Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32342d3234203d3e20323636393138.roa
File: 34352e3232342e3137362e302f32342d3234203d3e20323636393138.roa (raw, json)
Hash identifier: x+IvpW1Ss4yz4Eh7mJ9gSZVzPnaL4GKGNy2bjqDZq2w=
Subject key identifier: 11:9A:21:F3:D4:61:07:71:A8:FD:2E:CE:AD:49:29:BF:E8:27:55:3A
Certificate issuer: /CN=44E04535A0B2769897B15757A3419A5A38572BBA
Certificate serial: 3D97CE2068C787F06C4B2E824A402B13C9F603C1
Authority key identifier: 44:E0:45:35:A0:B2:76:98:97:B1:57:57:A3:41:9A:5A:38:57:2B:BA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32342d3234203d3e20323636393138.roa
Signing time: Wed 15 Jan 2025 12:00:26 +0000
ROA not before: Wed 15 Jan 2025 11:55:26 +0000
ROA not after: Wed 14 Jan 2026 12:00:26 +0000
asID: 266918
IP address blocks: 45.224.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:97:ce:20:68:c7:87:f0:6c:4b:2e:82:4a:40:2b:13:c9:f6:03:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44E04535A0B2769897B15757A3419A5A38572BBA
Validity
Not Before: Jan 15 11:55:26 2025 GMT
Not After : Jan 14 12:00:26 2026 GMT
Subject: CN=119A21F3D4610771A8FD2ECEAD4929BFE827553A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:72:8a:14:4d:ed:37:48:42:0c:fb:94:7b:
30:e9:ea:0f:f5:31:f9:b2:0c:e1:0c:45:61:d2:2e:
75:82:fb:e6:3a:23:73:de:b1:82:24:d4:64:4b:e1:
c6:08:cb:db:65:62:22:c0:7f:13:ec:7c:4a:29:a4:
7f:0b:18:1d:5c:7b:03:49:51:2c:d1:78:73:1e:0d:
42:c7:60:3f:2f:8f:c1:d0:84:47:9b:64:ea:f1:b8:
87:21:42:2d:e1:71:27:d6:db:3a:78:e7:75:92:4e:
d8:b0:9a:e9:27:c8:07:31:d2:79:59:f9:e5:7a:40:
a3:a7:09:e6:4d:6f:66:8d:79:3e:5b:24:ff:fd:81:
72:34:a1:aa:eb:38:b5:b6:6d:1a:46:3a:41:dc:28:
21:53:ab:fd:9b:41:fb:e2:9e:83:a5:2d:15:f2:9c:
52:39:0d:49:68:6b:a5:3a:fa:15:61:77:e6:41:7e:
6e:a1:23:fa:f7:b2:8a:72:3a:c6:90:b9:b6:c8:03:
4a:ac:df:f4:0c:33:cc:35:d9:01:72:6a:02:0d:e2:
25:1a:5e:7f:c7:be:db:80:b9:f9:62:bc:de:39:74:
c3:f5:a2:23:3d:61:63:9e:21:8a:36:70:e7:34:27:
2c:b3:81:69:11:59:53:77:ff:d9:19:ed:8c:d3:cd:
01:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9A:21:F3:D4:61:07:71:A8:FD:2E:CE:AD:49:29:BF:E8:27:55:3A
X509v3 Authority Key Identifier:
keyid:44:E0:45:35:A0:B2:76:98:97:B1:57:57:A3:41:9A:5A:38:57:2B:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/44E04535A0B2769897B15757A3419A5A38572BBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/44E04535A0B2769897B15757A3419A5A38572BBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DGzKkYBN7PypuQ9nH8EKNxcAN8dpXB2VN3E8HT7usDXB/0/34352e3232342e3137362e302f32342d3234203d3e20323636393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.176.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b1:63:6c:e0:cf:dc:af:db:4f:d4:2e:3b:76:63:29:a7:bd:
c8:b6:3d:84:f0:fc:33:01:d7:a5:e4:9c:17:29:34:ce:8e:10:
2d:36:a4:e8:41:40:2a:0b:e7:e5:8f:3e:d2:26:43:63:1b:87:
7a:0d:0f:e9:e0:79:fb:6d:3a:df:ce:9b:ca:b3:3c:4e:ed:b0:
73:7d:18:fd:d2:7b:e1:44:99:07:df:2d:54:40:38:66:f5:6b:
93:04:6c:fb:e8:d8:e9:4b:3f:7c:81:f3:43:ef:84:eb:28:45:
83:82:ac:65:4c:e6:21:f2:1e:43:84:3c:96:8a:89:23:6d:d4:
6f:39:fe:c8:10:c4:09:8a:06:76:38:8b:44:93:a8:11:c1:ff:
d0:eb:c4:b3:51:f5:84:6c:df:4f:c8:42:d1:99:5e:6b:6c:37:
b9:fc:77:da:c5:c8:4b:fe:9e:ef:ea:65:2f:3c:2e:dc:fc:ca:
b2:cc:61:3c:8a:22:0d:17:ab:1b:79:86:79:24:98:ca:48:06:
6a:f9:bb:07:04:66:59:36:22:bb:8f:f4:2c:a9:c6:7e:81:c4:
cf:50:0a:58:cc:df:51:4f:35:c0:9b:86:83:eb:43:bd:8f:dc:
e5:83:7c:19:5a:e0:84:34:89:b4:a3:cc:0d:7e:fa:74:f3:26:
f5:11:2e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:39:36 2025 by rpki-client