Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
File: 34352e3138382e382e302f32342d3234203d3e20323639353636.roa (raw, json)
Hash identifier: oSEYRXzuZwV8PXWRXiGQbcW6N629d4WS+lViHP9vYFk=
Subject key identifier: 22:FF:C0:09:FF:24:79:C8:BC:0E:F5:E1:37:02:C4:B4:4A:2E:3F:8B
Certificate issuer: /CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Certificate serial: 3850C7D3ABC2F65F45D13D280DC6BC95592504C4
Authority key identifier: 8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
Signing time: Thu 23 Jan 2025 12:24:51 +0000
ROA not before: Thu 23 Jan 2025 12:19:51 +0000
ROA not after: Thu 22 Jan 2026 12:24:51 +0000
asID: 269566
IP address blocks: 45.188.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:50:c7:d3:ab:c2:f6:5f:45:d1:3d:28:0d:c6:bc:95:59:25:04:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B76B82695398F313AF28AE7E54FA9B6036F0B82
Validity
Not Before: Jan 23 12:19:51 2025 GMT
Not After : Jan 22 12:24:51 2026 GMT
Subject: CN=22FFC009FF2479C8BC0EF5E13702C4B44A2E3F8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:55:96:86:1c:7e:82:01:91:07:8f:d0:aa:14:
7d:d4:22:fe:ac:f8:8d:7d:2c:61:ea:87:1c:35:e8:
67:00:3c:87:17:4c:8c:77:cb:2e:e9:ee:8e:53:b5:
13:a6:b8:f4:e3:7d:00:40:17:8c:dd:f1:74:22:72:
e8:b0:c2:ef:7a:1f:3c:f9:72:37:01:41:73:05:d0:
63:2c:b3:9e:4c:83:88:f0:85:bd:74:c8:55:56:75:
62:a1:18:3c:7d:1f:48:58:ec:41:db:e2:86:ba:50:
5d:cd:db:bb:4f:5a:bc:4a:e9:13:6b:14:6f:50:fe:
fc:c2:3e:73:b7:f0:4c:da:1b:9e:0d:e4:0b:a5:0e:
5e:d2:3d:88:c9:70:0c:ba:9a:3f:9c:25:a7:e8:c5:
1d:9a:23:c2:7a:6d:b2:f5:a7:8f:29:91:4f:78:64:
87:48:89:a0:1b:c7:54:52:fb:44:fe:1a:bd:cd:0c:
13:33:8b:1c:59:a4:36:fd:36:3f:7d:c8:61:0b:4f:
ce:2e:f2:9c:eb:c7:f6:6d:64:88:74:19:b5:77:3e:
8b:ce:41:7f:b3:34:33:65:e5:e0:e7:21:eb:df:a8:
34:e1:7a:44:6c:0e:94:62:45:6f:73:53:18:19:88:
2b:f8:6b:bf:55:0c:0e:e7:ed:1a:a6:43:3e:79:69:
ba:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:FF:C0:09:FF:24:79:C8:BC:0E:F5:E1:37:02:C4:B4:4A:2E:3F:8B
X509v3 Authority Key Identifier:
keyid:8B:76:B8:26:95:39:8F:31:3A:F2:8A:E7:E5:4F:A9:B6:03:6F:0B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/8B76B82695398F313AF28AE7E54FA9B6036F0B82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B76B82695398F313AF28AE7E54FA9B6036F0B82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/34352e3138382e382e302f32342d3234203d3e20323639353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.8.0/24
Signature Algorithm: sha256WithRSAEncryption
80:aa:45:74:2b:c1:e1:3a:85:11:64:d1:fc:7a:09:31:b9:f9:
96:b2:06:bc:a3:0d:04:83:1d:09:f2:1b:11:43:d7:17:f6:f1:
f4:90:6f:16:cd:a5:b6:a2:cc:24:1d:17:17:e9:d7:ce:7a:fd:
d7:56:54:61:b6:80:73:c0:4b:75:6b:88:d2:c5:3a:a6:c7:89:
5b:7f:5c:e3:12:6b:e5:0b:3b:00:ba:de:3e:33:f5:d9:0d:88:
8e:6c:0e:d6:c4:9b:9d:88:5c:a8:3e:b6:7b:fd:58:9b:c0:90:
e4:9a:77:60:97:d6:f7:4f:aa:42:ab:a0:94:03:87:ed:c1:e2:
fd:55:93:3a:50:34:2b:08:0a:a0:54:2b:47:1d:96:9b:c9:8f:
73:7b:fc:01:ab:85:5a:c6:47:db:28:59:8a:53:65:74:79:a6:
c4:cb:6f:05:58:c1:71:03:6a:1d:27:16:5f:4c:7a:52:0f:25:
60:04:53:cd:c9:bd:5c:03:f9:55:bf:08:11:c0:c2:a1:f6:04:
5a:4b:9c:66:46:40:36:fc:8d:8d:91:8f:77:12:8e:24:75:bc:
8f:32:2c:20:1c:0d:31:3c:1e:f3:fe:09:bd:76:b8:be:cb:e1:
5a:53:e4:3f:48:0d:9d:4a:01:ae:f5:92:ed:97:eb:ae:fa:13:
bf:d9:9c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:41 2025 by rpki-client