Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
File: 34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier: i+yahRfUUNWhW3gwC370D4/ZL4mhnRozXBFj2pfkYtw=
Subject key identifier: A3:4B:26:C6:4E:0D:74:E6:22:71:BE:1F:75:71:1B:9F:59:54:71:CD
Certificate issuer: /CN=68896B9A803F401F71FCF845C4E94131201E4D39
Certificate serial: 220BB0403302F09B42A9A6426D3312D458F65ED1
Authority key identifier: 68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
Signing time: Thu 13 Feb 2025 18:27:50 +0000
ROA not before: Thu 13 Feb 2025 18:22:50 +0000
ROA not after: Thu 12 Feb 2026 18:27:50 +0000
asID: 262899
IP address blocks: 45.165.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:0b:b0:40:33:02:f0:9b:42:a9:a6:42:6d:33:12:d4:58:f6:5e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68896B9A803F401F71FCF845C4E94131201E4D39
Validity
Not Before: Feb 13 18:22:50 2025 GMT
Not After : Feb 12 18:27:50 2026 GMT
Subject: CN=A34B26C64E0D74E62271BE1F75711B9F595471CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:56:cc:de:ca:ed:f0:c2:56:00:d6:46:87:7f:
5b:4f:75:89:2b:49:68:57:a1:d3:8e:77:80:92:12:
e8:be:c3:72:55:de:ba:43:d6:c7:0f:90:62:f4:cf:
9a:11:93:15:34:9d:b7:b6:34:b1:07:66:73:e1:68:
08:c7:25:dc:7f:3b:4b:30:f2:39:eb:a5:84:97:c9:
a5:4a:59:13:ba:87:3f:c4:4e:01:8b:2f:ee:84:12:
6b:d1:09:42:81:22:24:90:38:84:c9:0d:03:1b:d2:
94:e4:de:7b:91:c5:b9:77:72:ba:ca:42:a0:c3:2f:
85:1f:5d:27:c4:57:70:58:1e:fd:2a:b1:dc:93:8b:
52:8c:3c:46:69:a3:6a:e9:92:9e:c5:29:52:f0:50:
8d:70:9a:c4:04:8d:98:fc:62:c1:16:44:41:99:0e:
3b:2e:23:ce:88:5d:8d:2a:45:0e:31:07:6c:ca:16:
ab:ba:35:97:95:e7:9b:c5:c3:75:87:bf:24:36:99:
82:e9:8b:65:97:b8:df:7d:b4:8f:af:8c:a4:db:6b:
92:f0:80:63:81:27:6c:73:5b:e8:7c:71:d2:62:b8:
e3:32:c8:4d:1f:94:7a:99:ab:0f:a7:94:d6:85:09:
e0:ab:6d:38:90:c5:74:dc:5b:eb:98:ad:5b:49:d9:
14:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4B:26:C6:4E:0D:74:E6:22:71:BE:1F:75:71:1B:9F:59:54:71:CD
X509v3 Authority Key Identifier:
keyid:68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.129.0/24
Signature Algorithm: sha256WithRSAEncryption
71:be:f6:1c:10:9d:7f:bd:8f:96:95:f2:4b:99:4d:b0:57:d3:
75:5c:cb:2a:34:ee:ca:af:01:3a:6f:51:be:a4:ce:a8:51:98:
8d:1c:a8:24:85:0b:1a:62:f1:25:2a:a2:6e:74:14:ae:b7:22:
92:9b:9a:48:a3:fb:9a:42:85:65:9a:a4:14:4c:a2:5e:e1:bc:
c3:58:97:66:30:01:b1:12:d0:61:83:cb:37:84:9a:96:3f:47:
eb:4a:47:25:e9:bb:e0:f0:92:f7:6f:78:20:ce:f5:b2:78:33:
b9:39:ee:e5:16:7d:d3:85:85:10:b5:91:f3:0c:c8:0f:c8:c9:
c7:75:81:83:90:53:d4:d9:36:dc:97:2f:b7:ac:ab:c0:5f:44:
ce:82:8f:bb:51:7f:9f:4a:93:dd:02:bd:9b:98:07:c0:23:5d:
6a:55:6d:03:10:21:ab:2b:d3:b0:a7:9f:2b:b8:62:15:37:91:
7a:0a:b8:2c:84:51:89:b1:a6:5c:8c:7b:74:61:07:5d:4a:be:
68:32:d3:51:6b:c7:80:9e:cb:ec:f7:e5:f5:6f:7b:11:70:dc:
87:b6:ee:b7:8b:e6:c1:e4:a3:9c:7c:b3:71:03:0b:0b:20:9d:
4c:e0:bb:c6:27:bb:3b:80:c4:c3:dd:31:d0:92:c9:d6:bc:f6:
b9:f8:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:51:06 2025 by rpki-client