Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/1/34352e342e33322e302f32322d3234203d3e20323636303434.roa
File: 34352e342e33322e302f32322d3234203d3e20323636303434.roa (raw, json)
Hash identifier: idSVgbnMkvR/BEXAYKnjJgS8TUuwSrSgiMOtilYbP4Q=
Subject key identifier: D9:DC:7B:24:89:DC:31:E0:EB:4A:87:36:C5:9A:CA:1F:1F:91:34:CE
Certificate issuer: /CN=DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC
Certificate serial: ACCA97040DB3984A8606B2EFA41B65F0297785
Authority key identifier: DC:CC:03:84:BC:FF:D1:A2:0A:E5:DE:A1:3B:02:26:C3:54:C6:12:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/1/34352e342e33322e302f32322d3234203d3e20323636303434.roa
Signing time: Thu 28 Nov 2024 13:25:35 +0000
ROA not before: Thu 28 Nov 2024 13:20:35 +0000
ROA not after: Thu 27 Nov 2025 13:25:35 +0000
asID: 266044
IP address blocks: 45.4.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
ac:ca:97:04:0d:b3:98:4a:86:06:b2:ef:a4:1b:65:f0:29:77:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC
Validity
Not Before: Nov 28 13:20:35 2024 GMT
Not After : Nov 27 13:25:35 2025 GMT
Subject: CN=D9DC7B2489DC31E0EB4A8736C59ACA1F1F9134CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:02:d2:44:d1:77:f6:c2:3b:c6:a8:48:db:
2e:0a:f7:f1:0d:74:e9:fd:45:17:9a:31:40:77:88:
9b:7e:65:d5:11:ca:7f:f2:ce:6f:4b:b5:63:dc:d1:
75:7f:7a:ca:f0:81:de:94:5a:09:e3:27:4c:f0:b7:
e5:a2:c5:d9:43:ba:55:ac:c6:77:ae:a2:43:65:d0:
80:0f:80:33:57:05:4f:be:68:c3:b1:29:1c:7e:bb:
50:e4:72:1a:45:e2:59:e7:95:f6:0f:e6:97:6d:50:
e8:2d:73:43:3e:0c:37:38:cb:1d:1c:af:f1:e6:a4:
67:8d:38:77:9a:7b:89:cf:ba:e8:56:78:9a:86:69:
39:aa:6b:dd:97:cd:a7:f9:90:c0:96:11:e4:fa:85:
ec:cf:56:db:af:ac:3e:a4:5f:cc:0f:7e:fc:99:2f:
95:8b:df:cc:22:f3:c2:37:d4:f7:0c:a4:1d:cc:a1:
c5:bb:ea:25:fc:46:0d:12:82:d2:49:46:cf:c1:02:
34:be:15:70:ce:2b:83:3e:2f:8a:97:87:93:b8:03:
95:85:3d:2c:12:47:d3:dc:0e:a0:13:cd:ef:8f:b5:
43:d7:aa:d6:45:fa:8f:94:e5:bf:1c:e2:ef:10:6b:
cf:81:6f:dd:11:12:78:c3:d6:68:d8:89:37:91:3c:
65:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DC:7B:24:89:DC:31:E0:EB:4A:87:36:C5:9A:CA:1F:1F:91:34:CE
X509v3 Authority Key Identifier:
keyid:DC:CC:03:84:BC:FF:D1:A2:0A:E5:DE:A1:3B:02:26:C3:54:C6:12:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/1/DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCCC0384BCFFD1A20AE5DEA13B0226C354C612AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DxiaZf5wKwJQM83eobZzQ2iUVkWoSamd9eLP97Fr2NvS/1/34352e342e33322e302f32322d3234203d3e20323636303434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.32.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:6b:6d:de:c4:52:0a:5b:82:a6:0d:34:28:d2:1a:77:6d:09:
f1:d7:9b:b9:12:4e:48:7d:2c:a0:33:68:ed:02:70:92:5e:fc:
c9:6a:06:3a:1c:c1:ef:57:9b:6a:aa:da:ed:40:5b:0f:64:3e:
f5:b1:a8:e3:28:ca:e9:df:da:51:14:f4:42:18:95:17:1d:62:
15:1a:e5:36:d9:41:83:04:7b:37:f8:eb:5b:b0:5f:ef:b1:de:
e8:8d:26:36:47:32:b1:61:eb:bd:05:94:2b:ed:f0:64:9a:6e:
19:87:57:28:c2:54:e9:46:db:7c:c1:a5:aa:4e:4a:64:e0:b0:
cf:8a:98:bb:ea:9c:ba:3e:17:ac:56:5f:4c:d8:97:dd:b5:5f:
d0:9f:41:8e:a6:21:6e:00:0f:38:d6:91:9f:e0:c3:9b:61:74:
68:17:36:05:e9:38:f7:a3:4a:24:0f:c0:c2:06:ca:a5:34:dc:
83:27:32:87:6d:b7:be:71:f4:d2:c0:06:3c:d9:d1:dc:59:f6:
af:a1:92:5a:20:8d:e8:12:6b:6e:4a:1e:5f:04:3c:90:8e:71:
8f:1d:11:f0:92:61:ae:9c:3d:2b:8c:c1:d8:82:ca:e7:fa:3c:
cc:22:6c:f8:aa:82:25:85:df:25:11:5c:45:c3:50:f4:46:c5:
62:87:42:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:42:45 2025 by rpki-client