Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa
File: 34352e37312e3232382e302f32342d3234203d3e20323637363234.roa (raw, json)
Hash identifier: nffQaKpwQKcAHDQH5ZcqnSmrbYDLRu6tb64Yz4ui67U=
Subject key identifier: 44:D7:73:63:17:2B:71:A0:E2:2F:DB:DC:01:D6:3B:66:42:99:92:1E
Certificate issuer: /CN=2FDD244EC556A596E63C023656A4E5EF4723BBAF
Certificate serial: 64248E4407070EADE6623BEB1291C09D8404F150
Authority key identifier: 2F:DD:24:4E:C5:56:A5:96:E6:3C:02:36:56:A4:E5:EF:47:23:BB:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa
Signing time: Fri 01 Nov 2024 14:14:01 +0000
ROA not before: Fri 01 Nov 2024 14:09:01 +0000
ROA not after: Fri 31 Oct 2025 14:14:01 +0000
asID: 267624
IP address blocks: 45.71.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:24:8e:44:07:07:0e:ad:e6:62:3b:eb:12:91:c0:9d:84:04:f1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FDD244EC556A596E63C023656A4E5EF4723BBAF
Validity
Not Before: Nov 1 14:09:01 2024 GMT
Not After : Oct 31 14:14:01 2025 GMT
Subject: CN=44D77363172B71A0E22FDBDC01D63B664299921E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:73:c1:35:18:52:63:e5:53:95:fb:61:0f:68:
56:a1:b8:6f:f9:5f:12:84:98:c1:2e:60:7d:39:41:
74:ee:28:86:75:3c:9f:79:e8:1b:92:d3:63:65:9e:
dd:4c:48:77:98:87:42:f5:2c:bb:4b:87:5f:19:42:
db:cc:16:cd:df:c6:33:36:28:a9:ff:4d:91:2d:be:
07:34:6f:47:35:f7:9c:9e:b2:b2:a4:6f:ef:2b:23:
66:ed:0f:ae:22:1d:7b:7e:82:d9:e5:55:4b:a1:dd:
e1:df:c6:c1:e7:d2:fd:b4:eb:f2:2b:39:3f:aa:3f:
40:86:e9:3a:d2:8a:1c:cf:55:a8:43:aa:8e:22:36:
33:db:8b:66:5d:68:ed:75:1a:36:74:e2:3b:d8:a7:
51:8e:a2:c6:22:9b:0f:10:58:11:32:7f:0d:4b:fc:
05:e5:55:ca:61:db:3f:8a:22:5a:a9:9a:d5:ab:5d:
8c:2c:fd:0f:47:ac:42:cc:9e:e2:a1:7f:ea:14:50:
4a:b6:31:ad:ed:82:2f:ca:2d:a4:6f:11:5e:91:91:
eb:b5:05:40:b4:b9:ab:fa:8b:37:48:03:32:63:d8:
dc:2c:54:9a:8d:d8:8a:1c:96:2c:ed:92:19:67:6f:
08:59:99:d7:b0:49:d0:e6:f5:f6:59:d4:37:92:0f:
19:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D7:73:63:17:2B:71:A0:E2:2F:DB:DC:01:D6:3B:66:42:99:92:1E
X509v3 Authority Key Identifier:
keyid:2F:DD:24:4E:C5:56:A5:96:E6:3C:02:36:56:A4:E5:EF:47:23:BB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/2FDD244EC556A596E63C023656A4E5EF4723BBAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FDD244EC556A596E63C023656A4E5EF4723BBAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CcCeiEKRbsfwVvq2Pf6w21afDWuX1yreHHu6dRV9545d/0/34352e37312e3232382e302f32342d3234203d3e20323637363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.228.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2a:1a:ab:7c:69:f7:fa:dd:96:af:12:52:02:cd:e7:27:42:
99:29:f7:e4:e2:7b:e6:64:49:a6:17:88:0f:07:73:21:56:30:
63:64:f7:aa:b2:68:4b:1b:73:a1:3d:23:2f:49:8c:09:bf:7e:
78:d1:b8:d5:df:25:8e:bd:45:69:5c:03:f5:f5:04:95:67:fc:
69:d3:fe:e9:ce:4f:ab:ab:a6:a3:40:49:b8:a0:47:4c:93:58:
81:70:21:9a:d4:6e:8d:11:75:3f:4f:32:6e:2a:0a:5d:38:01:
3f:02:6b:7c:ce:b3:4d:0e:38:e3:cc:d1:04:97:e6:33:94:b8:
dc:f0:3c:c6:d4:9b:cf:40:5b:cf:d3:35:c7:3d:bf:8c:6c:d4:
b4:28:ac:6b:86:ff:7c:16:00:3b:0f:a1:2d:3d:4f:d6:3e:6c:
5e:a3:c9:77:68:37:ba:f7:12:d9:3c:12:22:b8:a9:e2:78:ff:
62:a3:40:24:34:40:6d:cb:b2:bc:24:7b:fd:22:0f:22:71:73:
1a:92:ea:51:4c:f5:f4:22:7e:37:88:8c:1d:d9:93:cc:06:0d:
19:9b:c0:b4:09:4b:65:f4:35:c5:b0:3f:ad:29:ac:4b:83:ce:
50:f1:79:5f:92:61:46:21:8b:cb:33:81:ef:8d:1b:32:1a:19:
6a:d4:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:09:12 2025 by rpki-client