Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e372e3231322e302f32322d3234203d3e203238323031.roa
File: 34352e372e3231322e302f32322d3234203d3e203238323031.roa (raw, json)
Hash identifier: YnHrfMgS7Jx5DOJq1w8SrCMliSpYAdwOwR+e+pZmBns=
Subject key identifier: A1:C1:11:96:02:18:0C:E7:A9:A8:F8:A5:26:C2:0C:EB:61:01:E4:70
Certificate issuer: /CN=27209C6DF15738819D919D908E37AC157E391505
Certificate serial: 2A1B88DC5D1DE952DEB53B82CD95592112AB79C0
Authority key identifier: 27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e372e3231322e302f32322d3234203d3e203238323031.roa
Signing time: Wed 10 Apr 2024 12:42:25 +0000
ROA not before: Wed 10 Apr 2024 12:37:25 +0000
ROA not after: Wed 09 Apr 2025 12:42:25 +0000
asID: 28201
IP address blocks: 45.7.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:1b:88:dc:5d:1d:e9:52:de:b5:3b:82:cd:95:59:21:12:ab:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27209C6DF15738819D919D908E37AC157E391505
Validity
Not Before: Apr 10 12:37:25 2024 GMT
Not After : Apr 9 12:42:25 2025 GMT
Subject: CN=A1C1119602180CE7A9A8F8A526C20CEB6101E470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:7b:34:85:cc:f9:c5:cb:91:76:f2:cf:db:
fc:0d:92:b0:0f:78:fb:ea:bb:0b:7a:27:4e:c7:5d:
c2:1b:e6:57:20:e8:d6:e8:f6:0b:da:aa:41:f6:dd:
e7:bc:74:6d:7b:74:8d:6e:1f:25:93:d6:99:53:29:
c4:6b:7a:be:26:93:d9:6d:8c:57:58:73:f8:73:70:
55:33:af:0b:c8:60:84:a5:5a:50:f1:52:a5:22:39:
32:bb:4a:50:96:b3:e1:29:75:f1:94:db:19:0f:23:
f4:8a:ec:ff:76:75:68:c6:e2:e5:f3:42:a7:d5:2b:
53:32:26:db:7c:ec:03:28:a2:41:16:c9:d4:96:1b:
73:ec:7c:a0:49:59:a5:3f:f3:19:d0:cc:06:fa:32:
97:43:5a:08:7d:b3:37:f4:73:7f:85:1d:47:9f:d3:
b9:48:de:a0:a1:e7:25:60:33:b2:16:18:33:6b:72:
4b:13:0d:e0:a0:24:c6:ab:1d:d2:10:af:29:5b:17:
6c:49:30:ae:01:90:32:cc:eb:23:9b:3b:eb:38:08:
6b:ea:79:12:1d:54:c4:b2:14:20:fb:2f:0b:bd:0d:
10:5f:0a:97:a9:75:f1:00:1e:0d:00:7d:d2:0d:ee:
11:30:be:f7:1b:8f:c2:f6:ea:b1:0f:3e:13:e9:5d:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C1:11:96:02:18:0C:E7:A9:A8:F8:A5:26:C2:0C:EB:61:01:E4:70
X509v3 Authority Key Identifier:
keyid:27:20:9C:6D:F1:57:38:81:9D:91:9D:90:8E:37:AC:15:7E:39:15:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/27209C6DF15738819D919D908E37AC157E391505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/27209C6DF15738819D919D908E37AC157E391505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9tgHFrYqotknrzGNHA22qPXArbT22UspTGcZriDN6fgU/1/34352e372e3231322e302f32322d3234203d3e203238323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.212.0/22
Signature Algorithm: sha256WithRSAEncryption
18:d3:f1:cb:63:3e:bd:30:73:12:ca:36:26:cb:6d:8d:b6:e6:
b7:b9:07:36:47:26:11:b5:6a:7c:8e:36:6c:b8:61:39:25:e9:
c7:bd:f7:bf:35:fa:c2:e0:aa:69:10:70:27:c3:d8:30:af:1f:
5d:7c:f6:6e:c1:aa:ba:db:a5:63:d6:15:1a:23:b6:e1:ac:89:
07:e2:7e:23:70:c4:9d:37:b2:d6:8a:f7:67:d7:92:85:b7:1b:
2d:58:d2:0f:34:47:14:0d:08:4b:ed:c6:1b:69:fa:80:91:67:
89:24:bd:cc:43:6a:02:7e:82:e0:84:1a:2d:15:a1:85:fa:53:
98:3b:cc:1e:9e:59:ca:e4:6a:91:6d:0b:ce:a0:a7:77:71:89:
a6:05:5b:64:7e:de:ed:05:21:4f:03:a9:f5:fd:09:7f:83:e8:
b7:98:f6:2f:f1:1a:f2:ec:9d:1b:01:15:f3:96:dd:b1:a1:18:
4d:57:76:b7:7f:f6:6a:ed:62:7b:83:de:e5:ad:2e:a6:57:ba:
e0:74:a7:62:7e:1f:c8:53:e6:20:4e:ae:09:b6:9a:e4:81:cd:
e0:32:a4:59:e2:4c:af:7c:62:16:99:02:e0:4a:f9:05:21:ba:
dd:cc:63:45:8c:53:2b:87:e3:cd:91:9d:4c:58:22:76:5c:9b:
51:91:e8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:09:05 2025 by rpki-client