Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa
File: 34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa (raw, json)
Hash identifier: f1uW4GPCHpaldFoPM4qfavI9QjIXYviM3ZcMRxmu1CE=
Subject key identifier: DE:2C:F5:8B:6C:F2:9C:56:C1:1A:D2:8C:32:B1:FA:E5:A3:DD:C9:3E
Certificate issuer: /CN=68896B9A803F401F71FCF845C4E94131201E4D39
Certificate serial: 09E1C1775EA6A73CCAF2CB7639ADCFDE54CA82D0
Authority key identifier: 68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa
Signing time: Thu 13 Feb 2025 18:27:50 +0000
ROA not before: Thu 13 Feb 2025 18:22:50 +0000
ROA not after: Thu 12 Feb 2026 18:27:50 +0000
asID: 262899
IP address blocks: 45.165.128.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:e1:c1:77:5e:a6:a7:3c:ca:f2:cb:76:39:ad:cf:de:54:ca:82:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68896B9A803F401F71FCF845C4E94131201E4D39
Validity
Not Before: Feb 13 18:22:50 2025 GMT
Not After : Feb 12 18:27:50 2026 GMT
Subject: CN=DE2CF58B6CF29C56C11AD28C32B1FAE5A3DDC93E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:83:5d:b6:1d:60:f0:1e:fe:51:e7:58:8c:d1:
ed:d9:ad:4e:0e:64:f6:f2:62:d4:05:96:6d:23:79:
d5:ee:7c:c3:18:8a:c0:8f:ec:7e:73:e8:b8:de:67:
97:9f:72:36:cd:7c:33:0c:d8:78:20:44:19:59:04:
1c:17:57:ea:16:57:c8:84:bb:82:84:a3:96:56:f2:
fe:fe:83:9f:62:1c:29:38:09:a9:b5:52:20:b5:02:
d9:a9:e6:56:3d:78:17:0d:b4:6e:44:f8:5d:58:ac:
3f:93:bc:a0:96:a3:3c:6b:2c:9d:61:7d:2c:08:41:
1b:3f:6f:ed:7e:f9:8a:85:8f:39:a7:26:2e:28:cf:
91:7e:23:2f:21:be:cd:ff:c7:36:ae:f9:fb:95:5d:
95:b6:46:ac:ae:20:30:c1:69:da:fd:c0:0d:62:30:
2d:6a:8d:c1:dc:4c:dd:6c:f9:eb:d3:2f:a6:78:51:
90:da:b2:37:93:22:4b:e9:f4:f5:ba:2b:84:9c:87:
f2:ff:c0:5f:16:a1:b1:23:7d:7a:00:a8:d5:cb:4f:
dd:6a:70:fb:0f:d1:5f:c0:f5:35:53:40:88:bd:80:
c8:a3:fa:d8:68:54:66:82:35:df:fd:a9:33:6a:67:
24:81:38:f9:24:12:d3:96:57:65:cc:8d:48:99:56:
36:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2C:F5:8B:6C:F2:9C:56:C1:1A:D2:8C:32:B1:FA:E5:A3:DD:C9:3E
X509v3 Authority Key Identifier:
keyid:68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132382e302f32332d3233203d3e20323632383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.128.0/23
Signature Algorithm: sha256WithRSAEncryption
00:be:e6:68:29:0d:76:ca:f0:ca:4e:3b:f7:b1:04:77:25:5a:
66:d4:8b:a7:ee:79:63:09:3e:f9:23:65:cf:83:ff:17:7a:76:
85:e8:85:55:3d:9d:fb:a4:4c:e7:ed:0b:89:1b:3c:ba:29:f1:
ea:1e:18:02:25:e2:e8:27:27:0f:6a:82:83:b9:b0:d6:c5:a0:
2c:54:85:82:5a:a3:4b:ca:88:39:ad:dc:55:99:9d:17:b5:f6:
fa:34:9c:6a:5c:f8:76:7e:e0:c9:9e:d0:f9:df:20:71:7b:92:
04:5d:f2:39:a6:9c:ca:b6:f7:4e:99:23:7e:ba:de:5f:96:97:
4d:a5:e3:63:3d:ff:8e:41:ca:aa:9f:16:05:47:cf:66:01:d9:
69:2f:a0:83:ed:11:e0:2f:cb:2b:32:43:69:aa:3e:cd:82:a8:
77:8c:9c:af:01:4f:18:4a:7e:b8:66:fd:b4:dd:55:e7:a3:88:
62:35:d6:0a:cd:30:76:b5:80:83:93:cf:16:cb:0f:d6:ac:6f:
b6:4e:ee:35:71:11:e5:a8:c8:9f:35:42:6f:2b:fa:9d:c7:0c:
cb:a4:5a:09:7d:8e:b7:d2:82:9a:b3:31:be:e4:10:bd:50:d8:
98:4f:d0:0b:62:91:cc:98:98:2b:d6:31:64:8d:6a:86:04:3c:
64:aa:4b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:12 2025 by rpki-client