Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132302e302f32322d3232203d3e20323637303132.roa
File: 34352e3232372e3132302e302f32322d3232203d3e20323637303132.roa (raw, json)
Hash identifier: jXdjOwTv/eea/9nA45/omUJlzGgZ8xkZaNfqas4tR1k=
Subject key identifier: 25:A3:0A:E9:D8:E0:85:5F:7E:57:88:F5:23:A7:81:A6:9A:6C:79:B9
Certificate issuer: /CN=524903D80649F057B87931C5F6D861489C4593B7
Certificate serial: 2B9988412AA368BFE85F19CF3E0161F940A1C08B
Authority key identifier: 52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132302e302f32322d3232203d3e20323637303132.roa
Signing time: Mon 24 Jan 2022 16:07:26 +0000
ROA not before: Mon 24 Jan 2022 16:02:26 +0000
ROA not after: Mon 23 Jan 2023 16:07:26 +0000
asID: 267012
IP address blocks: 45.227.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:99:88:41:2a:a3:68:bf:e8:5f:19:cf:3e:01:61:f9:40:a1:c0:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=524903D80649F057B87931C5F6D861489C4593B7
Validity
Not Before: Jan 24 16:02:26 2022 GMT
Not After : Jan 23 16:07:26 2023 GMT
Subject: CN=25A30AE9D8E0855F7E5788F523A781A69A6C79B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:89:51:24:5f:d4:98:de:c6:07:68:d5:e6:
08:e0:65:e6:52:54:63:ab:d8:8c:86:88:0c:2b:73:
31:8b:2a:b3:44:0b:0f:cb:61:35:d2:14:6f:81:9f:
4e:a9:f9:10:39:d7:f5:bd:aa:21:17:fd:b2:83:5d:
76:f1:bf:c4:fc:31:d2:96:ef:e0:fb:93:22:3f:b3:
3c:de:4d:4a:4c:47:15:34:b8:78:f3:e9:a4:17:64:
2a:7c:6a:21:ec:ca:09:29:27:0d:03:7f:07:7a:9b:
01:4b:a9:65:b7:e0:c3:db:e7:e6:05:28:42:d4:80:
49:f3:88:3a:3c:0f:16:31:ab:57:b9:af:7b:da:a3:
5d:69:64:d6:60:67:0f:ed:61:8a:ae:03:8e:c4:b3:
fd:be:cc:31:b2:73:90:3a:1f:f2:32:50:b1:b3:72:
d8:ac:fb:da:15:1d:2b:0e:e7:d6:84:cc:f0:d3:bc:
c2:28:8e:da:bf:30:bf:12:64:7c:b5:c7:cf:19:34:
95:7f:b7:3e:93:f5:36:c4:15:52:ea:b2:90:99:38:
f6:0d:66:7c:8b:21:aa:3a:3b:26:7b:bb:7e:d4:0d:
ad:bc:d5:fb:eb:ca:11:be:17:0b:d3:c9:1a:d6:3e:
c1:af:e2:cd:68:73:ff:a3:2e:95:32:35:85:ac:ba:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A3:0A:E9:D8:E0:85:5F:7E:57:88:F5:23:A7:81:A6:9A:6C:79:B9
X509v3 Authority Key Identifier:
keyid:52:49:03:D8:06:49:F0:57:B8:79:31:C5:F6:D8:61:48:9C:45:93:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/524903D80649F057B87931C5F6D861489C4593B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/524903D80649F057B87931C5F6D861489C4593B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9zionTDMJRdNgBPoBQAszxpAYBRPKSgNuBhgPpUatiw/0/34352e3232372e3132302e302f32322d3232203d3e20323637303132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.227.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:cd:11:1c:8c:5e:12:e0:d8:a7:0d:7e:3f:88:5b:81:68:4d:
37:4c:b9:f9:a7:05:b0:c1:25:0b:d3:91:fc:80:4f:53:02:84:
ce:c2:d2:e2:d9:68:53:13:29:06:c1:d5:1d:ad:2c:ac:a0:a9:
2c:c6:87:7c:8d:6c:7d:60:7f:0a:a8:63:ad:40:ee:ac:7a:fe:
60:e0:b7:c7:4a:d2:b2:9e:f1:29:78:f6:3b:f2:47:3d:f8:ac:
b5:26:ca:77:96:8f:5b:1d:78:90:f5:ea:5d:b2:4c:11:a4:04:
0b:a5:a1:f3:cd:c9:6a:6c:00:82:79:49:85:7c:9a:21:bb:00:
8d:ef:c5:1a:b6:a3:ae:aa:6a:04:f2:fd:62:cf:91:e7:3c:92:
53:5c:83:21:26:ff:ff:c0:ca:be:31:2a:5e:cc:d4:d1:29:43:
e7:cf:0c:dc:2c:d2:d1:f8:0a:7f:6b:9e:85:36:07:cb:e6:b8:
a2:3a:77:c8:82:a1:78:fa:11:88:cc:5b:fd:f8:1b:77:91:82:
a2:37:fb:0c:17:2c:e8:85:d4:bf:31:95:c1:40:5c:7b:87:e8:
49:e7:96:41:d0:a3:84:80:1c:02:80:9c:b5:b0:42:a5:e2:72:
12:3a:f3:84:10:34:68:02:13:8f:52:2f:e0:57:66:98:56:e2:
43:24:9f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:22:52 2025 by rpki-client