Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32332d3233203d3e20323637353836.roa
File: 34352e37302e3230342e302f32332d3233203d3e20323637353836.roa (raw, json)
Hash identifier: FbXTNta3+WA+63VPvhynPSlakrSVGK1P2PPWR8hvdC8=
Subject key identifier: D3:A1:F4:AE:FA:26:ED:6A:9A:5E:03:E8:89:D3:CA:93:B6:4B:6F:AE
Certificate issuer: /CN=E2D9529EB6236E578B142694688E34A5271FE009
Certificate serial: 6FE71B0D30E5467940F865EC1B4EEB11CF99AC56
Authority key identifier: E2:D9:52:9E:B6:23:6E:57:8B:14:26:94:68:8E:34:A5:27:1F:E0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9529EB6236E578B142694688E34A5271FE009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32332d3233203d3e20323637353836.roa
Signing time: Fri 31 Jan 2025 17:19:21 +0000
ROA not before: Fri 31 Jan 2025 17:14:21 +0000
ROA not after: Fri 30 Jan 2026 17:19:21 +0000
asID: 267586
IP address blocks: 45.70.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:e7:1b:0d:30:e5:46:79:40:f8:65:ec:1b:4e:eb:11:cf:99:ac:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2D9529EB6236E578B142694688E34A5271FE009
Validity
Not Before: Jan 31 17:14:21 2025 GMT
Not After : Jan 30 17:19:21 2026 GMT
Subject: CN=D3A1F4AEFA26ED6A9A5E03E889D3CA93B64B6FAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5e:8d:1c:f5:e6:12:3a:7a:d5:6e:43:3d:ad:
2d:48:50:7a:10:3f:51:ef:b1:be:4a:eb:f0:88:c9:
06:ff:5c:95:72:22:bb:4d:1d:8f:7c:af:93:21:53:
15:65:7f:51:e1:57:8e:58:f0:ff:0f:f0:9c:b7:7a:
21:54:c5:aa:65:10:22:6c:11:f8:8b:ec:1f:d8:a6:
4b:3b:bd:24:9b:c8:10:ef:fd:43:40:ce:42:8c:7f:
15:2a:45:7a:07:98:21:9a:83:c0:7a:0b:1a:0b:6c:
f9:36:ed:2f:d4:46:14:a9:b7:8b:6e:8d:e2:2f:89:
0e:b7:ae:c2:b3:f9:16:89:00:39:ff:e0:da:9c:49:
d1:7f:c1:d8:8b:d4:ed:69:8b:bd:c4:45:05:1c:ce:
c7:89:81:c8:85:5c:1b:ed:a8:cc:7e:f6:57:8d:9b:
00:48:e7:e0:48:94:b1:8a:43:fd:37:71:06:75:ba:
14:0d:7c:46:13:27:d5:f2:03:bf:01:b5:cd:8c:94:
8e:29:6c:a3:a4:9e:0f:e7:be:06:69:58:de:f9:32:
30:25:74:f9:68:f7:fe:26:9f:ee:c0:67:cc:a0:ff:
b2:00:a3:ec:12:13:13:8b:41:a4:bf:4a:34:b2:60:
70:d1:87:29:d8:d0:98:4a:bd:a6:a3:fd:0a:bb:4d:
04:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A1:F4:AE:FA:26:ED:6A:9A:5E:03:E8:89:D3:CA:93:B6:4B:6F:AE
X509v3 Authority Key Identifier:
keyid:E2:D9:52:9E:B6:23:6E:57:8B:14:26:94:68:8E:34:A5:27:1F:E0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E2D9529EB6236E578B142694688E34A5271FE009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9529EB6236E578B142694688E34A5271FE009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230342e302f32332d3233203d3e20323637353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.204.0/23
Signature Algorithm: sha256WithRSAEncryption
04:ae:26:51:9c:4b:a2:93:8c:8c:20:ba:10:8f:e9:4d:30:a7:
d2:52:e5:1e:da:ef:9c:b7:4b:e0:b0:7f:1c:e2:63:a5:b7:2c:
67:b1:c8:c6:4e:02:69:86:59:ff:a3:bb:12:10:84:4b:ca:be:
47:29:43:2a:ce:9d:ef:03:4c:1e:29:04:0c:2d:7e:a7:79:2a:
3a:43:b8:ac:51:7e:ac:a8:fb:70:47:72:2b:de:92:ec:3a:37:
78:2e:4c:3f:99:e1:1d:bd:d3:db:e4:cb:b7:cc:60:e0:c3:f3:
57:17:bb:ff:5a:d0:76:35:d2:cd:66:2f:21:7c:38:43:09:93:
8d:98:19:e5:f4:51:99:cb:1d:19:1f:6a:19:c5:66:61:ec:12:
12:e1:79:da:d0:c4:97:09:3e:97:73:9d:42:55:b6:4a:e3:04:
f8:7f:76:d4:5c:bd:44:17:78:c5:47:2b:4c:58:f3:d9:f1:31:
26:4d:6a:78:0e:ac:c0:ea:d7:da:7d:01:b0:e1:7a:24:11:9f:
3d:59:5c:80:45:59:c1:9d:84:94:75:8f:0b:1f:b2:bc:27:2d:
7a:0a:8b:9a:fd:84:d2:91:4a:20:96:ab:56:2b:99:ee:3e:73:
bb:3b:5b:f7:cd:3b:b2:24:a0:54:a6:f2:aa:ab:3d:99:7e:67:
e2:cf:6f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:31:02 2025 by rpki-client