Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3234203d3e20323637333733.roa
File: 34352e3233342e3231322e302f32322d3234203d3e20323637333733.roa (raw, json)
Hash identifier: hIFRBaZpo913n6QDNdWdbxjvjkyp+Sqv+QIQRfv+QDc=
Subject key identifier: B2:86:85:2F:AF:68:94:94:90:CE:0D:92:F4:61:33:17:E2:5A:7E:C4
Certificate issuer: /CN=56189290572F0ED1BF62ADE3F3EDC4D226765B85
Certificate serial: 0EAD35A0C9DB440F566FA1F6D2B9651B1B3D5ACD
Authority key identifier: 56:18:92:90:57:2F:0E:D1:BF:62:AD:E3:F3:ED:C4:D2:26:76:5B:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56189290572F0ED1BF62ADE3F3EDC4D226765B85.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3234203d3e20323637333733.roa
Signing time: Fri 31 Jan 2025 15:35:38 +0000
ROA not before: Fri 31 Jan 2025 15:30:38 +0000
ROA not after: Fri 30 Jan 2026 15:35:38 +0000
asID: 267373
IP address blocks: 45.234.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ad:35:a0:c9:db:44:0f:56:6f:a1:f6:d2:b9:65:1b:1b:3d:5a:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56189290572F0ED1BF62ADE3F3EDC4D226765B85
Validity
Not Before: Jan 31 15:30:38 2025 GMT
Not After : Jan 30 15:35:38 2026 GMT
Subject: CN=B286852FAF68949490CE0D92F4613317E25A7EC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:16:e3:14:34:85:ca:5f:4b:90:78:4c:3f:
7a:b0:05:09:1f:0e:53:50:37:52:4d:02:9a:c2:2c:
58:9f:a6:58:de:56:40:7e:25:17:fc:0d:33:54:9c:
8b:9c:bb:40:85:3f:cb:7c:d5:34:13:84:0d:1d:71:
af:92:fa:68:b8:50:46:96:6b:f7:d4:e2:26:cc:ae:
54:71:4c:53:79:fe:08:0c:74:d3:01:d0:67:6b:ff:
8f:d6:a3:f3:54:08:66:e3:bb:22:8f:3f:8e:0f:02:
10:3e:19:15:2a:eb:1f:b5:4e:65:bf:61:9a:f0:61:
96:cf:c3:79:ee:c1:6a:f9:b3:36:4a:a1:cc:d3:8c:
f6:d3:31:96:23:fe:46:9f:fe:43:fc:89:ab:bc:84:
72:ed:c6:68:d8:a1:6c:90:f2:c7:a9:38:18:9e:0c:
9c:47:dc:23:c6:5b:4a:40:5f:02:9d:88:e6:54:ca:
c4:2b:28:6a:ed:cf:db:08:1d:91:d7:16:24:50:2e:
cb:16:4b:8d:ce:a1:3a:83:d0:89:38:c3:ab:c7:61:
c6:b1:1b:f9:d1:cf:96:f7:c9:04:ff:43:04:92:ee:
19:bb:7d:50:78:73:c7:12:db:7a:6f:48:f4:d7:d6:
ee:14:2e:d6:47:38:07:39:d0:79:93:17:bd:0d:a5:
7e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:86:85:2F:AF:68:94:94:90:CE:0D:92:F4:61:33:17:E2:5A:7E:C4
X509v3 Authority Key Identifier:
keyid:56:18:92:90:57:2F:0E:D1:BF:62:AD:E3:F3:ED:C4:D2:26:76:5B:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/56189290572F0ED1BF62ADE3F3EDC4D226765B85.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56189290572F0ED1BF62ADE3F3EDC4D226765B85.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/34352e3233342e3231322e302f32322d3234203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.212.0/22
Signature Algorithm: sha256WithRSAEncryption
19:4c:b0:d3:5d:9f:e7:41:ef:c0:02:ea:ba:df:34:cf:29:a3:
d2:fb:fe:77:dd:06:a0:e8:9d:77:3c:c6:76:82:b1:f5:e2:09:
b8:38:89:3c:86:4b:10:70:6d:54:54:12:0f:4d:21:9a:90:8f:
2f:5d:a4:61:14:1b:6f:97:63:11:64:c8:b6:ca:6c:f7:64:27:
f9:4c:9f:9c:a4:3a:aa:d1:9c:e0:4c:9d:f1:9f:2a:8a:95:df:
20:ae:45:84:ef:3b:4c:ce:75:e1:31:57:86:64:7b:24:df:9d:
31:63:ea:d7:ab:ad:64:a6:71:a9:73:9a:a0:47:67:69:a7:2d:
cc:e9:18:55:44:75:da:76:07:b4:2b:f6:09:10:62:52:55:fb:
a8:45:92:f9:47:da:a2:f6:b1:ac:99:1e:a0:1d:c1:73:66:3d:
6b:b7:e1:f2:b7:28:bf:1a:46:92:0a:39:7f:87:c1:7e:66:5d:
73:0b:ff:81:02:db:c9:03:37:7f:74:89:20:ca:02:78:27:60:
c1:d4:e2:a7:06:e3:fb:23:44:ff:74:19:02:6d:53:73:5b:82:
be:75:9c:23:df:e5:bc:aa:1c:06:1c:d6:32:7c:a4:29:01:c2:
15:2b:d4:05:64:81:f1:d6:4c:a4:9d:9c:ad:8f:08:b1:15:30:
2b:67:1e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:28:32 2025 by rpki-client