Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa
File: 34352e3138382e32342e302f32322d3332203d3e20323633393435.roa (raw, json)
Hash identifier: lfLBExi7aLPt672tmYUHeQIJlNv5s8Hx5DVc0Wer/Iw=
Subject key identifier: 65:0C:22:77:35:25:ED:0B:7C:F6:33:DD:20:D8:F0:5D:D7:46:20:48
Certificate issuer: /CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Certificate serial: 67CEED1D073E44243BAF049437E6C0D2723214F3
Authority key identifier: CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa
Signing time: Thu 06 Mar 2025 06:49:07 +0000
ROA not before: Thu 06 Mar 2025 06:44:07 +0000
ROA not after: Thu 05 Mar 2026 06:49:07 +0000
asID: 263945
IP address blocks: 45.188.24.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:ce:ed:1d:07:3e:44:24:3b:af:04:94:37:e6:c0:d2:72:32:14:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CCDFB25284D1411A05C2D5A98169BAA090EEF4E1
Validity
Not Before: Mar 6 06:44:07 2025 GMT
Not After : Mar 5 06:49:07 2026 GMT
Subject: CN=650C22773525ED0B7CF633DD20D8F05DD7462048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:eb:eb:13:06:3a:a4:29:f7:07:85:4c:93:47:
cb:8d:da:76:8e:fc:08:4c:84:c5:0e:b9:3a:99:eb:
7f:2b:0f:19:cc:55:94:5f:b7:05:9f:25:39:6e:cc:
f6:ad:82:45:f3:49:ee:d4:df:71:d3:a3:26:3e:ba:
cc:fa:40:b8:65:d4:dd:60:68:3b:b1:22:13:72:49:
97:03:85:67:c8:e9:ac:d7:b5:60:fd:8e:3f:2b:32:
96:2b:43:6f:7d:5d:d7:2c:06:99:e6:65:bd:d6:e5:
c3:cb:90:a3:5c:c0:79:b2:b2:ad:b4:ba:81:56:2f:
c1:0c:c2:97:1a:88:e3:c2:5e:a7:20:f8:b4:28:f6:
04:0a:00:67:f1:ff:02:d6:8c:04:8c:0f:e1:ea:4a:
e1:6f:67:68:dc:17:ad:d2:2c:56:ee:43:f3:f8:52:
a8:6d:3b:89:cc:5c:6b:e5:b5:10:a5:f4:04:ef:aa:
09:79:ce:20:d7:74:63:8e:39:3f:4c:98:e6:02:5c:
d8:e9:c2:b4:72:0f:d4:06:f8:e3:4a:6e:70:5e:38:
ff:0e:3e:c0:d4:2f:0e:ec:24:07:81:d6:18:7d:6b:
a5:6b:23:62:de:0b:f2:fa:d4:ac:1f:94:ad:21:54:
fb:17:ed:6d:4d:0c:ba:71:c2:1e:3f:c0:00:2c:f8:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0C:22:77:35:25:ED:0B:7C:F6:33:DD:20:D8:F0:5D:D7:46:20:48
X509v3 Authority Key Identifier:
keyid:CC:DF:B2:52:84:D1:41:1A:05:C2:D5:A9:81:69:BA:A0:90:EE:F4:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CCDFB25284D1411A05C2D5A98169BAA090EEF4E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/1/34352e3138382e32342e302f32322d3332203d3e20323633393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.24.0/22
Signature Algorithm: sha256WithRSAEncryption
06:e8:77:ad:4f:2c:3a:92:dd:b7:9b:91:53:0d:8b:bc:a6:75:
bc:47:2e:d3:72:36:02:87:36:3c:7e:5d:6e:15:8d:f3:6f:e9:
82:01:9a:48:ba:f6:33:03:4e:20:40:dc:e6:40:27:06:4c:b0:
32:92:53:e3:71:7c:ab:57:d7:d7:b6:c4:86:c6:38:39:d1:f5:
99:d9:ee:ff:60:05:a6:cb:72:af:40:ce:6d:3d:45:8f:9c:ad:
1d:66:ff:b7:00:4b:31:2a:53:cf:8c:a4:4f:02:67:b5:23:b9:
5d:1a:44:2f:52:b4:d1:3c:c2:99:09:9c:4c:13:fb:59:21:18:
5e:fc:e4:22:01:7a:cb:2f:e9:9f:44:f9:3c:89:0d:1b:e7:16:
e3:e5:67:6f:dc:75:2a:f1:14:24:84:2d:c4:58:b6:48:6d:b4:
a8:7d:fe:7f:de:9a:8e:d5:75:f6:e1:60:0c:e2:fd:75:cd:58:
3a:2b:1d:8b:6b:85:18:ce:5b:d6:31:f3:35:16:e9:c9:2e:9b:
3c:f5:1c:60:61:32:7b:a1:10:f7:1d:ae:65:ee:15:1c:1e:bd:
b9:e9:0e:16:b5:a1:c3:ac:77:aa:36:d7:80:8d:28:16:fa:39:
4d:0d:8f:53:e3:69:f5:74:8e:5c:db:e0:3a:de:44:23:87:54:
b5:cd:6c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 06:40:57 2025 by rpki-client