Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa
File: 34352e3138342e36302e302f32322d3332203d3e20323639333137.roa (raw, json)
Hash identifier: ZDcuG3RH9hBwJRD+KaKxq98GXfcYUydkRZgMa6/Dero=
Subject key identifier: 04:39:6A:17:6F:99:BF:85:D8:6A:68:68:B6:CD:4E:0E:BB:D2:31:85
Certificate issuer: /CN=2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62
Certificate serial: 7F283C52C627C79CD3B2702A64BB8788882733AB
Authority key identifier: 20:45:08:41:31:B1:E7:BB:87:5E:FF:FF:C1:EF:49:D1:D3:C7:AC:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa
Signing time: Mon 03 Mar 2025 13:02:49 +0000
ROA not before: Mon 03 Mar 2025 12:57:49 +0000
ROA not after: Mon 02 Mar 2026 13:02:49 +0000
asID: 269317
IP address blocks: 45.184.60.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:28:3c:52:c6:27:c7:9c:d3:b2:70:2a:64:bb:87:88:88:27:33:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62
Validity
Not Before: Mar 3 12:57:49 2025 GMT
Not After : Mar 2 13:02:49 2026 GMT
Subject: CN=04396A176F99BF85D86A6868B6CD4E0EBBD23185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4b:21:30:e4:23:ba:40:bd:fd:0b:c2:bb:65:
64:9c:27:17:fc:62:60:a1:c8:f2:4b:08:0f:2a:e8:
be:87:f0:70:e4:5a:7c:02:c3:60:52:2f:f6:4b:a3:
4f:32:41:95:09:47:ca:16:36:63:74:d3:39:40:d7:
23:d4:c3:47:65:0b:18:39:f2:a9:71:60:2b:be:9e:
ba:dd:a4:3c:e0:58:58:80:e0:b5:8a:26:09:75:57:
5d:a8:d1:bd:68:bf:15:e5:f0:76:42:8e:b3:2f:ff:
2e:93:c7:6c:19:e4:37:42:9f:19:90:8a:46:33:1b:
a3:41:f2:3e:b2:57:58:4d:82:59:38:85:40:c9:de:
b4:e6:01:df:55:b0:cb:88:6f:56:0b:f2:87:ca:d5:
89:31:52:74:b2:23:9b:b0:20:14:11:ee:9b:2a:9a:
ec:29:ca:55:10:32:19:8c:fe:98:d9:a1:12:c6:e6:
d7:00:d7:c3:19:45:ae:61:c6:ed:42:3d:13:08:4a:
e1:00:fc:42:63:84:ea:fb:13:02:df:79:25:ab:2b:
7e:f9:68:76:f0:7c:f2:f1:6b:8d:59:2a:14:7b:4c:
c9:4d:b5:b8:cf:63:0a:4a:4a:76:63:c3:31:bf:56:
24:d2:60:07:00:57:db:4e:9d:5f:c6:0e:53:cd:24:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:39:6A:17:6F:99:BF:85:D8:6A:68:68:B6:CD:4E:0E:BB:D2:31:85
X509v3 Authority Key Identifier:
keyid:20:45:08:41:31:B1:E7:BB:87:5E:FF:FF:C1:EF:49:D1:D3:C7:AC:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2045084131B1E7BB875EFFFFC1EF49D1D3C7AC62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/988ne7p6UtGxjBNbyUjLFfi3cSdTEupe4QEkLCmQRafq/0/34352e3138342e36302e302f32322d3332203d3e20323639333137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.184.60.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:2a:3b:83:80:7c:bc:40:ef:1d:39:76:c2:0c:f3:8b:1a:b7:
f4:a3:da:3e:a3:35:d6:d6:98:4f:6d:99:9e:91:7e:b5:20:90:
32:f5:dd:3e:d7:47:d4:a4:f1:40:8e:b3:ce:58:c7:13:eb:eb:
fb:f7:53:3e:25:6a:0e:69:9e:a8:e8:fb:14:29:25:68:aa:7e:
75:d5:7d:25:d7:11:02:21:bb:9a:ad:e7:0f:c7:d2:db:2a:d6:
02:bb:6b:74:55:cd:75:ef:84:df:50:b3:11:e2:85:03:b2:75:
ec:09:c7:76:e7:67:21:5f:c1:90:6c:fe:ed:ab:ea:a9:c2:85:
24:11:55:8d:d0:cb:64:a9:0e:0b:a7:c2:e3:7d:e5:c8:cb:2f:
66:32:eb:ba:c9:0c:3d:c4:3a:e6:ba:88:67:15:f8:f2:15:80:
10:da:e3:d2:a4:91:69:99:7d:4a:61:1b:2d:06:37:c7:3f:8f:
5d:a4:c2:d0:1f:d7:aa:f2:d8:a0:d3:9f:79:83:35:17:a5:9f:
cd:cd:ac:5d:2b:95:b0:ab:5b:1d:0d:6d:d5:4f:d2:04:be:7a:
b9:03:bc:c1:66:24:11:20:6d:6f:62:cf:b5:58:5a:23:4a:75:
5e:a8:eb:9d:87:e7:8b:7d:60:a6:98:d0:2e:bb:75:c3:f6:e1:
ad:6e:74:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:24:06 2025 by rpki-client