Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e372e302f32342d3234203d3e20323638303830.roa
File: 34352e3136392e372e302f32342d3234203d3e20323638303830.roa (raw, json)
Hash identifier: g9bVrtzLwERoGomgWToy0lYhsrjQe0WyuUyS/9a7aMs=
Subject key identifier: 3B:F1:2D:8F:01:9C:16:65:7E:8A:D9:2C:B1:24:76:D6:CB:E3:39:97
Certificate issuer: /CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Certificate serial: 17EEF9AC9958A7955AD4E650AA8D0D4FE05503D0
Authority key identifier: 84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e372e302f32342d3234203d3e20323638303830.roa
Signing time: Wed 19 Feb 2025 11:44:00 +0000
ROA not before: Wed 19 Feb 2025 11:39:00 +0000
ROA not after: Wed 18 Feb 2026 11:44:00 +0000
asID: 268080
IP address blocks: 45.169.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ee:f9:ac:99:58:a7:95:5a:d4:e6:50:aa:8d:0d:4f:e0:55:03:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8472ED54B788162A1C8624B94DB27D75F93FC1EE
Validity
Not Before: Feb 19 11:39:00 2025 GMT
Not After : Feb 18 11:44:00 2026 GMT
Subject: CN=3BF12D8F019C16657E8AD92CB12476D6CBE33997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:0c:55:21:1d:1d:c8:83:21:99:09:c3:d2:
df:b2:07:2b:16:27:41:78:f9:78:9b:d6:99:2e:f6:
54:fe:ac:3f:d9:91:fe:65:8d:ae:ab:90:69:37:be:
6d:0f:f9:e3:9c:5a:44:2f:0d:9e:1e:a2:d3:30:f6:
71:15:53:ef:5f:6d:7b:61:fa:a2:c7:3a:94:63:8b:
64:b9:68:f4:80:df:75:1e:62:5d:8b:31:48:6c:4c:
8a:57:61:e1:34:ce:40:6e:81:05:b9:45:cc:c6:cf:
70:78:0a:9b:e9:29:79:ef:fb:40:80:68:aa:33:38:
c4:bd:1f:f6:d1:c7:7d:3e:35:4a:d8:db:ad:c0:c8:
40:a1:52:c3:42:63:44:47:da:27:5c:68:03:ba:f2:
2b:f2:53:09:00:5b:a6:93:f1:8e:d3:6a:b9:8c:55:
c6:0f:3b:da:93:a5:f9:4d:b1:df:db:2d:5f:56:c5:
a2:f6:72:c0:c6:e4:d6:fa:32:fa:40:87:3f:fd:cb:
45:38:1a:00:db:45:ea:ff:2e:29:47:65:8a:00:c9:
b4:61:c2:6c:f3:4d:33:4d:7c:2b:51:fe:55:c1:c9:
20:5d:20:be:2c:ef:85:65:ba:58:f2:28:e8:da:c2:
72:7a:49:1d:7d:15:27:c1:b1:a1:84:6f:cd:3b:f1:
f1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:2D:8F:01:9C:16:65:7E:8A:D9:2C:B1:24:76:D6:CB:E3:39:97
X509v3 Authority Key Identifier:
keyid:84:72:ED:54:B7:88:16:2A:1C:86:24:B9:4D:B2:7D:75:F9:3F:C1:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/8472ED54B788162A1C8624B94DB27D75F93FC1EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8472ED54B788162A1C8624B94DB27D75F93FC1EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ez6uJnA2BjjJBF2PVNVFkJyVDoiVb1SNaGzGxnbZdW87/0/34352e3136392e372e302f32342d3234203d3e20323638303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:45:11:57:5f:52:2f:fd:e7:40:4b:7a:2b:54:59:5c:71:47:
84:8b:a2:f7:ad:f8:17:92:ac:b3:a4:db:b8:a4:a5:ce:08:46:
b5:19:a6:29:ec:4c:ff:42:84:5d:61:56:a0:49:3e:19:bd:ec:
21:7d:60:43:e1:9e:a0:02:0f:35:fd:d4:cb:78:f3:ad:1b:7c:
45:b1:86:c8:52:67:aa:8d:c3:9d:7d:d6:0b:1e:e2:0f:74:ed:
ad:7e:3a:fe:d8:7b:86:e1:1e:b3:72:b4:a1:41:fe:13:49:66:
ef:70:4e:0a:5a:72:18:59:81:bd:49:92:dc:56:88:b1:cf:5c:
22:65:8c:1a:55:c2:0b:fe:05:67:a2:6e:d7:17:c9:30:3d:9f:
fe:3c:73:84:82:49:b5:41:85:f7:71:3f:85:00:28:e2:30:3f:
6d:c6:11:e6:13:46:68:f7:b1:86:f2:b7:df:d8:89:99:d5:32:
31:ec:2f:9b:6e:8e:17:71:2c:7e:0c:bf:a2:05:01:7b:f7:42:
58:fc:95:c2:3c:8e:59:14:68:ff:e2:6f:b6:32:4e:da:1c:cf:
5b:13:79:98:c7:f8:42:4b:99:9f:6e:39:19:3b:66:24:e2:61:
e9:d2:88:03:2a:cb:14:45:6c:15:7a:9a:1b:a8:28:ab:35:f2:
7d:6a:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:25 2025 by rpki-client