Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
File: 34352e3138362e35332e302f32342d3234203d3e20323639343131.roa (raw, json)
Hash identifier: tQkoiw7fZjA5y7DudsIX/cLXwVbA/ZOfDR/q3L98Llg=
Subject key identifier: 7D:5E:59:58:57:57:56:98:57:6F:B2:A3:91:98:FE:0A:C6:AA:49:3C
Certificate issuer: /CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Certificate serial: 33D4003D697E0FDF3D3934FD5467E567752B3A61
Authority key identifier: FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
Signing time: Wed 15 Jan 2025 15:46:20 +0000
ROA not before: Wed 15 Jan 2025 15:41:20 +0000
ROA not after: Wed 14 Jan 2026 15:46:20 +0000
asID: 269411
IP address blocks: 45.186.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:d4:00:3d:69:7e:0f:df:3d:39:34:fd:54:67:e5:67:75:2b:3a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB612EE582EA59FB5A22CA0DC75974FACBA53303
Validity
Not Before: Jan 15 15:41:20 2025 GMT
Not After : Jan 14 15:46:20 2026 GMT
Subject: CN=7D5E595857575698576FB2A39198FE0AC6AA493C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:f6:07:a8:13:f9:a1:11:c4:b0:49:47:ca:
1c:11:58:7e:cf:79:fd:c3:c9:dc:9b:9f:ea:78:0f:
95:2c:ad:82:99:9c:0e:a8:36:aa:16:73:22:c2:65:
5b:8e:36:d8:1e:85:44:dc:0b:b0:51:c3:70:62:e8:
87:71:c7:ad:cf:27:99:16:53:60:68:54:9a:4c:2b:
98:7e:b0:ce:9b:66:dd:b4:c8:6e:22:dd:30:4e:96:
af:af:66:e9:f0:98:c8:4c:f0:bf:1c:4e:cc:f6:0e:
8f:b3:3b:74:5d:b4:97:bd:08:3d:e0:8c:76:e4:fc:
62:04:b1:20:35:33:3a:51:c2:c6:05:38:8c:98:cc:
37:40:7e:c3:cc:4d:e2:08:23:1b:d8:b7:66:d8:f1:
5b:d6:0a:cc:12:66:8a:df:b3:26:e6:b7:ed:c9:06:
75:57:e4:26:0f:b7:71:25:dc:a9:71:b7:2d:b3:5e:
c3:40:25:9d:b3:22:b7:5b:8e:93:c3:76:e0:5e:fb:
14:c8:c9:f5:31:db:d5:00:9b:70:26:66:1c:df:24:
60:83:f9:c8:15:4a:18:80:1f:6f:e8:6b:92:43:7d:
2e:e6:93:07:50:92:3f:bd:f7:eb:8a:cc:99:ee:6d:
19:fd:44:ca:8c:8a:45:3c:c5:03:2f:02:67:3c:1d:
4d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:5E:59:58:57:57:56:98:57:6F:B2:A3:91:98:FE:0A:C6:AA:49:3C
X509v3 Authority Key Identifier:
keyid:FB:61:2E:E5:82:EA:59:FB:5A:22:CA:0D:C7:59:74:FA:CB:A5:33:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/FB612EE582EA59FB5A22CA0DC75974FACBA53303.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB612EE582EA59FB5A22CA0DC75974FACBA53303.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35332e302f32342d3234203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.53.0/24
Signature Algorithm: sha256WithRSAEncryption
70:0a:9f:dd:f5:e9:7e:5f:a0:90:a5:52:a1:af:c3:40:b2:4f:
07:51:08:e5:08:82:9e:28:5e:1d:a2:ba:af:e3:89:83:7c:c5:
c4:5b:bb:5c:f2:dc:70:2e:32:35:c2:9b:5a:c1:82:4f:f6:a1:
72:dc:e5:0e:2c:df:12:ac:35:1f:b9:c9:1e:eb:c5:de:d1:ea:
c5:f9:af:83:86:f1:76:ce:c6:d9:d1:18:f7:a9:82:ba:78:4e:
21:4c:50:7d:78:97:9b:ad:c8:b8:60:00:5c:38:71:3b:ae:b2:
6b:23:00:7f:66:01:29:d2:a2:3f:63:e9:88:bf:df:12:ff:4b:
e4:7f:fe:7c:fe:96:48:86:06:c8:ad:e2:4e:db:31:3e:35:01:
73:a4:1b:4c:7f:81:83:6f:1d:7b:2e:51:d5:43:c5:a8:60:99:
e7:b2:78:34:4a:0a:68:28:79:26:96:f3:ff:f4:94:67:85:ce:
8f:e2:42:d4:3b:19:3c:67:ad:56:26:b4:0a:7f:e9:ca:4e:ab:
bc:3c:e5:1a:1c:29:8a:d9:0d:9a:27:c3:fc:70:12:6c:1c:6c:
c8:40:d9:de:47:2b:bb:b3:63:d3:ab:38:72:83:25:bd:0d:89:
de:36:01:53:72:9c:70:89:2e:47:5d:b5:05:a0:b4:6c:d6:fe:
3b:eb:d8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:45:13 2025 by rpki-client