Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa
File: 34352e342e34342e302f32322d3234203d3e20323636303535.roa (raw, json)
Hash identifier: M1VFgYTrOUFDbP0quSBm77YUIyLqayRU7rDUKkoVyBM=
Subject key identifier: F2:04:19:92:BA:E9:0F:37:6C:65:87:2B:E8:60:FF:9C:09:2A:CE:CA
Certificate issuer: /CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
Certificate serial: 01225F0C58452985C95D8F881EFCF7D7BC19FC22
Authority key identifier: 22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa
Signing time: Sat 21 Dec 2024 16:18:35 +0000
ROA not before: Sat 21 Dec 2024 16:13:35 +0000
ROA not after: Sat 20 Dec 2025 16:18:35 +0000
asID: 266055
IP address blocks: 45.4.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:22:5f:0c:58:45:29:85:c9:5d:8f:88:1e:fc:f7:d7:bc:19:fc:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0
Validity
Not Before: Dec 21 16:13:35 2024 GMT
Not After : Dec 20 16:18:35 2025 GMT
Subject: CN=F2041992BAE90F376C65872BE860FF9C092ACECA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:18:cc:f7:72:89:1a:f5:16:2a:38:e4:62:
ee:c7:fd:c1:26:70:0f:c0:36:16:75:5b:b9:f0:0b:
f4:b7:ca:e7:4c:d5:d2:01:7a:4c:af:3d:44:0b:ac:
af:9e:84:23:c7:32:ff:dd:fd:55:d4:89:5e:45:2e:
e6:ca:04:fd:34:7b:b4:d2:fc:c7:e9:a4:30:e8:e2:
40:b9:2f:75:9b:09:86:71:d0:17:73:73:79:48:c6:
c3:fe:03:6a:7e:18:ec:3e:df:ea:c7:ae:f8:a7:bd:
75:ca:c4:af:d8:34:cf:42:2c:72:0a:2f:d6:ed:6f:
07:1b:bd:64:56:e2:46:a4:2a:3f:4b:2a:b2:97:15:
8f:1b:a7:ff:a1:33:f2:8c:24:0b:9f:bf:00:c0:b1:
bb:1a:11:40:4d:79:3c:78:7b:f0:70:22:43:6e:35:
d2:af:ab:8c:41:62:94:b5:fe:fe:9d:2d:e7:93:bd:
1b:a5:5b:d4:41:8f:d9:6a:e7:7a:c5:b4:27:2a:f0:
35:e2:23:aa:60:c7:71:b3:db:d9:6d:be:ee:f8:d5:
27:18:e5:11:0b:13:66:9f:e2:d2:e4:a3:91:ad:eb:
94:27:ba:ba:aa:ca:e9:dc:04:ed:e9:6d:7f:d7:22:
de:a9:41:b3:a6:d5:68:81:a5:21:e9:0a:0d:af:5b:
65:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:04:19:92:BA:E9:0F:37:6C:65:87:2B:E8:60:FF:9C:09:2A:CE:CA
X509v3 Authority Key Identifier:
keyid:22:64:D1:7A:1D:E6:58:F2:5F:A0:EB:77:73:DA:7F:6B:41:E5:2F:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2264D17A1DE658F25FA0EB7773DA7F6B41E52FD0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Pw2493ZG3a17PmdWWaSCu1G62wJ36LfzVzYKxZURbtJ/0/34352e342e34342e302f32322d3234203d3e20323636303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.44.0/22
Signature Algorithm: sha256WithRSAEncryption
51:c2:a9:64:18:6f:6d:72:3d:2f:3b:1f:de:1e:fb:9b:85:59:
1c:d4:b8:0f:75:72:b5:06:a3:df:06:46:be:36:2f:ef:92:f8:
a3:fa:9c:56:43:b9:7e:d0:ed:16:71:cd:52:56:ce:dc:b2:b5:
67:bf:da:b5:16:91:96:ea:8d:b1:23:83:02:3c:ff:97:e9:1c:
f3:c8:23:01:64:c0:23:e2:57:b5:e2:63:66:4a:e7:5c:4e:83:
9e:0b:0a:e6:34:cd:c3:b1:f5:64:c2:25:79:b9:4b:49:33:36:
8c:1e:b8:d9:1a:1d:ad:8a:04:25:2c:23:93:dd:85:5b:8e:ae:
ae:6d:fb:0b:bd:7a:88:ec:b3:8b:60:2d:64:31:68:c9:13:f3:
8b:3f:ac:07:d5:5e:28:85:7c:4e:31:d6:0f:4c:dd:74:bc:ee:
29:a9:f4:45:dd:be:49:0a:cd:83:24:07:fe:bd:4d:0a:65:c5:
12:7f:ee:4b:23:d9:fc:e0:13:a2:60:ad:5f:62:89:22:7c:cb:
c6:50:de:51:4b:4d:83:13:ef:fe:26:02:cb:79:d2:d9:7e:13:
a2:cb:1d:bb:32:b3:70:17:26:8b:24:9b:31:9e:9a:73:67:0c:
e5:32:ab:ef:0d:b6:ee:37:fe:0f:7e:91:57:61:c6:08:2f:5e:
9d:e6:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:30:31 2025 by rpki-client