Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa
File: 34352e37312e3232382e302f32322d3232203d3e20323637363234.roa (raw, json)
Hash identifier: kNiSn0GsZQpZgHPJQhsHb3ysLF8oDeYzCsZW1namPKI=
Subject key identifier: 7D:D8:E4:DB:B4:3D:AA:51:35:93:08:7B:60:20:94:A8:46:97:B0:03
Certificate issuer: /CN=2FDD244EC556A596E63C023656A4E5EF4723BBAF
Certificate serial: 391DFFA06F0610A0C487CF70195AC291E6764125
Authority key identifier: 2F:DD:24:4E:C5:56:A5:96:E6:3C:02:36:56:A4:E5:EF:47:23:BB:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa
Signing time: Fri 01 Nov 2024 14:13:53 +0000
ROA not before: Fri 01 Nov 2024 14:08:53 +0000
ROA not after: Fri 31 Oct 2025 14:13:53 +0000
asID: 267624
IP address blocks: 45.71.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1d:ff:a0:6f:06:10:a0:c4:87:cf:70:19:5a:c2:91:e6:76:41:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FDD244EC556A596E63C023656A4E5EF4723BBAF
Validity
Not Before: Nov 1 14:08:53 2024 GMT
Not After : Oct 31 14:13:53 2025 GMT
Subject: CN=7DD8E4DBB43DAA513593087B602094A84697B003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3f:9e:a4:f2:7d:04:8b:42:e2:b4:42:b4:c7:
d5:88:5f:d8:de:b2:6e:12:34:e0:cb:38:42:6e:68:
50:dd:44:5d:37:13:97:05:2d:7f:9f:19:5c:49:9f:
85:0c:2b:bc:70:a2:f1:9b:cd:02:85:4d:1b:88:ea:
9b:00:49:07:73:2d:ac:6d:2d:0b:d0:36:a8:1e:87:
cf:38:94:d5:8d:a2:f2:c1:d4:c4:52:52:db:06:d6:
aa:1e:2c:ee:4b:eb:c9:6a:19:1f:e4:51:9c:fb:e3:
02:49:7b:7d:d2:db:c2:a9:f7:af:69:b9:c2:0c:cf:
01:9f:53:76:34:4a:f4:87:f1:04:6b:86:ac:05:d1:
07:e9:f3:6f:06:1b:0d:5b:c2:34:07:59:be:0d:34:
1f:96:07:62:bf:d5:3f:9c:f5:fa:24:a1:5e:06:3a:
26:14:e4:b7:3b:38:e7:3d:75:c2:10:b4:4f:65:23:
ad:a7:83:b2:39:5a:6a:f1:e3:13:8c:75:a4:39:f7:
b9:77:46:c5:14:1f:a9:9a:34:cb:60:09:23:33:84:
77:15:f7:b1:30:67:a7:ee:e5:bb:72:bf:01:4b:70:
dd:3f:08:2f:e5:56:cf:f7:43:f7:a7:1c:44:25:dc:
66:69:e3:76:ac:0a:4e:4a:b5:54:08:03:34:04:f6:
d0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D8:E4:DB:B4:3D:AA:51:35:93:08:7B:60:20:94:A8:46:97:B0:03
X509v3 Authority Key Identifier:
keyid:2F:DD:24:4E:C5:56:A5:96:E6:3C:02:36:56:A4:E5:EF:47:23:BB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/2FDD244EC556A596E63C023656A4E5EF4723BBAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32322d3232203d3e20323637363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.228.0/22
Signature Algorithm: sha256WithRSAEncryption
78:e3:55:ce:8e:aa:79:52:c4:72:a2:c4:54:76:b8:51:c0:cb:
04:ac:b8:25:ce:e0:76:ea:6c:de:ac:6b:07:86:67:9a:84:59:
c5:7e:a9:83:16:99:bc:50:6f:2b:84:dd:77:3c:20:5c:aa:f4:
5e:3b:12:32:41:41:86:49:7f:78:2b:53:5b:ac:5a:72:75:38:
25:b5:56:6c:95:9b:00:b0:d7:64:b8:a4:6c:52:a5:e2:02:d7:
f8:1c:40:ec:f4:39:ef:90:d1:48:f9:29:d5:ca:e4:0a:5d:7a:
e1:0a:9e:11:28:ec:db:ef:01:4c:e3:7a:dc:e1:4b:08:17:c9:
94:dd:1d:18:10:b5:6a:c7:aa:1b:f4:1b:86:71:16:25:80:24:
74:2b:98:d1:27:e5:74:73:cb:68:9c:71:42:ea:e8:59:58:44:
ec:3a:ad:1f:d2:8b:a7:8e:87:ed:19:e5:85:50:30:76:ba:9c:
e0:87:9e:d1:df:3d:54:f4:89:36:66:18:9b:61:72:ad:66:2c:
15:22:0e:78:3d:af:0f:f7:c5:ed:8e:07:14:aa:97:1f:cb:e2:
10:59:b5:0f:2f:c1:0b:b8:55:91:b7:f9:2f:b2:eb:0b:43:6b:
16:89:78:ce:c6:57:db:5e:cd:b3:4d:8d:93:12:94:6a:95:4d:
cb:54:fc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:09 2025 by rpki-client