Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
File: 34352e3139312e32322e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier: ih6h7Fpr1yEE+/RLe+GCnEixFsydpIS6nut0xs9U9rg=
Subject key identifier: C7:53:D1:C2:A2:BC:3D:7B:63:84:00:A6:93:C6:83:23:40:80:95:99
Certificate issuer: /CN=BB025E2BBA700284DDD07C70408A3D358A4AED92
Certificate serial: 38DA8ED184196896455B253EDBDB36308913CDA5
Authority key identifier: BB:02:5E:2B:BA:70:02:84:DD:D0:7C:70:40:8A:3D:35:8A:4A:ED:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB025E2BBA700284DDD07C70408A3D358A4AED92.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
Signing time: Tue 11 Feb 2025 18:02:42 +0000
ROA not before: Tue 11 Feb 2025 17:57:42 +0000
ROA not after: Tue 10 Feb 2026 18:02:42 +0000
asID: 269664
IP address blocks: 45.191.22.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:da:8e:d1:84:19:68:96:45:5b:25:3e:db:db:36:30:89:13:cd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB025E2BBA700284DDD07C70408A3D358A4AED92
Validity
Not Before: Feb 11 17:57:42 2025 GMT
Not After : Feb 10 18:02:42 2026 GMT
Subject: CN=C753D1C2A2BC3D7B638400A693C6832340809599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:81:75:97:2a:3a:cf:dc:eb:8c:3e:fb:21:86:
76:a4:b8:f7:4d:33:74:c0:ab:c9:ca:a0:9f:ce:13:
a9:4f:58:8a:15:68:92:b9:b3:58:21:35:9a:c1:79:
b1:58:3a:ea:b5:4c:0e:c2:2b:b0:89:70:fe:73:05:
57:2d:3a:db:b1:a7:09:41:9e:4c:3f:1a:51:46:96:
24:89:d2:c4:cb:5c:c2:5b:2c:2b:d6:02:27:82:95:
58:5c:c5:07:e7:22:8e:df:3b:af:3e:fd:06:46:47:
35:88:05:a8:1d:fa:65:48:79:93:68:43:31:cf:cd:
f5:58:fa:46:79:a2:61:12:96:80:9e:3c:ad:1f:8a:
d9:90:32:ed:d0:92:e3:14:24:c7:ba:e2:ed:de:1d:
4c:b9:69:d8:f9:6e:d3:92:d1:8c:21:b6:92:3b:90:
94:93:48:2c:7e:db:32:00:4f:50:5c:92:3e:5f:56:
6c:03:c9:48:e2:2b:d5:ea:89:67:73:1e:a1:2d:05:
e4:45:cf:12:88:00:96:54:6b:d9:36:4c:2b:b9:26:
32:98:b2:48:38:cb:8c:71:80:5d:1d:ee:65:8a:d8:
f5:a2:a7:83:fd:58:68:74:b4:d9:47:e9:01:e4:be:
e4:37:8b:fa:06:08:85:bf:49:ea:94:d3:23:78:11:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:53:D1:C2:A2:BC:3D:7B:63:84:00:A6:93:C6:83:23:40:80:95:99
X509v3 Authority Key Identifier:
keyid:BB:02:5E:2B:BA:70:02:84:DD:D0:7C:70:40:8A:3D:35:8A:4A:ED:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/BB025E2BBA700284DDD07C70408A3D358A4AED92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BB025E2BBA700284DDD07C70408A3D358A4AED92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32322e302f32342d3234203d3e20323639363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:23:70:ac:e7:60:4d:ca:a4:ee:4e:77:fe:f8:18:bd:8b:69:
78:2e:fb:0e:1c:fe:99:74:11:b1:03:cc:1f:98:af:8a:ae:cf:
85:e3:06:8f:18:b4:f4:18:86:76:f6:59:52:c0:4e:bd:1c:eb:
c6:cd:23:7a:03:d1:70:82:61:e4:82:d7:36:7a:23:cd:63:29:
92:14:43:0f:af:38:01:1b:47:a0:ed:17:19:20:74:f6:80:a0:
d2:e0:03:e5:3a:17:f3:71:bd:b8:1f:4c:75:e8:af:79:0d:0a:
8b:8d:6c:5e:20:ee:67:c8:5d:a3:41:6d:16:6e:43:f1:16:67:
17:f7:ab:c7:9e:28:dc:40:39:a2:8e:10:d8:72:69:bd:8b:a6:
19:8c:64:99:2e:e4:6c:6b:d2:c5:c2:78:0b:50:41:d0:a0:e3:
35:9d:ca:51:54:17:7d:cb:b8:0e:04:7b:86:d9:d4:69:85:3e:
7c:5f:b5:25:3d:b1:31:08:1b:55:07:2a:79:76:8c:ea:b7:0a:
01:5d:35:fb:26:5c:87:a2:07:2c:92:30:f5:c4:88:02:2a:96:
2e:a3:58:26:c7:aa:ee:5f:a1:9b:07:c2:28:d6:35:9a:16:4a:
ca:ca:d2:13:5e:a0:57:be:f2:e3:1a:96:73:23:1d:5a:7f:45:
b3:25:36:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:24:03 2025 by rpki-client