Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3332203d3e20323636323332.roa
File: 34352e362e3138302e302f32322d3332203d3e20323636323332.roa (raw, json)
Hash identifier: FgtZhk3lLL06wSEPCCndG11UK/VFSJQpbDsYLZGqrU4=
Subject key identifier: D9:66:DB:21:74:B2:DE:F2:AF:EC:58:C5:D0:86:CE:A5:D2:CA:52:E6
Certificate issuer: /CN=28274B18A146B4236FC8543D9D65B0C9F6C657E5
Certificate serial: 42CA7A9F8DD453DBF6997B38C08F5A0D56370FC1
Authority key identifier: 28:27:4B:18:A1:46:B4:23:6F:C8:54:3D:9D:65:B0:C9:F6:C6:57:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28274B18A146B4236FC8543D9D65B0C9F6C657E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3332203d3e20323636323332.roa
Signing time: Tue 21 Jan 2025 01:48:05 +0000
ROA not before: Tue 21 Jan 2025 01:43:05 +0000
ROA not after: Tue 20 Jan 2026 01:48:05 +0000
asID: 266232
IP address blocks: 45.6.180.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:ca:7a:9f:8d:d4:53:db:f6:99:7b:38:c0:8f:5a:0d:56:37:0f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28274B18A146B4236FC8543D9D65B0C9F6C657E5
Validity
Not Before: Jan 21 01:43:05 2025 GMT
Not After : Jan 20 01:48:05 2026 GMT
Subject: CN=D966DB2174B2DEF2AFEC58C5D086CEA5D2CA52E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f9:4d:c3:07:82:92:ab:66:76:20:82:e9:a6:
42:c4:b3:b5:c6:d3:c5:31:ee:70:98:f2:ad:81:f0:
70:74:16:a6:bf:22:e4:64:49:c4:98:8f:75:20:6c:
f1:9f:29:79:85:b0:46:c1:e7:a6:86:84:24:be:cf:
d8:5b:d6:e2:be:85:97:cb:8e:6a:7c:8c:14:c6:af:
92:dc:42:4c:7f:3f:75:e5:41:3f:1d:ec:48:bd:04:
92:f3:83:c6:5a:64:9b:d3:32:72:d8:ee:e3:7b:88:
68:1f:c2:6d:7b:5e:1f:a3:ce:70:41:19:0a:11:71:
4f:e3:73:e0:7d:7f:c7:fe:c3:c2:fc:78:89:18:93:
93:ab:e0:aa:6b:b5:25:cb:55:3f:2d:83:38:7c:ea:
3f:9c:24:3c:72:1f:d6:20:a5:de:b9:1a:5b:f8:42:
9b:df:f8:5f:07:72:ea:15:5b:e4:59:60:3a:6c:a5:
90:a6:53:4a:df:78:ad:b7:c0:16:d7:68:04:cb:cc:
0e:1f:d2:b5:9e:36:53:9e:58:9c:b9:8c:d7:cd:04:
3b:66:ea:36:b2:93:ef:dc:32:eb:f8:83:f5:37:d7:
a6:52:29:38:aa:d3:d4:68:be:ad:f1:f1:19:5a:fb:
f6:36:3b:9f:4a:e8:34:ec:33:81:0b:27:f1:6e:53:
d7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:66:DB:21:74:B2:DE:F2:AF:EC:58:C5:D0:86:CE:A5:D2:CA:52:E6
X509v3 Authority Key Identifier:
keyid:28:27:4B:18:A1:46:B4:23:6F:C8:54:3D:9D:65:B0:C9:F6:C6:57:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/28274B18A146B4236FC8543D9D65B0C9F6C657E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28274B18A146B4236FC8543D9D65B0C9F6C657E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/34352e362e3138302e302f32322d3332203d3e20323636323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.180.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:c3:ac:2c:b2:ee:23:60:b0:25:0b:d2:16:f2:d7:c0:8c:9b:
c1:8e:c2:3c:ce:24:6e:d3:fc:02:1e:37:46:30:7b:26:50:04:
c2:95:68:e5:12:be:68:a2:ce:0f:2f:43:ec:c0:e0:2e:a2:53:
e4:54:23:62:54:63:87:3e:06:33:84:e4:60:f2:a4:6e:90:2f:
77:12:06:fc:79:42:46:61:9f:e6:46:bb:8d:7e:ac:f2:30:2a:
f8:58:7e:eb:71:db:f2:dd:b3:0c:52:eb:0e:9f:f4:f9:f1:19:
28:6d:90:e8:7f:fe:2b:f9:bc:87:e9:fc:87:25:9e:06:d9:16:
85:9e:4c:ea:ed:ba:20:af:6b:bd:6a:3a:ba:ed:03:5f:a7:2b:
7b:ac:07:bd:f8:a9:0b:64:08:e5:f8:0b:9a:29:cc:5e:04:42:
5e:ee:a9:ff:09:b1:12:9a:35:40:9e:75:a1:1b:db:93:5d:67:
b6:5d:2c:7c:49:f3:11:a7:e6:ca:b3:cc:60:90:02:a8:85:44:
79:22:8f:5e:da:4e:45:c9:1f:20:50:14:d0:a6:1a:2c:87:39:
40:f7:e8:e0:21:1e:f4:24:07:80:7b:44:f4:0d:35:0c:0b:3b:
2d:73:ac:a1:8b:95:52:5f:21:34:58:5c:68:27:c1:ac:f2:aa:
21:87:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:32:05 2025 by rpki-client