Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
File: 34352e37302e3230372e302f32342d3234203d3e20323637353836.roa (raw, json)
Hash identifier: 0jVU1sexIBzV2G3vlBHN5nopGtbSgfdCN8sIXeah3II=
Subject key identifier: AE:92:24:5B:E7:21:F0:39:B5:A0:2E:46:27:31:0F:00:2E:DD:0D:5E
Certificate issuer: /CN=E2D9529EB6236E578B142694688E34A5271FE009
Certificate serial: 7FCD8776A02B489270A0BC25437B75AA2BEC2097
Authority key identifier: E2:D9:52:9E:B6:23:6E:57:8B:14:26:94:68:8E:34:A5:27:1F:E0:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9529EB6236E578B142694688E34A5271FE009.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
Signing time: Fri 31 Jan 2025 17:19:44 +0000
ROA not before: Fri 31 Jan 2025 17:14:44 +0000
ROA not after: Fri 30 Jan 2026 17:19:44 +0000
asID: 267586
IP address blocks: 45.70.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:cd:87:76:a0:2b:48:92:70:a0:bc:25:43:7b:75:aa:2b:ec:20:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2D9529EB6236E578B142694688E34A5271FE009
Validity
Not Before: Jan 31 17:14:44 2025 GMT
Not After : Jan 30 17:19:44 2026 GMT
Subject: CN=AE92245BE721F039B5A02E4627310F002EDD0D5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:24:02:3b:84:74:88:61:16:c3:09:36:a8:cd:
1d:6f:ca:f3:66:32:1a:11:a0:20:a5:81:ee:13:e7:
fd:d7:de:fc:6d:ad:93:2e:e9:e8:31:44:0c:33:c7:
a6:a5:66:f5:0f:af:c1:4a:a0:f4:9e:f2:cf:bc:48:
95:4e:e4:cf:de:d7:84:15:eb:4e:f6:34:f0:e4:7d:
57:04:f2:11:f7:c7:9b:42:93:9c:94:7b:23:e9:41:
34:61:ef:d2:7e:a1:09:a2:a4:cd:6c:98:95:eb:1e:
4a:66:16:83:61:63:32:81:8d:d4:7d:5c:ce:f9:80:
f2:52:f4:1e:cd:1d:74:97:60:4b:aa:5f:7b:b3:fb:
27:4e:3d:0f:00:97:d6:4e:6e:d3:c0:ee:84:f1:82:
bd:5b:39:ca:e1:05:27:7c:3d:05:0e:3f:ff:e6:04:
d4:45:b7:f0:f3:6a:06:e7:5e:43:8a:e1:f7:6c:9f:
04:eb:ab:7b:6c:dd:5b:d6:35:7b:8d:21:8f:34:4d:
c6:b5:b1:de:54:ff:a1:3d:38:8e:f9:1f:9b:c2:ec:
6b:b6:84:9f:ad:df:61:72:25:cf:17:04:0d:ca:26:
25:fd:fd:dd:5e:5a:4d:aa:45:d4:20:2e:42:93:3c:
43:fd:22:27:6b:53:46:97:82:a0:44:05:c5:49:c3:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:92:24:5B:E7:21:F0:39:B5:A0:2E:46:27:31:0F:00:2E:DD:0D:5E
X509v3 Authority Key Identifier:
keyid:E2:D9:52:9E:B6:23:6E:57:8B:14:26:94:68:8E:34:A5:27:1F:E0:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/E2D9529EB6236E578B142694688E34A5271FE009.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2D9529EB6236E578B142694688E34A5271FE009.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UFNoXJ7PERuAKbv9ubwr7SwwWCLQmv4xfYXHEQMn3Fr/0/34352e37302e3230372e302f32342d3234203d3e20323637353836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.207.0/24
Signature Algorithm: sha256WithRSAEncryption
78:8e:73:ae:28:ad:22:08:aa:52:d0:a7:4e:40:f4:b4:74:d0:
b2:48:9f:06:3d:54:7e:57:64:0e:78:57:3e:0e:09:9f:2c:5b:
1e:ab:66:31:53:2e:b6:c2:f0:a9:3b:66:8c:6d:28:00:fc:73:
09:7b:c5:d9:4d:2e:30:88:be:e5:06:98:71:0c:33:69:36:0c:
94:52:c3:64:cd:6c:17:2e:91:39:5e:b2:f2:b1:ff:24:55:23:
2e:5d:48:2e:6a:9c:2b:5e:5e:5c:7f:04:4d:eb:e6:c5:e5:4d:
a6:88:49:ed:28:9d:7b:ea:a5:10:41:fa:d5:53:d3:f7:f2:1e:
ae:4c:bc:09:55:20:c4:8c:0f:db:67:b3:0a:18:c4:de:87:f1:
fc:9f:bc:11:14:ba:70:67:99:a8:ca:74:3b:69:82:2f:ee:0d:
33:ea:c7:ad:49:c7:cd:49:48:8b:cd:cd:8f:24:62:d4:3d:75:
a5:1f:9d:b2:f3:1a:bf:f1:ac:ed:a6:2f:e7:40:aa:5a:8f:8c:
b6:e7:44:1f:92:6d:4e:b8:cc:68:d6:05:a6:07:89:a6:ec:bf:
b9:1a:26:44:b1:fd:84:b4:e0:15:23:5b:9b:3e:78:48:ab:f6:
38:62:c4:88:90:da:60:a8:39:0a:37:63:3b:89:4a:c6:bf:df:
29:f9:48:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:34:27 2025 by rpki-client