Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34332e302f32342d3234203d3e203238323436.roa
File: 3138372e312e34332e302f32342d3234203d3e203238323436.roa (raw, json)
Hash identifier: LMuHhEd7dniYGtdcdaMp0YWw1enib8kGhKSeUDSUNT8=
Subject key identifier: CA:79:8B:D6:1A:EB:5A:E6:E9:FD:E4:B6:13:5C:FB:65:CE:85:68:0B
Certificate issuer: /CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Certificate serial: 45B8D9D510BCF190D1E161408E3659F46C480836
Authority key identifier: 42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34332e302f32342d3234203d3e203238323436.roa
Signing time: Thu 14 Dec 2023 14:57:26 +0000
ROA not before: Thu 14 Dec 2023 14:52:26 +0000
ROA not after: Thu 12 Dec 2024 14:57:26 +0000
asID: 28246
IP address blocks: 187.1.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:b8:d9:d5:10:bc:f1:90:d1:e1:61:40:8e:36:59:f4:6c:48:08:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429B621150ADA0B8AA46D054F1ADE32F298361E0
Validity
Not Before: Dec 14 14:52:26 2023 GMT
Not After : Dec 12 14:57:26 2024 GMT
Subject: CN=CA798BD61AEB5AE6E9FDE4B6135CFB65CE85680B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5a:e7:e0:7c:91:05:a7:67:72:90:a0:68:c6:
5f:73:a2:b6:e6:c6:56:4c:7f:08:18:68:ee:ee:fe:
6e:55:32:47:b8:62:98:ef:a1:f3:28:6e:a6:e6:99:
b9:91:6b:81:e3:94:bc:a1:da:87:6c:16:37:d1:a2:
70:56:18:c5:b3:38:07:df:8b:d2:5f:4d:17:31:7f:
3a:ed:6b:d7:54:a7:52:6f:d3:24:77:2e:0b:e1:9b:
9c:cc:29:96:c9:50:f8:80:d7:7d:74:45:d5:4b:76:
ce:04:d3:f4:63:a3:e2:52:49:48:46:93:73:18:e3:
9b:01:bd:1d:60:e2:3d:3a:16:04:d2:53:a7:aa:83:
31:02:37:3d:03:2f:8d:78:6d:d4:12:c5:a3:93:e3:
07:a7:ed:e4:9d:f5:a5:d3:69:a0:89:1b:ed:70:2a:
4c:01:ba:b1:7c:6b:45:07:a0:be:f0:a5:e1:6f:d0:
fb:1f:8f:d2:11:d5:92:ff:10:71:47:bb:04:69:94:
b6:57:65:52:b0:3e:eb:cb:94:cd:ee:b7:a1:26:45:
96:1b:6e:96:d8:17:74:78:39:bf:0b:ee:ed:05:82:
76:94:d1:37:fc:b7:f5:18:5a:48:b1:d1:67:dc:05:
10:aa:11:14:bd:39:b5:1a:19:9a:71:50:90:71:ee:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:79:8B:D6:1A:EB:5A:E6:E9:FD:E4:B6:13:5C:FB:65:CE:85:68:0B
X509v3 Authority Key Identifier:
keyid:42:9B:62:11:50:AD:A0:B8:AA:46:D0:54:F1:AD:E3:2F:29:83:61:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/429B621150ADA0B8AA46D054F1ADE32F298361E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ETzEAXx64f9BHT5NhmUidcqQ21BXKcHgvrqXKry5mXEt/0/3138372e312e34332e302f32342d3234203d3e203238323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.1.43.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:f6:a5:3e:23:90:10:5b:c2:d4:e6:21:8e:7a:85:c0:eb:4f:
01:05:88:ff:fe:d2:24:9f:a0:fa:00:20:d0:d3:00:24:7c:46:
f5:f7:09:9c:0a:34:d8:f5:ef:ce:da:a7:55:b4:e5:c2:d6:63:
76:99:08:de:da:17:20:73:d9:b1:17:ab:1a:6b:e7:13:f2:71:
03:a1:a6:a8:52:ec:aa:96:e8:8f:ca:b9:e7:12:93:cd:fe:b5:
3c:36:83:e2:4a:2b:50:f3:c5:4c:b9:5f:1c:db:c1:0a:23:d5:
7b:53:02:1d:12:6a:e0:31:ee:f9:f8:22:7b:2b:50:8e:de:e7:
b8:a6:f0:ff:66:64:78:d4:d7:5c:67:54:0d:19:1a:6c:47:20:
2f:ce:0d:1a:35:4f:ec:88:ba:56:bd:6e:28:41:2e:b2:3b:ec:
18:4c:d5:aa:3c:98:a1:08:5e:cb:56:af:ed:78:51:8a:6a:d8:
fc:9a:59:81:d3:4c:fb:6d:94:73:d3:ea:b7:df:60:91:35:28:
5c:ba:28:1d:bd:06:3e:7c:53:73:c0:00:3d:d4:f9:79:51:d2:
f0:3a:c3:93:51:70:df:fc:66:31:1b:52:f6:49:e1:99:a1:5d:
f0:8d:a4:55:ac:b2:f6:5c:d2:68:4a:fa:96:78:b3:91:e7:9d:
87:ee:5e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:46:26 2025 by rpki-client