Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133322e302f32332d3233203d3e20323638363137.roa
File: 34352e3136342e3133322e302f32332d3233203d3e20323638363137.roa (raw, json)
Hash identifier: LcmRl1I+zJajWhMSRmXyy2I+psOuqHPMlXdtMVdM8so=
Subject key identifier: 69:66:48:0A:B5:84:88:58:18:0B:7D:A5:F5:D0:2D:22:E8:1E:FF:2F
Certificate issuer: /CN=E1F724D25672BFA30941906405DCC099740BF6B5
Certificate serial: 154CE37A2A02CF4E9188D9E7A86DA11DEA6ECA2A
Authority key identifier: E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133322e302f32332d3233203d3e20323638363137.roa
Signing time: Thu 30 Jan 2025 16:22:46 +0000
ROA not before: Thu 30 Jan 2025 16:17:46 +0000
ROA not after: Thu 29 Jan 2026 16:22:46 +0000
asID: 268617
IP address blocks: 45.164.132.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:4c:e3:7a:2a:02:cf:4e:91:88:d9:e7:a8:6d:a1:1d:ea:6e:ca:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E1F724D25672BFA30941906405DCC099740BF6B5
Validity
Not Before: Jan 30 16:17:46 2025 GMT
Not After : Jan 29 16:22:46 2026 GMT
Subject: CN=6966480AB5848858180B7DA5F5D02D22E81EFF2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:ea:0d:95:8b:5d:7c:1e:70:c4:dd:91:b1:
66:a8:5e:fe:75:e1:ea:a7:52:66:5c:d1:f1:22:74:
07:bf:29:04:e2:bd:1e:e4:70:bf:01:5b:17:17:24:
0f:6d:4e:99:3b:c7:95:f6:0a:2c:5c:6d:ca:84:16:
7c:f3:94:f8:bb:b6:96:08:4d:6a:c4:47:e3:6d:35:
20:3d:64:f9:47:01:c1:ba:2b:bd:d6:52:ca:0b:8a:
28:dd:ef:47:ea:9a:6b:4a:c2:58:40:32:ab:6a:85:
54:3c:b4:33:19:68:b8:b4:e3:76:2f:43:16:94:a1:
ac:22:02:0b:2f:41:c0:5c:95:9f:37:d2:ed:b1:83:
5c:e0:25:72:af:43:10:65:67:03:1c:58:9d:9d:f3:
a0:e1:7f:0f:72:8e:64:6d:9a:0b:08:94:ea:56:46:
3e:03:fe:45:f4:50:94:8a:72:74:1c:a2:ee:d0:1d:
d4:85:15:45:e7:e5:21:f3:f1:ed:57:c8:2b:1f:5c:
03:f0:61:9b:d9:77:08:8b:4c:b2:7b:1f:28:99:02:
bc:85:64:0d:65:b8:c2:f9:22:87:7c:a8:ae:04:0e:
15:dc:d6:e4:92:c9:b4:b7:1c:32:ba:28:68:2e:36:
d4:34:e0:98:19:e2:19:ed:08:c2:93:90:da:54:02:
2a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:66:48:0A:B5:84:88:58:18:0B:7D:A5:F5:D0:2D:22:E8:1E:FF:2F
X509v3 Authority Key Identifier:
keyid:E1:F7:24:D2:56:72:BF:A3:09:41:90:64:05:DC:C0:99:74:0B:F6:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/E1F724D25672BFA30941906405DCC099740BF6B5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E1F724D25672BFA30941906405DCC099740BF6B5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CyxYUxCGZZTusZXig6xReewDRdipn3LEECEFaYg5Zhsv/0/34352e3136342e3133322e302f32332d3233203d3e20323638363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.132.0/23
Signature Algorithm: sha256WithRSAEncryption
41:41:cc:80:3b:a6:e5:31:c9:d0:5c:dd:de:8c:26:53:c7:ed:
b6:f7:92:5a:3d:9c:f2:ce:bf:cf:3f:2f:ae:f7:25:8f:04:e4:
8c:00:73:98:1e:af:14:81:5b:74:8a:13:66:f5:2d:46:93:af:
6d:66:2b:49:70:21:64:8d:26:4e:3d:fa:0d:7b:92:eb:17:92:
33:29:d0:c8:36:89:05:e0:2f:9d:15:0d:63:f8:90:60:6c:91:
c7:0d:3b:ac:df:d2:7a:a6:02:8b:8e:63:36:eb:0b:eb:56:f8:
81:8f:08:1c:34:71:ea:ab:e1:f9:4c:47:77:87:6d:44:92:8f:
18:b9:90:31:0b:10:15:73:a6:00:d6:98:a1:fc:72:e6:fa:c0:
fe:dd:4d:4a:ee:95:af:ed:b6:99:b9:cb:89:cf:b3:02:dd:13:
6e:29:db:a9:9f:f3:d6:f5:b2:15:8b:05:7e:40:a5:9f:c5:ee:
0a:aa:46:ca:59:60:4a:35:2d:f7:e7:b4:79:d0:8f:75:4b:85:
9b:a2:b5:26:89:a7:cc:58:b6:f5:63:fc:9e:68:81:4d:c4:13:
a1:ee:b8:5d:f0:ef:38:5b:20:1f:76:c5:9d:09:bf:28:f7:61:
37:13:a8:b0:88:4a:fe:49:8d:cb:54:89:22:3e:fb:93:8b:35:
3d:ff:98:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:32:20 2025 by rpki-client