Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32342d3234203d3e20323636303636.roa
File: 34352e342e3132342e302f32342d3234203d3e20323636303636.roa (raw, json)
Hash identifier: bYkuJvow6ziiNI4LY2P1nPr+/tFNt7UwBsfLDBOz+vU=
Subject key identifier: 02:F2:91:40:56:69:DB:F8:FC:44:C7:5E:10:AB:5E:5F:8C:B0:93:99
Certificate issuer: /CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Certificate serial: 7D6C0665EFDF7050483827ED61135D18F385AE23
Authority key identifier: 7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32342d3234203d3e20323636303636.roa
Signing time: Mon 03 Mar 2025 22:12:03 +0000
ROA not before: Mon 03 Mar 2025 22:07:03 +0000
ROA not after: Mon 02 Mar 2026 22:12:03 +0000
asID: 266066
IP address blocks: 45.4.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6c:06:65:ef:df:70:50:48:38:27:ed:61:13:5d:18:f3:85:ae:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Validity
Not Before: Mar 3 22:07:03 2025 GMT
Not After : Mar 2 22:12:03 2026 GMT
Subject: CN=02F291405669DBF8FC44C75E10AB5E5F8CB09399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:af:fe:58:31:a2:c6:ce:5f:d8:7b:75:69:
86:8e:2a:ce:12:5d:a2:dc:b8:cf:4a:33:98:16:6d:
4c:80:2a:80:14:7a:08:63:75:fd:71:06:93:3f:f7:
92:7a:75:7a:4a:07:8b:d6:34:c7:95:e0:a9:b4:a7:
e3:a6:35:ef:aa:95:cc:0c:02:49:71:e7:2c:a2:14:
8a:63:9d:4a:d9:ba:a0:52:9e:cc:be:d4:06:a0:1e:
be:39:2d:80:1d:d2:33:a4:da:a7:9a:45:dd:4c:85:
8e:d9:ab:82:64:4c:29:49:ff:c8:ba:28:4c:06:96:
77:f2:c7:9b:e8:9b:90:98:47:97:1f:93:6e:cf:b8:
f8:89:b6:18:31:8a:3d:e0:e9:a4:74:2f:9b:cd:a3:
44:d2:23:06:e5:a0:50:a4:d3:c1:b4:40:5a:c4:8a:
8c:0d:53:54:dc:86:a5:af:7f:e3:37:17:e9:c7:75:
5d:f0:0d:14:5b:59:f1:ab:83:3c:84:89:05:13:fa:
c5:1c:5d:a5:4f:d1:b6:29:aa:91:33:8a:d6:36:49:
c6:ef:43:39:07:bd:be:a2:c9:d4:ea:fe:84:96:78:
71:e9:9d:56:32:a2:18:91:c2:29:96:89:2d:68:1a:
8c:ec:08:d0:5e:26:69:12:a3:62:10:84:86:6d:1c:
1b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:F2:91:40:56:69:DB:F8:FC:44:C7:5E:10:AB:5E:5F:8C:B0:93:99
X509v3 Authority Key Identifier:
keyid:7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132342e302f32342d3234203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.124.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e2:fd:cc:41:7a:21:e8:01:dc:07:df:64:8c:07:e3:65:3c:
45:d0:09:51:20:fd:37:e8:15:09:7b:36:8c:07:1f:47:27:22:
08:d0:19:13:4d:e0:4e:20:c8:0a:6e:ea:ac:12:bd:e7:29:58:
f9:62:e1:d8:a1:45:97:74:df:1f:62:f1:28:70:66:fd:d8:f7:
03:43:a4:88:5c:3b:94:af:f1:79:06:0d:24:db:21:54:74:5c:
ad:aa:19:ff:bb:29:c9:3d:f7:a9:28:00:7a:72:d1:87:1c:b6:
c6:5a:ba:e8:58:f3:df:4e:4e:d9:8b:c9:2e:0b:a5:09:93:d1:
3d:75:23:a8:a5:8f:3f:ae:40:eb:ee:dc:59:4a:a5:df:52:4f:
94:e1:79:6f:37:22:65:4a:06:32:c8:02:51:f9:e9:59:81:c3:
7c:e7:b5:a1:fb:29:73:70:b4:82:15:29:24:f1:2a:8f:7e:9b:
20:10:61:00:7e:0a:9b:f7:ac:5e:0a:83:a6:29:e2:f8:0f:e7:
54:14:b4:9f:de:98:07:aa:59:1d:7a:a8:2d:40:cf:9b:b5:68:
21:19:ae:49:84:e8:bb:2d:12:42:98:52:fa:48:a0:a9:d1:80:
c4:73:58:7e:31:88:f5:67:cd:7e:16:92:4a:10:ac:1e:e5:55:
fb:d3:a0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:37 2025 by rpki-client