B6770450FAD878383CB2E373.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12D8BB9048654EB8B6770450FAD878383CB2E373.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXGMvaRqfczC3CtFh5w9KHj1iaaXSYiLeHD4qjq3vXQ/1/34352e3232362e3232302e302f32322d3234203d3e20323637303036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.220.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:d2:f9:44:a4:db:09:a9:d4:63:65:49:66:6b:8b:b8:af:8f:
39:05:d6:1b:43:41:fa:37:fc:e6:d6:86:77:99:d5:b0:a2:ae:
0b:43:af:2c:41:7b:21:23:5a:6b:ab:bf:c9:38:4b:dc:b1:ee:
9f:09:d6:bb:e5:06:ad:dd:b5:e5:28:4e:f9:88:f1:87:d4:b6:
3c:72:f8:7f:cb:46:fd:6a:fb:40:cf:e0:d4:e9:1b:58:55:d9:
c3:17:fa:e8:73:5b:8c:5c:e2:64:31:f5:c2:05:f0:05:15:95:
7f:df:e0:f1:2d:a8:91:ff:37:33:dd:ba:b8:61:ad:93:5f:e7:
a5:20:89:e5:af:76:10:d8:f6:5d:e9:75:b4:c0:8b:24:41:ac:
20:9f:f9:c9:3c:c6:e7:c2:9d:0d:3a:97:95:ff:c6:93:73:e3:
77:47:0b:3b:b4:f3:65:a7:fc:d1:e4:b2:12:68:02:54:de:75:
98:56:a3:7a:b5:7d:55:60:56:10:69:d9:c7:1c:49:6a:9c:2a:
86:fa:d9:d7:03:05:2f:96:e6:df:d6:64:f9:a2:24:88:57:5f:
1b:cb:79:51:a1:89:73:1b:27:fe:ac:4c:c3:10:36:ae:25:0e:
16:4e:c8:7f:d5:8a:9c:8c:c7:9d:17:a4:27:46:77:bd:37:91:
32:4e:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 18:59:32 2025 by rpki-client