Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32322d3232203d3e20323637343039.roa
File: 34352e3136362e3130342e302f32322d3232203d3e20323637343039.roa (raw, json)
Hash identifier: YQOBzrSrMQAcShXF+61aEfh39isZWEo2ZyFd/E3Z0Ms=
Subject key identifier: 84:91:E6:E4:D0:39:47:41:82:49:44:A3:5C:40:A6:4F:6F:4C:9B:C4
Certificate issuer: /CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Certificate serial: 0FB26A54145C2FE96C1C29FF86068A507394C76F
Authority key identifier: 91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32322d3232203d3e20323637343039.roa
Signing time: Fri 21 Feb 2025 13:45:11 +0000
ROA not before: Fri 21 Feb 2025 13:40:11 +0000
ROA not after: Fri 20 Feb 2026 13:45:11 +0000
asID: 267409
IP address blocks: 45.166.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b2:6a:54:14:5c:2f:e9:6c:1c:29:ff:86:06:8a:50:73:94:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Validity
Not Before: Feb 21 13:40:11 2025 GMT
Not After : Feb 20 13:45:11 2026 GMT
Subject: CN=8491E6E4D0394741824944A35C40A64F6F4C9BC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:58:ec:b6:56:ba:de:22:6b:ae:4e:26:7b:f0:
67:d9:78:fb:f9:c7:f1:91:01:3e:38:b6:f5:a5:5f:
dc:8a:4a:47:fe:99:54:ef:ca:1a:0e:d4:97:97:0c:
90:2b:04:c9:fe:d5:fe:e4:80:58:25:cb:7f:69:81:
3a:3a:2c:2b:98:36:dc:de:48:42:ff:29:ef:ee:f0:
fc:6c:45:cf:cc:3a:54:09:2f:16:64:ac:7b:4b:4d:
b8:0d:5b:44:42:95:16:89:08:9e:13:db:27:c2:bc:
20:67:df:eb:6f:c1:7d:36:99:23:89:02:26:9e:7e:
b0:39:79:34:3c:08:3a:92:2d:c4:0c:ed:53:bb:38:
40:d1:cf:95:61:1c:5f:98:7a:dd:bb:08:c1:1b:ee:
45:a5:35:3a:f4:cf:7e:2c:3e:34:55:06:86:c7:da:
f0:92:12:c7:96:a9:ae:c5:e5:df:25:81:71:f9:89:
35:28:1e:9f:dc:8e:ff:73:99:74:08:7c:c1:e2:8f:
96:23:bd:a7:9d:71:20:f0:e8:7b:fe:13:0f:ab:16:
e3:5f:a2:48:cc:59:18:9c:a1:a7:2f:ea:c3:f6:04:
96:76:46:c6:9d:95:e3:ac:33:67:e3:92:bf:fc:4c:
22:d5:8b:f9:40:c1:b3:ca:a7:8a:dd:a1:2f:41:1b:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:91:E6:E4:D0:39:47:41:82:49:44:A3:5C:40:A6:4F:6F:4C:9B:C4
X509v3 Authority Key Identifier:
keyid:91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3136362e3130342e302f32322d3232203d3e20323637343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.104.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:a0:a6:56:e3:2c:80:89:98:2e:b5:a2:0a:2c:47:ad:aa:b3:
3a:12:0c:1a:80:38:dc:9e:1d:e7:c8:7c:7a:e0:a6:87:63:32:
cd:43:46:fd:9d:f6:a4:c1:4e:98:c6:98:88:83:3e:4f:7e:d3:
33:ea:ab:09:48:81:94:60:03:a6:97:27:63:ec:e0:08:2c:75:
5f:47:b0:41:e0:9b:74:92:13:6a:fe:06:4d:98:6d:73:5d:8b:
d9:70:8a:87:af:c2:e5:80:cb:35:bb:e2:6d:32:bb:cd:4d:06:
44:42:68:64:95:19:80:88:ef:f1:19:7f:d9:d9:20:59:76:1f:
f9:45:46:16:5b:fa:78:74:f7:93:cb:23:7d:21:5d:5d:cf:5b:
26:a2:fb:7c:f4:c0:cc:6f:c2:20:39:cd:c3:c2:4a:b1:5f:6b:
c7:2c:a1:0a:18:d6:9a:41:c5:23:ed:dd:bf:c9:c6:4d:e1:50:
fc:38:58:fe:a1:b8:5a:f2:b8:91:fb:80:65:ea:17:7f:66:81:
f7:4f:20:fc:ee:e7:51:cd:5b:9a:fd:3d:ab:ef:01:9b:ef:f8:
78:9f:42:a9:b6:fc:12:3e:03:85:cd:5c:ea:74:53:95:a5:64:
9f:15:4a:5c:ba:84:7b:f7:f6:64:97:b0:7a:5c:af:f3:78:7e:
1d:09:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:08:36 2025 by rpki-client