Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/34352e3138302e34302e302f32322d3234203d3e20323639313330.roa
File: 34352e3138302e34302e302f32322d3234203d3e20323639313330.roa (raw, json)
Hash identifier: VZ2cMI6S9LYeAGtBJh97GMD8JWinrFonrHDbQX8iwCM=
Subject key identifier: 99:B8:A7:50:44:BC:24:EE:CD:D1:49:AD:5F:1B:26:31:E2:F4:7F:49
Certificate issuer: /CN=4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE
Certificate serial: 06A706F5069AA979A8E8682863CA52BF742C8609
Authority key identifier: 4F:B4:FF:F1:F5:39:1A:17:BF:21:8A:7E:6F:C1:4F:8E:E7:F4:02:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/34352e3138302e34302e302f32322d3234203d3e20323639313330.roa
Signing time: Fri 17 Jan 2025 14:24:22 +0000
ROA not before: Fri 17 Jan 2025 14:19:22 +0000
ROA not after: Fri 16 Jan 2026 14:24:22 +0000
asID: 269130
IP address blocks: 45.180.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:a7:06:f5:06:9a:a9:79:a8:e8:68:28:63:ca:52:bf:74:2c:86:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE
Validity
Not Before: Jan 17 14:19:22 2025 GMT
Not After : Jan 16 14:24:22 2026 GMT
Subject: CN=99B8A75044BC24EECDD149AD5F1B2631E2F47F49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:94:5d:bd:77:1a:88:75:42:89:a2:f7:45:9a:
29:50:5b:fe:6a:0b:ac:a6:db:f5:86:5d:ed:ec:f8:
9f:61:1b:98:6f:69:1d:8f:9c:0f:ac:9c:06:b6:fe:
60:0e:09:99:f5:89:52:04:49:c7:38:fe:46:c6:68:
47:91:7b:94:0a:24:87:05:75:e9:ab:1f:3f:11:71:
f8:15:5c:77:b7:47:b6:57:72:d7:98:df:a0:28:d2:
0a:f1:9f:bf:98:ea:0b:57:b9:90:b8:ae:d5:4d:3b:
a3:b1:da:af:4b:ff:41:5e:f7:91:3f:e9:ef:bf:ae:
9a:88:8e:d2:85:e2:1f:4a:36:4f:02:cd:8a:fc:3d:
06:8f:55:21:c2:68:a8:49:9d:62:59:67:46:9c:03:
d3:a0:45:f1:4b:5f:9c:44:9e:ea:fb:cc:cf:c3:cb:
22:8f:dd:49:45:bd:66:9d:d0:97:37:6d:1e:bc:19:
2c:24:c7:df:d7:42:9e:bf:54:60:96:ba:cc:bf:69:
8f:38:39:fd:15:56:14:d3:b0:3d:8f:ce:10:c8:08:
88:18:0d:b2:c3:31:a0:d1:fb:f5:19:6d:3e:8f:0d:
57:cd:e8:8b:f6:30:77:73:b8:fc:61:91:fc:48:c4:
0d:57:ab:cf:01:fa:2c:c3:78:5e:04:9d:fa:f6:e5:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B8:A7:50:44:BC:24:EE:CD:D1:49:AD:5F:1B:26:31:E2:F4:7F:49
X509v3 Authority Key Identifier:
keyid:4F:B4:FF:F1:F5:39:1A:17:BF:21:8A:7E:6F:C1:4F:8E:E7:F4:02:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FB4FFF1F5391A17BF218A7E6FC14F8EE7F402BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gd3rXtCSgsycaUMbAV7yTtw1cMNH3taiGzVWiYRhwPFv/0/34352e3138302e34302e302f32322d3234203d3e20323639313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.180.40.0/22
Signature Algorithm: sha256WithRSAEncryption
96:67:0e:3c:af:ab:fa:f5:5d:07:a0:37:88:d1:09:74:f4:a6:
01:58:f8:ca:01:d8:6e:78:67:f5:4d:91:cb:c3:1a:c0:0a:a8:
82:0b:d8:c4:61:80:4e:b7:2b:1b:50:34:84:dc:2c:b9:4e:f8:
e6:f2:14:86:d4:3e:5a:dc:7c:d0:ac:83:53:e0:64:d0:a2:1b:
5f:99:7c:34:39:bf:8f:d0:8d:9e:89:15:5c:8e:aa:29:02:36:
c3:a4:d8:29:60:41:c8:5a:ae:91:79:64:b5:68:ab:ee:2e:41:
08:ae:d5:ce:af:6e:c0:de:ec:c4:a3:09:95:c1:bf:cd:f2:37:
b4:f7:6d:be:81:cb:30:7c:c6:43:8a:8a:c1:32:ad:f1:1a:ff:
a6:52:d1:13:43:e2:29:12:10:14:ed:bf:17:08:a0:08:da:9e:
50:e6:48:98:6a:e1:01:7f:46:58:0c:59:06:10:b8:33:bd:7d:
6f:e7:83:2b:ce:f8:b7:c7:a6:79:5a:18:b9:ec:b5:27:57:09:
a0:a7:7c:d6:b1:cc:61:11:70:74:9d:5e:19:ea:9a:c1:0d:3e:
39:c5:07:f8:db:85:91:57:6e:be:f5:e5:bb:3c:89:54:f2:ae:
9c:38:e8:18:e9:2e:07:6c:16:32:e8:df:8c:48:af:34:e9:3e:
f5:c0:d8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:38 2025 by rpki-client