Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
File: 34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa (raw, json)
Hash identifier: 5JEQ41mS93qIAQdS67rT4lBibFdkhJ+y7yw43mriUAQ=
Subject key identifier: F4:7A:A7:C9:74:7A:7C:78:19:5E:AC:A9:72:50:0B:F5:12:19:D5:EB
Certificate issuer: /CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
Certificate serial: 73BCAF4DDE2A52250549F89724561C511577DD03
Authority key identifier: 9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
Signing time: Fri 03 May 2024 23:15:58 +0000
ROA not before: Fri 03 May 2024 23:10:58 +0000
ROA not after: Fri 02 May 2025 23:15:58 +0000
asID: 262899
IP address blocks: 45.165.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:bc:af:4d:de:2a:52:25:05:49:f8:97:24:56:1c:51:15:77:dd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685
Validity
Not Before: May 3 23:10:58 2024 GMT
Not After : May 2 23:15:58 2025 GMT
Subject: CN=F47AA7C9747A7C78195EACA972500BF51219D5EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:d4:77:10:66:a1:22:2f:fa:9c:2e:74:70:
47:85:c9:5e:42:19:ad:5f:fe:ac:23:9b:e2:97:56:
20:76:f1:c2:01:db:79:9f:2a:96:8f:9f:86:1e:c8:
d4:25:62:42:5b:64:f4:26:73:e2:62:01:86:33:1a:
c5:a3:dc:1f:8a:56:55:aa:c0:85:6b:13:69:86:96:
30:08:3c:cc:61:51:fa:4e:5a:50:f4:36:35:1a:5f:
49:db:1a:69:95:3c:26:cd:bf:94:9a:05:97:84:9a:
a8:7f:69:ad:dc:5e:aa:38:f2:fe:72:a5:ca:b3:b1:
90:0d:64:8a:54:25:29:72:5c:a0:38:6b:c2:c7:16:
a1:4c:0e:0f:1c:b9:a4:da:a9:96:0b:f6:a8:ce:8f:
42:ef:16:4f:e6:eb:a1:63:6b:47:8a:62:00:07:f3:
2b:20:0a:be:0d:55:c9:d9:41:79:96:98:aa:f1:da:
29:1f:f5:1f:f6:55:d5:d7:64:bc:4d:86:3b:cd:4e:
bd:6e:19:26:1d:96:bd:d8:67:e1:7c:74:c8:15:f3:
77:b0:f5:5c:03:95:21:fb:84:5c:3f:fd:4e:ef:b2:
b1:67:dd:17:4a:b3:10:f6:85:d4:01:93:a1:4c:4e:
ae:4c:66:03:6f:43:7b:c6:3d:1b:0a:c6:eb:9d:c6:
77:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:A7:C9:74:7A:7C:78:19:5E:AC:A9:72:50:0B:F5:12:19:D5:EB
X509v3 Authority Key Identifier:
keyid:9A:CF:8E:0B:C0:F7:B2:EA:16:F1:57:84:D8:D7:BB:6D:81:E7:C6:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9ACF8E0BC0F7B2EA16F15784D8D7BB6D81E7C685.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/1/34352e3136352e3132392e302f32342d3234203d3e20323632383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:25:e7:db:70:83:b7:cc:44:fe:22:0b:87:68:01:da:03:cf:
37:39:a7:ac:48:72:f9:84:b0:80:4f:4c:03:d9:61:80:2d:d9:
d4:29:c6:bf:3b:a6:59:66:3b:c1:39:d7:0c:f5:36:18:d5:45:
46:76:2a:97:04:87:74:29:8a:1f:7e:4d:c7:cc:6b:ca:12:d4:
47:ca:27:42:61:f5:10:8a:9c:71:00:70:69:8d:6a:09:69:2e:
c4:de:8f:bd:5c:0c:67:50:80:e5:a9:c1:9c:a9:ff:e0:ae:93:
73:2c:6e:9b:ea:c9:fe:da:7d:cf:19:1a:b1:2f:d3:00:2e:18:
ef:83:2c:b7:68:e5:a4:63:20:26:b5:8d:02:0c:a4:32:9b:02:
e9:de:54:2e:eb:e7:bd:f9:82:c1:d5:d1:99:22:3a:29:87:69:
b4:40:0a:63:96:be:50:e7:61:a0:ef:e8:f1:4e:86:9f:78:e0:
f2:c7:25:99:3b:e3:84:56:02:52:87:66:bd:82:4e:8e:03:27:
6c:ed:3d:c5:6b:99:08:31:20:72:22:9f:cc:7d:ab:68:ff:c3:
3d:0e:40:2f:c1:6e:b4:fc:c0:14:07:7d:0b:f8:21:52:8c:ea:
97:d5:35:68:22:2f:01:86:fd:a9:31:b2:e0:af:08:d5:72:51:
30:86:5c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:30:18 2025 by rpki-client