Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3332203d3e20323637343039.roa
File: 34352e3233352e37322e302f32322d3332203d3e20323637343039.roa (raw, json)
Hash identifier: zHx/2S0NJGhJ5IU0s4nU/3oZ4B2hxnNAh6mYwwlf3PI=
Subject key identifier: 34:C7:AE:F8:5C:2B:1E:D4:7F:23:6F:AE:2D:D7:0D:66:7D:ED:75:A0
Certificate issuer: /CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Certificate serial: 61F2688856FF17DBFE83965534DE1683909F11AF
Authority key identifier: 91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3332203d3e20323637343039.roa
Signing time: Fri 21 Feb 2025 13:44:27 +0000
ROA not before: Fri 21 Feb 2025 13:39:27 +0000
ROA not after: Fri 20 Feb 2026 13:44:27 +0000
asID: 267409
IP address blocks: 45.235.72.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:f2:68:88:56:ff:17:db:fe:83:96:55:34:de:16:83:90:9f:11:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914016D20FC6BF392388EBF2192D8F5AA78B8FD3
Validity
Not Before: Feb 21 13:39:27 2025 GMT
Not After : Feb 20 13:44:27 2026 GMT
Subject: CN=34C7AEF85C2B1ED47F236FAE2DD70D667DED75A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1b:03:14:c7:0c:78:0b:b5:79:7a:b0:46:64:
72:df:db:99:86:b1:8d:48:82:8a:9b:92:6c:e6:15:
90:1e:f4:85:85:da:17:47:38:ba:c3:b6:6c:c0:34:
33:e4:fa:7a:6f:dd:c0:07:ba:52:08:00:6b:8f:fb:
9b:6d:c2:92:89:07:9d:47:ce:4a:47:dc:be:a7:ea:
96:29:4d:cf:e8:d9:5e:79:1e:82:97:ff:4a:7d:33:
b7:52:97:62:d2:2c:60:3e:1a:db:cc:65:75:8d:72:
f9:07:7c:5c:7e:f0:63:81:42:3e:05:d6:57:b6:d5:
af:1d:6c:c8:f3:b6:bc:77:56:b7:7b:f4:e5:33:d5:
7e:9e:57:ba:92:00:c1:32:7b:cb:9a:07:b0:1d:83:
7d:ac:f0:42:7b:9b:67:60:70:d0:9c:37:a1:8e:0a:
af:24:f5:4b:ea:e8:16:09:86:ee:d5:4f:34:d0:e9:
01:bd:72:0d:fa:cc:7f:91:c4:38:f4:b0:84:ae:b8:
0a:e6:f9:51:c0:88:30:f7:53:b4:49:45:ed:e0:06:
df:a0:63:fc:25:2d:c5:d2:c0:59:76:f2:d9:b6:ba:
3c:fc:aa:73:31:e8:0b:cf:07:0f:e6:2b:35:62:7e:
55:dc:3f:18:70:a6:ea:1b:39:42:24:22:c7:da:62:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:C7:AE:F8:5C:2B:1E:D4:7F:23:6F:AE:2D:D7:0D:66:7D:ED:75:A0
X509v3 Authority Key Identifier:
keyid:91:40:16:D2:0F:C6:BF:39:23:88:EB:F2:19:2D:8F:5A:A7:8B:8F:D3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/914016D20FC6BF392388EBF2192D8F5AA78B8FD3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BJC4dfiSJUDhGHVskXokV1vxSKhCUxcW5SnfJhDhVSHP/0/34352e3233352e37322e302f32322d3332203d3e20323637343039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:9d:df:fd:97:c4:9d:4b:b6:f8:db:a0:1f:12:00:00:7d:82:
80:9b:ba:5f:bf:76:fa:ad:6a:d7:4f:1a:fa:73:fe:d8:f1:92:
a5:f9:d3:79:bd:ac:80:b9:ec:91:52:0c:d0:82:c6:89:36:61:
80:3b:34:27:5b:ab:e6:bd:1d:43:60:de:74:02:d2:a4:35:10:
2f:0c:69:71:24:b7:7c:9a:aa:4b:e3:3b:18:3a:24:71:7e:bf:
2f:6e:6f:cb:8d:ef:37:54:4e:b9:dd:d6:3a:d8:18:36:3a:e7:
9d:25:15:ce:2d:53:83:d0:9a:9f:88:80:f5:37:ad:0a:83:e5:
cc:93:72:04:99:1f:25:9e:c5:dc:e5:7a:06:1c:f1:d1:7d:b0:
71:8e:66:f4:15:aa:d5:ef:0a:a0:ad:c5:62:37:30:f5:b3:92:
50:38:45:77:12:50:9a:17:31:ab:b5:2b:cd:52:08:71:a0:c8:
96:4a:8d:40:5e:90:6d:fa:e5:c1:f9:4b:55:6f:e0:94:2b:9f:
4c:c9:3a:4f:ae:6a:57:cd:c6:89:a3:84:8a:1f:b3:a4:02:d9:
5b:ce:26:f8:72:77:88:d4:56:3b:9c:09:1c:bc:3c:ab:dd:3c:
95:21:00:c4:41:c5:5e:08:c3:b4:7e:33:3e:8e:e4:5d:9c:e2:
0b:43:9f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:30:59 2025 by rpki-client