Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32322d3232203d3e20323638303830.roa
File: 34352e3136392e342e302f32322d3232203d3e20323638303830.roa (raw, json)
Hash identifier: H9UbKOyPcQUKZmQi/ZI9+Orzc71JS3ypa0H/QT5uhxI=
Subject key identifier: A2:ED:67:8B:20:74:73:E8:75:AA:E3:51:8A:E7:85:E6:20:55:30:56
Certificate issuer: /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial: 3D6E094C4FD06E943D11942F9063DA870756864C
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32322d3232203d3e20323638303830.roa
Signing time: Thu 20 Feb 2025 12:33:09 +0000
ROA not before: Thu 20 Feb 2025 12:28:09 +0000
ROA not after: Thu 19 Feb 2026 12:33:09 +0000
asID: 268080
IP address blocks: 45.169.4.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:6e:09:4c:4f:d0:6e:94:3d:11:94:2f:90:63:da:87:07:56:86:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Validity
Not Before: Feb 20 12:28:09 2025 GMT
Not After : Feb 19 12:33:09 2026 GMT
Subject: CN=A2ED678B207473E875AAE3518AE785E620553056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:e2:40:1e:37:f6:64:7a:fc:df:01:b2:32:
96:a4:a9:0c:2c:be:09:24:2a:0b:28:78:f7:62:6b:
26:84:f6:1a:12:4f:18:40:a6:8c:f9:0b:31:62:00:
4c:d2:ea:34:38:64:da:b7:36:17:b5:d6:18:56:4f:
f8:0e:92:14:86:7c:9f:4e:10:a9:1a:f1:d9:51:fb:
2c:04:42:06:76:a7:4d:d9:dc:35:8e:4b:9f:b8:e8:
9f:d4:28:88:dd:c0:63:c9:33:64:a2:82:0a:25:6e:
6e:df:c6:05:b8:19:f2:54:22:4a:b9:1b:cd:46:b4:
21:b4:d0:ef:59:a5:72:a5:44:1c:4c:45:4d:61:9e:
e2:47:6a:e4:38:fb:b4:97:73:82:f6:cb:1a:e7:ed:
58:05:0c:9f:47:64:e5:10:09:18:cc:72:15:98:a1:
be:38:fb:7c:43:26:01:0b:41:91:e0:c8:88:e2:ad:
d1:c4:e9:4d:53:76:d0:32:d8:c0:bb:28:28:21:8c:
b5:d6:d3:b8:30:b1:59:d1:d4:9b:2d:e9:ea:0e:db:
d4:57:29:37:1d:7b:ea:a3:90:8c:46:3d:c7:56:15:
34:c5:1e:b1:54:4b:dc:a1:18:21:d5:c2:d8:a8:ff:
19:c3:0c:07:91:a8:e1:40:a8:a2:2d:12:07:0b:5f:
5b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:67:8B:20:74:73:E8:75:AA:E3:51:8A:E7:85:E6:20:55:30:56
X509v3 Authority Key Identifier:
keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e342e302f32322d3232203d3e20323638303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.4.0/22
Signature Algorithm: sha256WithRSAEncryption
06:54:e4:00:28:0c:5d:5c:87:95:0a:66:5c:8d:e9:17:6a:e4:
97:db:fc:e1:15:6b:8c:18:9f:99:ef:3c:d0:c7:bd:41:e4:a9:
c0:fd:12:5d:23:86:77:a2:c2:b3:6a:bf:72:55:38:5c:ec:33:
45:04:ee:c2:1d:4d:a3:ce:80:ea:22:a9:05:7d:a8:23:a9:ef:
0a:3b:91:e0:eb:03:5b:cc:5d:44:8d:f2:9b:f8:f5:31:3b:c4:
e6:9e:61:a3:de:79:36:1c:e5:38:f8:2a:1e:7e:8e:0b:ec:f0:
ac:d4:4f:1d:73:47:92:85:a9:ef:a3:a7:02:ec:2e:be:44:db:
eb:a7:dc:21:21:ce:9b:0f:13:28:37:27:9f:79:49:8f:6f:1c:
25:5d:c3:42:3a:c5:9b:fb:e9:e3:5b:79:09:d2:b7:0c:3f:22:
10:99:82:13:bc:15:e5:65:4b:80:e8:39:83:77:e0:8d:41:cb:
1a:12:b5:54:22:da:e4:2e:28:2d:b8:aa:3a:00:ad:04:ab:e6:
2b:1b:01:06:50:62:4f:f7:0d:8a:4c:bc:34:9e:68:5f:2a:83:
50:a6:aa:6e:69:c2:35:2e:64:2d:ba:58:0a:b9:51:57:e3:eb:
33:59:5e:8a:a0:35:13:f3:cb:4a:fe:5e:df:59:cf:22:5a:55:
38:de:72:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:28:19 2025 by rpki-client