Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32332e302f32342d3234203d3e20323639363634.roa
File: 34352e3139312e32332e302f32342d3234203d3e20323639363634.roa (raw, json)
Hash identifier: CKEbWMrjm5yC90eSVkNDHhrXZCHKyiHstOKlhM7G13I=
Subject key identifier: 4A:3A:BD:1B:1A:45:82:CD:87:A6:DC:B6:4C:A2:4B:BB:DA:44:57:11
Certificate issuer: /CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Certificate serial: 49EE709CA4FE63FAFECDFDF6AE1BE820A081232B
Authority key identifier: 4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32332e302f32342d3234203d3e20323639363634.roa
Signing time: Mon 07 Apr 2025 19:56:50 +0000
ROA not before: Mon 07 Apr 2025 19:51:50 +0000
ROA not after: Mon 06 Apr 2026 19:56:50 +0000
asID: 269664
IP address blocks: 45.191.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:ee:70:9c:a4:fe:63:fa:fe:cd:fd:f6:ae:1b:e8:20:a0:81:23:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D
Validity
Not Before: Apr 7 19:51:50 2025 GMT
Not After : Apr 6 19:56:50 2026 GMT
Subject: CN=4A3ABD1B1A4582CD87A6DCB64CA24BBBDA445711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fe:d9:bb:f7:a5:0a:12:10:06:93:ca:92:85:
f5:b7:b9:08:55:16:75:2c:f1:6f:ce:75:dc:2c:9a:
04:32:83:b0:4d:8c:39:b1:90:4a:6b:f4:0e:5f:ab:
4f:d6:3d:92:3f:0d:27:8e:5b:08:7c:5d:bb:76:4f:
82:c6:e3:3c:8e:0e:1f:c5:1d:0c:8e:67:45:e9:fa:
8c:f3:2a:cf:f5:79:17:0a:8e:2a:b7:ac:24:7d:75:
34:e6:93:a1:df:be:37:d8:cc:09:98:81:c6:7e:29:
c4:65:58:03:4e:32:65:9e:d5:c3:e1:71:f0:c8:63:
43:3b:e3:18:c4:8c:42:b3:29:85:f1:0f:8d:83:8b:
61:a2:d6:fe:c8:b3:65:10:ff:fe:24:04:7a:08:61:
c5:18:b3:96:00:a2:b4:f1:fe:ad:39:d5:33:2c:6c:
1f:d1:e8:a2:32:d5:50:ed:b4:eb:b4:ac:14:fb:b0:
24:f7:58:d5:90:49:5b:07:b3:6c:4d:c6:fd:e3:b1:
27:49:0d:b2:eb:98:9e:b6:9d:19:6b:76:8a:15:62:
b7:42:fb:3b:c1:75:1a:43:94:d1:e2:be:8a:1f:fa:
74:dc:50:d4:57:5b:11:ae:58:ad:af:74:0c:a8:18:
91:7f:2a:a0:97:62:f0:0f:10:0f:b4:bb:3e:98:a4:
e9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:BD:1B:1A:45:82:CD:87:A6:DC:B6:4C:A2:4B:BB:DA:44:57:11
X509v3 Authority Key Identifier:
keyid:4F:36:60:58:E8:C8:DC:E8:E2:4C:1C:BB:8D:8F:8A:28:2A:6F:E5:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4F366058E8C8DCE8E24C1CBB8D8F8A282A6FE59D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wLZUK7waTZjCjSnZbvwjJGP1yLk8ifWoi31HJqj1u74/0/34352e3139312e32332e302f32342d3234203d3e20323639363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.23.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e4:7f:91:23:74:8d:a1:22:1e:7d:53:85:2e:42:f4:64:18:
05:21:6b:32:d4:a8:56:bd:b1:0d:7b:1a:55:57:ff:76:94:53:
14:92:51:09:e1:5f:e0:f1:42:1c:e5:1c:07:2d:e7:c8:76:50:
9f:b5:f2:82:df:ce:80:8b:5a:89:dc:9a:35:2b:bf:b9:68:2b:
e3:13:d2:09:3f:8b:d6:38:5b:2f:e6:e3:7b:c2:ea:32:3d:ce:
7d:12:b2:8b:dd:b9:14:d0:12:4e:eb:cd:a9:0b:f4:87:a7:eb:
6b:1e:7a:e8:e5:54:0b:38:71:2a:9d:e2:9f:5c:d5:4a:41:58:
76:4e:93:f6:1a:08:59:ea:25:1c:ae:9c:ff:86:1c:46:23:f7:
5d:d3:48:84:d6:98:05:6d:cc:a9:fa:cd:a7:25:4d:a9:27:50:
ad:59:69:4e:cb:30:c1:f8:7d:6a:80:d6:d5:cd:8c:a1:5b:9e:
88:c6:42:60:5a:0a:1c:a1:53:21:79:d1:7e:0e:66:1a:78:78:
fa:0c:33:dc:ed:38:93:83:d8:23:0a:5d:d1:47:62:d4:8d:80:
a2:28:1a:25:bb:ed:b4:3e:ae:b6:9e:33:02:f2:6b:30:c0:4a:
2f:94:5b:6b:41:ba:18:10:ea:46:f6:5d:fc:aa:b1:c6:aa:e8:
4b:d7:1e:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:24:36 2025 by rpki-client