Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132372e302f32342d3234203d3e20323636303636.roa
File: 34352e342e3132372e302f32342d3234203d3e20323636303636.roa (raw, json)
Hash identifier: TLT6HzIK+c43ACcxXnQZqNcRTgsfvrX9DlFX+C3T+6Y=
Subject key identifier: C5:D9:A5:B3:58:7C:E8:40:18:9D:59:D4:0F:C9:F8:FF:01:D7:00:58
Certificate issuer: /CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Certificate serial: 42DC485D67BC6512BE21CA302D5B7531AD75A666
Authority key identifier: 7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132372e302f32342d3234203d3e20323636303636.roa
Signing time: Mon 03 Mar 2025 22:12:50 +0000
ROA not before: Mon 03 Mar 2025 22:07:50 +0000
ROA not after: Mon 02 Mar 2026 22:12:50 +0000
asID: 266066
IP address blocks: 45.4.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:dc:48:5d:67:bc:65:12:be:21:ca:30:2d:5b:75:31:ad:75:a6:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0
Validity
Not Before: Mar 3 22:07:50 2025 GMT
Not After : Mar 2 22:12:50 2026 GMT
Subject: CN=C5D9A5B3587CE840189D59D40FC9F8FF01D70058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:71:fe:58:e4:a2:0b:ba:5c:6f:30:17:5a:
8c:9a:cc:e0:3e:76:14:5a:97:27:23:18:e8:ca:03:
d2:7e:1d:d4:dc:69:f0:d2:a9:06:e1:7f:9c:bc:ad:
03:fa:96:8a:02:ac:6f:c8:8c:40:f2:f7:e7:6d:67:
ee:23:ea:d8:de:0d:ab:99:f5:1a:6a:fe:58:55:5b:
4c:07:3e:79:51:a7:1d:4d:71:b2:95:75:ac:2a:c6:
37:d1:32:5f:54:94:2a:db:07:f1:38:6b:eb:9b:01:
8c:1d:e6:2a:87:5c:56:f3:2a:c2:42:25:85:78:b0:
49:1b:3a:df:5c:57:4f:d3:7f:eb:c8:b0:f4:80:fb:
77:aa:ae:df:89:cd:6c:7c:ab:7a:3a:ee:a2:a8:4c:
94:71:59:aa:37:9f:9f:dd:6d:48:e6:38:87:4c:d1:
e2:90:8a:ec:0e:95:0f:f5:ee:ca:33:a0:6c:a4:03:
58:ac:e3:c8:4a:ba:ee:ec:86:0d:82:d5:cb:12:17:
f5:a9:d9:d6:05:29:05:a2:72:0f:4e:89:29:92:89:
57:db:ec:b7:ed:cc:9c:85:ba:cd:c5:ad:ca:f9:13:
32:0f:64:44:fd:ff:90:1f:06:59:82:47:a6:fb:4e:
31:4e:be:aa:b6:2f:d3:70:a1:c8:ac:be:e5:52:ed:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D9:A5:B3:58:7C:E8:40:18:9D:59:D4:0F:C9:F8:FF:01:D7:00:58
X509v3 Authority Key Identifier:
keyid:7F:2F:B0:D3:B7:92:75:71:94:8A:2C:39:EF:13:D9:F9:C3:C3:23:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F2FB0D3B7927571948A2C39EF13D9F9C3C323F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BMCWXPuxCwAcELbtz8XwMzNHiih3cGwePSmHXgAzB96w/0/34352e342e3132372e302f32342d3234203d3e20323636303636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.127.0/24
Signature Algorithm: sha256WithRSAEncryption
07:a8:02:4a:49:a2:ac:af:fe:e5:21:da:28:2c:d3:bf:ef:8c:
3b:b3:be:5c:c3:00:9e:ee:be:8f:ff:b0:34:39:0e:c0:c2:32:
2e:65:7a:42:f9:91:28:16:d2:8b:73:07:be:7e:6b:79:ac:de:
d7:9c:25:23:09:d5:14:c3:ef:da:fc:d1:33:e4:da:0c:eb:ab:
41:dc:86:38:3c:7b:5e:5b:a2:96:9b:7c:06:83:00:1a:6f:59:
0a:fe:33:4b:44:10:4d:fe:43:b2:bc:ef:57:f7:86:bc:c9:96:
d3:4f:d6:9d:1f:05:1e:b6:94:80:6d:ae:72:fd:85:d1:ce:6a:
2f:a8:7e:0a:49:62:35:c6:31:46:e6:76:85:f7:d3:c1:da:f7:
dc:02:d7:51:f1:57:d8:5f:56:db:c3:23:9e:42:88:fc:00:ca:
6a:5f:62:00:80:40:96:e1:df:1b:0e:a9:db:96:ea:67:5a:da:
d1:04:a4:3f:b2:18:2a:f5:3a:73:2d:a9:a4:97:ef:ca:f8:2c:
4b:f1:38:5a:56:c6:f7:46:5d:de:d8:95:21:2f:20:2f:92:c9:
80:a4:1f:42:98:15:67:16:3a:79:36:e8:b7:84:a2:ec:48:5d:
3e:5e:88:a5:e8:aa:9f:62:e7:8f:1d:26:0b:e6:15:e2:a5:48:
24:76:d5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:11:37 2025 by rpki-client