Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/34352e3136362e39392e302f32342d3234203d3e20323637393539.roa
File: 34352e3136362e39392e302f32342d3234203d3e20323637393539.roa (raw, json)
Hash identifier: ogu7pkVOmk1sRtpkq6gluAJpjzOZURtpJiN138pSJBA=
Subject key identifier: D1:58:EC:BA:BC:63:01:D2:52:9A:5C:F7:76:83:41:05:41:50:2E:54
Certificate issuer: /CN=5A1A01ED7E13E03145F46A33DC2488023EF6CA8F
Certificate serial: 3D6CB1626B806700011EBD00310B4127F69C5FA7
Authority key identifier: 5A:1A:01:ED:7E:13:E0:31:45:F4:6A:33:DC:24:88:02:3E:F6:CA:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/34352e3136362e39392e302f32342d3234203d3e20323637393539.roa
Signing time: Wed 19 Feb 2025 16:09:19 +0000
ROA not before: Wed 19 Feb 2025 16:04:19 +0000
ROA not after: Wed 18 Feb 2026 16:09:19 +0000
asID: 267959
IP address blocks: 45.166.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:6c:b1:62:6b:80:67:00:01:1e:bd:00:31:0b:41:27:f6:9c:5f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A1A01ED7E13E03145F46A33DC2488023EF6CA8F
Validity
Not Before: Feb 19 16:04:19 2025 GMT
Not After : Feb 18 16:09:19 2026 GMT
Subject: CN=D158ECBABC6301D2529A5CF77683410541502E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:dd:ca:36:a9:06:04:50:1b:1f:59:65:b1:
f6:da:8d:57:60:c2:51:f4:3f:1c:62:71:40:70:84:
84:be:ac:5a:c5:f2:43:d6:39:da:d5:75:50:cb:a9:
ac:d8:86:d0:cd:22:1f:ea:eb:ab:6e:82:54:b8:a5:
b6:39:ad:46:bc:37:66:35:6f:0a:07:b8:1e:97:a3:
d9:7d:67:84:21:ac:7a:88:8c:cf:91:4a:6f:d8:03:
59:c6:fd:2a:aa:5a:37:93:cb:91:ee:be:29:bb:e8:
45:2e:d1:4a:dc:f9:e7:27:b3:94:e1:94:aa:50:62:
df:f4:c4:ea:f1:20:38:80:80:68:62:01:f1:72:1b:
14:2b:75:ac:34:aa:52:e2:ef:95:c5:0a:da:11:76:
7a:bd:4c:c1:10:ba:41:61:db:98:5a:bf:c9:6e:44:
38:b0:53:d7:d5:ad:7a:09:8a:24:2f:83:ad:39:37:
17:fb:05:64:6d:40:88:d5:64:b9:c4:39:6a:05:b4:
93:c8:ea:b3:a2:59:27:81:c5:dc:15:27:eb:5d:78:
1d:0c:f9:4c:74:c2:da:cb:41:cd:e5:f1:cf:12:b3:
b4:7b:2c:25:f8:e6:87:d9:0f:50:15:0d:33:ea:e7:
a7:bb:18:19:59:c4:49:ae:7b:9f:95:72:c6:7d:da:
09:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:EC:BA:BC:63:01:D2:52:9A:5C:F7:76:83:41:05:41:50:2E:54
X509v3 Authority Key Identifier:
keyid:5A:1A:01:ED:7E:13:E0:31:45:F4:6A:33:DC:24:88:02:3E:F6:CA:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A1A01ED7E13E03145F46A33DC2488023EF6CA8F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmTvbXUVmMTvZrFn1owE9ExGP5zzLNamdsz5oapuLK5Z/0/34352e3136362e39392e302f32342d3234203d3e20323637393539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.166.99.0/24
Signature Algorithm: sha256WithRSAEncryption
01:32:46:ac:a7:64:32:44:71:cc:a0:a6:77:44:92:1f:6e:fd:
13:56:b2:77:ba:f9:28:71:53:c4:14:14:42:d9:a9:cf:90:6e:
bb:93:20:8a:2b:a4:7b:c8:9b:e6:8e:dc:18:56:66:d7:ec:5e:
b8:46:43:d0:4e:45:0c:51:01:8d:e8:c7:f0:c9:b0:22:67:dc:
42:b6:0c:d0:4a:ec:37:1c:5b:01:69:65:38:28:ca:82:d0:38:
c3:e3:8a:6f:8a:72:f7:0d:21:ff:8a:f8:11:a9:a6:d9:30:dc:
32:d5:33:07:60:ac:83:1a:21:d2:a7:4a:e4:19:74:90:48:7d:
bc:e4:c9:7d:7f:a4:49:86:e9:20:7f:05:ac:2f:6e:d2:2a:2e:
5e:02:5d:23:5c:a9:bd:6e:80:9d:ca:ec:95:4c:e3:7d:0d:67:
31:3a:9b:9c:42:05:85:53:e8:22:70:b2:57:3b:b5:03:d2:90:
3a:ea:ce:ca:44:9e:27:b6:5d:45:fb:11:7b:0d:d4:ee:64:1b:
f5:80:06:87:42:87:88:9e:a0:0f:ac:e4:ab:11:06:52:9c:08:
ef:ee:72:ac:8f:80:4b:83:3e:58:13:9a:6b:b5:d0:c5:39:b8:
67:8a:46:77:5c:99:6e:ae:41:99:22:ea:cb:84:1c:5b:6d:cf:
7a:c4:b3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:08:58 2025 by rpki-client