Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e372e3231322e302f32322d3234203d3e203238323031.roa
File: 34352e372e3231322e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: 7YaFDxYg+0f4FDKv79mMpMNQyA1Vp/OPZcoRtvcMK9U=
Subject key identifier: FA:CE:6E:B9:72:1A:1A:8D:B4:8B:07:2D:B6:27:E2:C3:D4:9B:2C:CB
Certificate issuer: /CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Certificate serial: 637DA4DB51E8BAF91225C58F9030A7CFEA53371E
Authority key identifier: AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e372e3231322e302f32322d3234203d3e203238323031.roa
Signing time: Wed 12 Mar 2025 13:33:21 +0000
ROA not before: Wed 12 Mar 2025 13:28:21 +0000
ROA not after: Wed 11 Mar 2026 13:33:21 +0000
asID: 28201
IP address blocks: 45.7.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:7d:a4:db:51:e8:ba:f9:12:25:c5:8f:90:30:a7:cf:ea:53:37:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC1FE9387640A777B73D94211D4C8FFA5C669304
Validity
Not Before: Mar 12 13:28:21 2025 GMT
Not After : Mar 11 13:33:21 2026 GMT
Subject: CN=FACE6EB9721A1A8DB48B072DB627E2C3D49B2CCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b1:f4:a6:92:a6:93:85:35:e9:ad:ba:d5:77:
8b:f6:85:ac:a1:77:14:da:7c:8a:b1:fb:7c:1f:fb:
01:46:29:f9:56:0e:41:db:e8:6f:68:88:66:00:12:
a8:68:c9:ca:1a:48:67:69:a1:0a:23:ce:55:27:cb:
8d:47:67:7d:23:7a:b2:8f:07:68:93:e2:7b:d2:5b:
48:dc:7b:96:0a:f2:c4:b8:84:17:cc:1d:4d:df:ad:
fa:4f:31:c8:62:a1:44:55:69:78:0f:bc:d6:fe:e5:
8e:7a:e6:13:a3:2d:62:ed:fe:4e:55:05:76:0f:c4:
0a:09:6e:ba:b6:2e:e4:61:e9:12:25:74:bb:ad:fd:
1c:f2:d5:4b:07:b6:58:19:ff:da:08:57:9d:4b:5d:
7f:25:87:5a:04:08:5a:ae:e8:cb:41:6c:2b:1a:67:
07:e1:70:08:19:70:d1:d1:e1:e5:81:5c:a7:27:de:
e3:ff:2a:0f:d0:19:57:e5:9b:0a:e0:84:4c:47:b0:
05:13:82:38:8c:8f:05:0e:e0:68:ee:15:27:fa:49:
21:97:14:7b:82:ac:98:5a:64:02:7f:f8:3d:25:2c:
af:fb:7b:5b:01:6d:60:f5:4d:75:b7:41:fb:53:b3:
f6:82:b3:dc:89:a3:c2:fe:83:06:da:b0:84:f2:0e:
da:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:CE:6E:B9:72:1A:1A:8D:B4:8B:07:2D:B6:27:E2:C3:D4:9B:2C:CB
X509v3 Authority Key Identifier:
keyid:AC:1F:E9:38:76:40:A7:77:B7:3D:94:21:1D:4C:8F:FA:5C:66:93:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/AC1FE9387640A777B73D94211D4C8FFA5C669304.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC1FE9387640A777B73D94211D4C8FFA5C669304.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/0/34352e372e3231322e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.212.0/22
Signature Algorithm: sha256WithRSAEncryption
59:2d:d4:e8:a2:41:be:f8:ff:c8:38:93:9b:4d:a0:59:f3:ae:
c9:ac:6c:0d:59:65:ef:c2:88:1e:81:32:4e:27:7e:1f:60:4c:
02:0b:58:d1:1a:66:7e:81:fc:e2:ec:88:f9:08:d2:59:41:07:
b7:04:20:57:8e:15:81:9e:c1:2f:90:7c:4f:a7:fe:77:59:a1:
3d:45:db:45:7a:02:81:fd:bf:ac:94:05:1a:47:7a:30:2c:de:
d4:19:18:5c:e1:3e:19:34:e1:1f:41:34:07:11:be:ee:ef:0b:
c5:92:c7:dd:70:6d:64:87:46:61:07:2b:8d:86:c0:42:65:9e:
1f:d6:08:f2:bc:97:4d:0c:49:75:6d:b0:ba:94:d5:39:08:c0:
7d:e0:e1:64:45:31:75:d6:e9:2a:a5:f3:68:1e:42:f6:2c:97:
da:57:bf:12:ac:df:a4:f5:ec:c0:0f:66:53:5d:0d:24:3c:5d:
5d:7f:c1:18:9b:19:c5:5e:f4:77:a0:4b:32:a8:06:73:4e:f6:
30:28:87:67:eb:3b:ed:63:78:ed:d3:60:f4:bf:7a:0a:51:65:
1c:68:98:38:0e:1b:d6:ef:0d:20:ba:56:cc:ad:23:6c:6a:49:
f4:95:d8:7c:de:52:f8:1c:33:93:e7:7b:2b:78:37:c0:05:ea:
35:a9:89:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:49:27 2025 by rpki-client