Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/34352e3137362e32382e302f32322d3234203d3e203532373935.roa
File: 34352e3137362e32382e302f32322d3234203d3e203532373935.roa (raw, json)
Hash identifier: pVevjyBrENl7QHdVG6iSa/GekJxPUmNUug+Y6FnUxVg=
Subject key identifier: 58:FE:CD:BC:86:7D:97:76:49:F4:50:46:C2:82:07:38:EB:82:8B:7D
Certificate issuer: /CN=FE9CA103999EE1FE62BECD7792A5F93999045F89
Certificate serial: 7DA07CC8E493385CAA74559E833FB88DD9E8B511
Authority key identifier: FE:9C:A1:03:99:9E:E1:FE:62:BE:CD:77:92:A5:F9:39:99:04:5F:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9CA103999EE1FE62BECD7792A5F93999045F89.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/34352e3137362e32382e302f32322d3234203d3e203532373935.roa
Signing time: Mon 31 Jan 2022 14:03:12 +0000
ROA not before: Mon 31 Jan 2022 13:58:12 +0000
ROA not after: Mon 30 Jan 2023 14:03:12 +0000
asID: 52795
IP address blocks: 45.176.28.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a0:7c:c8:e4:93:38:5c:aa:74:55:9e:83:3f:b8:8d:d9:e8:b5:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE9CA103999EE1FE62BECD7792A5F93999045F89
Validity
Not Before: Jan 31 13:58:12 2022 GMT
Not After : Jan 30 14:03:12 2023 GMT
Subject: CN=58FECDBC867D977649F45046C2820738EB828B7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:99:19:bf:f6:7c:21:28:48:94:ab:ff:70:b3:
53:ca:03:97:e1:97:f1:df:ee:3a:5f:a5:3c:8f:1b:
89:b4:b3:2d:b4:91:09:78:bd:4f:49:a9:0e:f7:a4:
f3:ae:97:bd:3e:9e:ec:2f:d2:a9:f4:97:60:c4:76:
14:6d:21:ec:99:15:59:93:3c:5e:59:9b:bd:e0:14:
05:18:1b:de:15:5f:93:ab:54:99:a9:19:76:d5:4a:
38:79:7b:aa:aa:ee:23:bd:b2:59:77:b6:42:c2:01:
cb:34:c9:94:47:92:23:ee:dc:f0:20:c2:a9:db:17:
71:cc:5b:4b:79:46:ea:d8:c6:b4:14:6f:e3:f3:d8:
2c:d9:25:e6:37:04:50:83:67:88:a5:ef:a0:63:91:
59:fd:a5:9a:4f:bc:c3:58:ce:3d:2c:39:18:4e:f9:
6d:9c:b0:f0:d9:80:88:9c:e8:05:4e:30:67:3c:10:
a8:61:80:8e:e6:57:d5:11:9f:30:13:82:a6:81:ce:
e9:06:c4:27:d6:6f:d5:52:bc:0e:f6:67:de:f1:76:
20:8b:ab:dc:b6:be:92:56:61:49:7a:01:43:3b:0f:
80:5b:79:21:13:72:42:5a:9b:58:46:c0:f5:97:0e:
5a:76:ba:7c:e9:b3:63:02:55:f3:0f:86:cf:6a:0c:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:FE:CD:BC:86:7D:97:76:49:F4:50:46:C2:82:07:38:EB:82:8B:7D
X509v3 Authority Key Identifier:
keyid:FE:9C:A1:03:99:9E:E1:FE:62:BE:CD:77:92:A5:F9:39:99:04:5F:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/FE9CA103999EE1FE62BECD7792A5F93999045F89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FE9CA103999EE1FE62BECD7792A5F93999045F89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D12zPTCcyxibzCSvLmyc7kQy7g4bSrGYqfsHTiAbDLUo/0/34352e3137362e32382e302f32322d3234203d3e203532373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.28.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:93:2e:02:8a:a4:7e:d4:ef:29:08:23:ac:24:3a:24:8d:c8:
3d:e7:44:5d:3d:e0:7c:4e:31:65:64:d0:90:b0:5e:fb:d7:93:
f0:bd:8c:52:16:ec:8c:2a:d7:68:39:13:4f:15:97:55:59:df:
1e:ba:97:df:52:1d:05:11:d9:02:d2:c1:13:73:3b:3a:0c:83:
80:3d:d2:f5:01:f4:c4:60:59:ea:b3:04:5f:72:9e:78:14:24:
80:c8:f5:2e:4f:d7:75:83:2b:6f:ee:6e:b7:b8:0c:62:01:4a:
65:29:b5:a3:a8:7b:36:ff:78:43:13:77:bb:29:ce:b3:89:12:
50:6f:e3:dd:1f:86:2f:c5:43:58:8c:34:15:6d:30:75:bc:4f:
93:92:0f:71:a6:70:0a:15:f4:e0:28:63:f1:15:fd:4b:5c:6a:
27:31:7f:68:ba:ca:5b:5c:94:4c:b1:52:5b:32:1f:aa:ca:75:
c3:b8:15:bb:e5:29:fa:e1:d8:17:7e:90:c1:47:f5:6d:34:5b:
c5:d8:2d:9a:68:a2:ea:e6:2e:0c:e0:24:19:68:dc:12:77:6d:
27:cb:6d:19:37:c8:68:21:b4:7b:06:27:74:75:12:61:32:57:
76:b5:32:6e:f7:d3:c8:64:3d:d5:a9:7c:ff:e1:19:38:b6:e9:
06:d1:47:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:28 2025 by rpki-client