Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa
File: 34352e3138352e39382e302f32342d3234203d3e20323639333732.roa (raw, json)
Hash identifier: 3mkNpbx57q4G6XyoO6Xc6yOIDF8r5i7EHJuM98T7erY=
Subject key identifier: EE:36:C3:12:40:FE:87:E6:A5:62:11:54:E1:49:9F:04:9D:B2:0C:54
Certificate issuer: /CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC
Certificate serial: 25CD7F30DE2E68D0F656F01BB97247C8FA6B29F7
Authority key identifier: 9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa
Signing time: Thu 04 Apr 2024 07:32:21 +0000
ROA not before: Thu 04 Apr 2024 07:27:21 +0000
ROA not after: Thu 03 Apr 2025 07:32:21 +0000
asID: 269372
IP address blocks: 45.185.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:cd:7f:30:de:2e:68:d0:f6:56:f0:1b:b9:72:47:c8:fa:6b:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC
Validity
Not Before: Apr 4 07:27:21 2024 GMT
Not After : Apr 3 07:32:21 2025 GMT
Subject: CN=EE36C31240FE87E6A5621154E1499F049DB20C54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d0:8e:50:6f:6f:87:d7:1d:2b:e1:a2:12:8b:
ca:ec:7d:95:e4:4d:29:36:20:51:44:ea:f6:f5:98:
5e:ae:17:66:ec:31:a4:a2:4a:30:5b:17:4a:68:d7:
54:ac:42:fa:99:1e:e3:57:4e:45:07:ac:b9:67:0e:
c4:f1:d3:f0:0f:a3:75:11:df:8a:4f:d9:ac:32:a5:
14:24:df:f4:bf:8a:9c:31:e6:2e:7d:5d:16:91:ad:
bb:02:4e:d6:fa:56:a4:3b:6f:b1:a4:13:1a:51:47:
2c:50:17:ae:4d:e8:d7:16:ee:b1:dc:92:fe:75:7e:
c8:ea:3f:66:7b:96:ae:34:ee:73:9d:e7:b9:1f:52:
55:df:fe:df:20:db:6a:08:ed:b3:3b:d3:78:2f:a7:
ad:6c:12:b5:08:0e:d4:c8:e3:85:b8:eb:8b:89:c3:
8c:cb:00:ac:a9:69:31:d1:f7:e4:8e:a5:62:52:34:
e5:28:c9:c5:c7:fe:d4:54:1c:a0:99:93:f2:2b:03:
e1:83:ed:bf:8f:90:94:d0:cf:c5:11:5a:b3:1d:a0:
7e:78:5c:ea:d0:58:28:a9:5b:f9:57:45:38:83:20:
ec:ce:95:09:eb:62:2f:30:bb:e4:ae:5e:61:6f:8d:
fe:0e:60:11:96:dd:8a:46:81:2c:65:20:24:b0:bc:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:36:C3:12:40:FE:87:E6:A5:62:11:54:E1:49:9F:04:9D:B2:0C:54
X509v3 Authority Key Identifier:
keyid:9B:C4:43:A0:B4:AF:6F:26:60:F9:E4:B2:2F:BE:6B:FD:F4:EE:E7:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BC443A0B4AF6F2660F9E4B22FBE6BFDF4EEE7CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dn78cT7wxzcB97Kdj8BnX7f4QVqvT6eUptHbFw9nworY/1/34352e3138352e39382e302f32342d3234203d3e20323639333732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.185.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:b6:c7:f0:12:49:4b:0c:16:dc:5a:e1:77:bc:f3:dc:e5:d5:
d7:9d:c2:d2:1f:af:4a:d0:24:ea:1d:4d:f8:ee:09:c4:3e:7e:
92:53:36:aa:5b:2e:fa:7e:0e:a4:62:41:58:77:c7:46:f3:f8:
b0:83:2c:89:39:39:ba:d2:49:64:da:5d:1c:49:d2:5a:d7:3f:
5e:6e:11:20:79:ab:66:85:31:d3:de:84:ef:2f:84:95:48:a2:
fb:3e:65:b0:f6:2c:e1:32:02:75:44:7a:0f:fd:cc:ad:d8:b1:
77:73:cb:f4:0f:21:14:13:4f:c2:de:36:97:dc:34:70:3b:2f:
e3:5b:c7:b0:15:69:dc:ff:e2:69:be:68:b5:ba:de:a0:55:ef:
1d:c8:a7:5a:ff:0b:7b:5b:c2:95:14:e1:2c:19:23:64:5e:07:
33:0f:82:04:7b:92:60:66:ce:42:14:ce:31:ff:df:fd:2c:26:
c5:cf:4d:cf:5f:56:f5:7e:aa:79:fa:64:96:81:cf:cc:9b:f0:
d2:74:35:e0:39:e2:f0:7e:3e:e3:86:7b:27:19:9a:27:b2:06:
b6:6c:b9:f0:1a:4c:13:b4:08:2b:04:fd:fc:ca:f1:57:10:0c:
de:f6:29:ab:c1:59:4d:f9:ff:df:14:cd:07:ac:30:51:3f:23:
e4:cc:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:20:55 2025 by rpki-client