Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32382e302f32322d3234203d3e20323637393832.roa
File: 34352e3136372e32382e302f32322d3234203d3e20323637393832.roa (raw, json)
Hash identifier: oTbNr03R4cwXI5HPOPwVcUJgrZcYg46lrTH2Ja7BuNM=
Subject key identifier: 4D:23:FC:9C:44:16:7A:EE:E6:56:D6:AE:13:83:C4:85:06:59:D5:A9
Certificate issuer: /CN=BD80A2507C562EC45831A181044BC8397234C88C
Certificate serial: 6596885BD3E8A0B32695779F84239D66F767EC63
Authority key identifier: BD:80:A2:50:7C:56:2E:C4:58:31:A1:81:04:4B:C8:39:72:34:C8:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD80A2507C562EC45831A181044BC8397234C88C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32382e302f32322d3234203d3e20323637393832.roa
Signing time: Tue 10 Sep 2024 17:25:03 +0000
ROA not before: Tue 10 Sep 2024 17:20:03 +0000
ROA not after: Tue 09 Sep 2025 17:25:03 +0000
asID: 267982
IP address blocks: 45.167.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:96:88:5b:d3:e8:a0:b3:26:95:77:9f:84:23:9d:66:f7:67:ec:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BD80A2507C562EC45831A181044BC8397234C88C
Validity
Not Before: Sep 10 17:20:03 2024 GMT
Not After : Sep 9 17:25:03 2025 GMT
Subject: CN=4D23FC9C44167AEEE656D6AE1383C4850659D5A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2c:bd:77:cc:cf:04:14:3f:f2:f9:3e:f6:94:
a3:e7:94:02:c6:2d:37:37:56:22:7a:3d:e2:9a:41:
2b:a0:6b:c1:da:06:b3:64:03:ea:a5:68:93:42:99:
a3:bc:6e:fa:f1:49:3b:f7:18:ec:36:48:5d:3b:c7:
22:d2:6d:19:ff:5a:4c:33:0a:68:e6:e8:df:5a:7b:
70:4e:71:aa:92:ed:27:46:d1:12:ca:6d:6b:90:f7:
27:ab:f5:f6:30:80:52:c2:02:d5:5a:1a:ee:80:fc:
87:f1:a5:05:9d:38:a1:84:6f:ff:af:4c:de:52:bc:
dd:71:4d:0d:f8:ed:56:76:6b:47:ed:27:4d:cd:de:
8a:01:79:75:0d:8b:03:11:42:b0:64:d6:df:b6:1a:
9a:bf:9a:cf:98:91:16:d0:da:1e:3d:51:21:ca:48:
46:94:b6:b7:0e:52:75:87:e5:3e:b3:be:0b:09:5f:
c7:4d:85:fc:27:85:0f:17:d6:31:b1:5c:7a:ca:b7:
7e:1e:1b:c5:d1:b6:f0:69:4e:94:a0:e5:71:73:ef:
4d:3c:b1:16:71:f5:a9:d0:ef:90:54:0f:61:da:57:
30:f7:77:6e:3d:d4:4e:e8:31:a5:8c:bf:a1:d1:2d:
17:8b:ee:25:4b:27:0a:ee:43:43:64:14:95:de:17:
c1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:23:FC:9C:44:16:7A:EE:E6:56:D6:AE:13:83:C4:85:06:59:D5:A9
X509v3 Authority Key Identifier:
keyid:BD:80:A2:50:7C:56:2E:C4:58:31:A1:81:04:4B:C8:39:72:34:C8:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/BD80A2507C562EC45831A181044BC8397234C88C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BD80A2507C562EC45831A181044BC8397234C88C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdpFoea8kQYZjJhRrvWk2857X8L8TcZrfZobHeYafZK3/0/34352e3136372e32382e302f32322d3234203d3e20323637393832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.28.0/22
Signature Algorithm: sha256WithRSAEncryption
92:78:ca:79:bf:ed:6e:53:d3:ff:0f:be:2f:de:f0:6f:90:6c:
3d:6b:a4:47:99:eb:23:eb:67:5d:c0:e9:5a:e1:c8:cd:f9:88:
52:fb:48:4b:e8:3d:80:7a:c8:d5:dc:2c:7a:5a:67:c3:d3:b8:
2e:9d:b2:f8:aa:06:5e:37:82:d6:52:de:81:ea:18:b0:5d:f5:
dc:04:5a:f4:42:29:81:45:8a:c2:52:6e:01:9c:2a:8b:60:ab:
75:ef:ba:a7:55:3c:62:38:7f:97:08:5a:2a:f5:45:35:da:2a:
48:ae:14:9b:e2:a0:8e:ad:e8:2e:a2:b4:dd:0e:5e:73:d3:0b:
f7:da:d9:cc:7f:85:78:65:1f:8a:ca:39:ce:05:79:31:cb:d9:
01:a7:10:77:6a:4e:d4:ff:e2:ae:db:73:6b:c6:88:bc:e2:b8:
5c:2f:ab:95:9f:c1:63:10:00:d5:b1:40:b2:15:83:24:bd:b6:
71:d7:e0:31:62:a3:e1:8d:a6:f3:ce:12:bd:28:d3:86:df:f4:
14:51:5f:98:87:f4:bd:91:60:d6:b8:61:2d:4d:5e:33:85:bc:
6e:9c:d1:b2:26:a4:42:e7:33:c1:0e:9e:30:bb:e5:99:2b:4f:
4b:f5:4a:04:48:5f:88:b3:08:b0:11:79:fd:9c:6a:0f:e2:4b:
9a:0f:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:12:25 2025 by rpki-client