Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32342d3234203d3e20323639363634.roa
File: 34352e3139312e32302e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier: JODuYraimYKKdYLhaBliSdkrHtHgIUpSMLlupjODEKk=
Subject key identifier: AE:0C:8A:42:83:B5:1B:C0:73:86:98:D3:F1:E8:86:6B:94:B2:5E:9A
Certificate issuer: /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial: 365DF7617F8A411E3FF03F592C59109DBA8C01FA
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32342d3234203d3e20323639363634.roa
Signing time: Mon 07 Apr 2025 19:56:50 +0000
ROA not before: Mon 07 Apr 2025 19:51:50 +0000
ROA not after: Mon 06 Apr 2026 19:56:50 +0000
asID: 269664
IP address blocks: 45.191.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:5d:f7:61:7f:8a:41:1e:3f:f0:3f:59:2c:59:10:9d:ba:8c:01:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Validity
Not Before: Apr 7 19:51:50 2025 GMT
Not After : Apr 6 19:56:50 2026 GMT
Subject: CN=AE0C8A4283B51BC0738698D3F1E8866B94B25E9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:d5:61:c2:9c:5d:ae:2e:fa:c5:ce:36:da:
c5:84:f8:87:4a:05:7b:eb:5f:ef:4a:2d:3d:7b:b6:
c4:47:c2:b1:cd:05:55:87:c9:46:98:b8:be:d5:b4:
a3:21:90:04:d1:2e:bc:dd:f7:c5:e1:8d:11:c8:86:
44:9d:62:65:29:cd:e8:b8:61:59:0d:eb:9b:5c:5e:
5d:a8:d7:86:1c:0e:3f:4d:2e:c8:b0:c2:70:36:27:
66:06:fc:44:55:3b:0a:2e:dd:76:c2:38:bc:7b:5f:
04:ca:06:79:ee:b8:0e:29:44:80:66:f4:80:3e:27:
9d:9c:d0:e1:ba:1b:4f:3f:46:66:df:0f:ff:02:bd:
f6:cd:b7:19:a4:9c:94:e2:34:f0:cb:ae:49:56:a9:
60:e2:9d:99:21:6c:ad:6e:74:f8:00:fb:71:8a:9b:
e9:85:8f:e5:5b:39:40:81:28:f6:4f:cf:30:07:05:
b3:2a:8f:7f:22:26:f6:a3:7a:69:fc:20:a2:7b:16:
bb:b0:e0:f5:5f:df:0d:fc:e3:04:92:fd:c3:dc:2b:
19:8c:ef:57:b3:22:fd:59:f8:9c:e6:67:2c:be:5d:
8f:68:04:8b:23:41:cf:01:3e:46:98:9e:fb:48:0f:
aa:4e:76:10:f6:e8:7e:bd:c1:90:79:e3:9a:ee:de:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0C:8A:42:83:B5:1B:C0:73:86:98:D3:F1:E8:86:6B:94:B2:5E:9A
X509v3 Authority Key Identifier:
keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32302e302f32342d3234203d3e20323639363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.20.0/24
Signature Algorithm: sha256WithRSAEncryption
19:58:80:9a:d8:a8:59:db:46:c6:a6:c3:b6:3d:7d:2c:6b:0e:
9f:38:9b:93:2d:d0:85:08:f3:a4:7b:0c:55:e7:1c:e0:3c:17:
94:c6:fd:75:4d:12:87:c0:d0:b9:28:b1:a3:88:18:0e:11:48:
1d:8b:e4:09:4f:8a:c3:32:75:46:15:cd:76:15:86:1f:52:7c:
cf:4b:39:ee:58:0f:b7:d8:a2:bf:cd:c9:a6:07:0f:7f:38:63:
4c:18:bb:ea:c7:70:12:2d:b1:97:0e:88:26:93:6c:3d:ba:84:
99:ff:1d:69:7a:cc:d0:e1:97:24:d6:e5:c1:04:a5:47:35:38:
a6:b2:9f:a9:c5:7a:be:1f:d0:72:5b:d5:95:fb:1b:ae:93:b2:
83:4f:80:53:28:10:20:80:1a:3c:85:3c:a1:a8:bf:8c:3a:8a:
bf:bb:78:e2:11:1f:fa:f8:6b:d5:aa:fd:5c:b9:75:d9:fe:23:
f1:4c:5d:ae:39:78:74:9a:4e:8e:c5:23:59:4f:92:8b:a0:c4:
27:af:8f:38:d7:c1:c5:f3:76:dc:60:2c:6e:6b:7f:d3:57:c8:
bb:f2:22:f7:51:3a:91:d6:42:1f:94:e1:2b:ac:6b:ee:8b:dd:
5e:d2:53:1b:80:03:c7:2f:09:84:22:65:9b:cd:a8:44:42:fc:
34:d6:31:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:06:29 2025 by rpki-client