Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
File: 34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa (raw, json)
Hash identifier: mjqYMvHI1Kq/6F7CPYbL5wZl9bra3AfWvhFdE3OBJ74=
Subject key identifier: 13:69:E9:8C:F7:43:D3:A4:23:89:B7:5F:64:48:2B:7D:5D:06:61:C8
Certificate issuer: /CN=B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957
Certificate serial: 2FC2F4ACD6F06FF13A07B6200BE8116EFE10DEDE
Authority key identifier: B0:BE:4B:AA:F3:EE:81:E7:D0:28:A3:5D:2B:12:0F:B1:2C:F7:E9:57
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
Signing time: Thu 04 Apr 2024 08:10:33 +0000
ROA not before: Thu 04 Apr 2024 08:05:33 +0000
ROA not after: Thu 03 Apr 2025 08:10:33 +0000
asID: 267022
IP address blocks: 45.226.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:c2:f4:ac:d6:f0:6f:f1:3a:07:b6:20:0b:e8:11:6e:fe:10:de:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957
Validity
Not Before: Apr 4 08:05:33 2024 GMT
Not After : Apr 3 08:10:33 2025 GMT
Subject: CN=1369E98CF743D3A42389B75F64482B7D5D0661C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:cb:64:26:55:da:73:60:97:52:e2:fd:e5:
89:ce:d0:d8:95:b3:df:c6:2a:5c:7f:55:1e:82:e7:
c3:53:ad:ea:6d:c4:21:03:76:d3:0a:a0:d8:15:3d:
44:1a:ce:c9:5d:52:b1:d4:98:8c:45:7d:b0:b0:cb:
29:2f:be:07:ea:5f:73:41:ed:9e:fc:1a:32:bf:73:
65:39:1c:96:ab:3a:da:fa:a8:64:15:92:7f:93:89:
97:83:af:5c:31:d2:cf:84:bd:e7:fb:2a:0c:79:0e:
46:6d:7c:06:04:8d:27:9c:80:ce:ce:73:85:da:73:
f8:dd:a9:96:a1:48:07:97:74:dd:c1:d4:88:39:e9:
e1:4d:a7:1f:6f:37:02:ba:dc:88:f8:24:8c:36:4a:
dd:e1:cc:0b:90:f6:0d:17:a3:dd:01:73:0c:77:e3:
aa:4a:23:ed:73:e2:b5:4b:6a:ba:fb:16:c9:54:33:
70:77:a2:5e:cb:9d:c9:a5:20:87:ca:07:4e:dd:54:
12:f5:68:13:fc:f6:21:03:71:33:4c:35:58:a2:0d:
25:15:20:f2:a5:60:8d:04:48:7e:92:7a:1f:85:4c:
8b:a7:1d:34:3f:8e:28:06:cb:bb:26:cc:06:25:c2:
2e:c9:f4:79:e9:bb:e7:55:e7:19:48:01:8a:93:b3:
8d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:69:E9:8C:F7:43:D3:A4:23:89:B7:5F:64:48:2B:7D:5D:06:61:C8
X509v3 Authority Key Identifier:
keyid:B0:BE:4B:AA:F3:EE:81:E7:D0:28:A3:5D:2B:12:0F:B1:2C:F7:E9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B0BE4BAAF3EE81E7D028A35D2B120FB12CF7E957.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C94zaD6NCP96k77gdZmG27tCnsnHSLzobxne42wPJ8bW/1/34352e3232362e3234302e302f32322d3234203d3e20323637303232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.226.240.0/22
Signature Algorithm: sha256WithRSAEncryption
34:0f:0c:97:72:17:b1:8a:f7:14:70:d3:b6:72:5d:f1:8e:76:
f3:66:54:1b:1e:e6:9d:1e:dd:4c:94:6f:13:51:fb:cd:86:e8:
b2:27:85:e6:e0:92:0c:f5:55:2f:57:9a:21:86:33:3a:24:96:
c9:f8:5a:31:c1:24:4e:72:93:96:92:7f:56:3e:bc:07:43:79:
56:05:06:b2:22:43:0c:4c:10:da:09:cc:9c:01:df:f1:47:b2:
dc:a8:86:cb:78:0f:e5:e2:46:aa:d8:6c:3b:39:e4:6d:37:79:
4c:f7:66:fa:2f:f9:61:24:d7:4e:47:55:b1:15:9e:ab:43:10:
64:d3:04:b3:0e:2b:a6:10:4e:80:2f:5e:81:e7:0b:aa:e1:d2:
02:9e:5e:ea:04:78:d8:3a:2a:88:de:30:aa:02:7e:43:d8:7c:
a4:a8:d8:e7:32:87:aa:65:5d:a7:45:72:ce:87:48:8a:2b:a7:
d9:6c:24:eb:c8:f7:da:63:3c:2d:c8:29:50:ad:15:33:2d:ab:
fb:03:07:4f:15:64:ff:17:fe:d6:df:73:82:b3:76:bd:fe:ed:
0b:8d:d8:66:f2:c9:31:2c:b7:6e:76:4a:3f:e5:45:ab:3e:ab:
50:f8:fb:16:89:99:3f:33:fb:c6:7f:54:c7:e4:8e:c2:4e:a0:
e0:48:82:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:41:45 2025 by rpki-client