Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/34352e372e3130302e302f32322d3234203d3e20323636353833.roa
File: 34352e372e3130302e302f32322d3234203d3e20323636353833.roa (raw, json)
Hash identifier: 5AYnkvmjcDyAPzw3DqQAb+a8XBraOCw+w8ZlncQU4Xw=
Subject key identifier: 21:B1:D2:1F:F5:AE:A5:07:32:15:60:F4:73:79:DD:C3:1D:80:1E:E8
Certificate issuer: /CN=9BE05977B60E4F720D421198D070234D3CC75446
Certificate serial: 0CF26A6B4AFCE161A25648B660351C020BE9CBFA
Authority key identifier: 9B:E0:59:77:B6:0E:4F:72:0D:42:11:98:D0:70:23:4D:3C:C7:54:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE05977B60E4F720D421198D070234D3CC75446.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/34352e372e3130302e302f32322d3234203d3e20323636353833.roa
Signing time: Mon 23 Dec 2024 18:49:22 +0000
ROA not before: Mon 23 Dec 2024 18:44:22 +0000
ROA not after: Mon 22 Dec 2025 18:49:22 +0000
asID: 266583
IP address blocks: 45.7.100.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f2:6a:6b:4a:fc:e1:61:a2:56:48:b6:60:35:1c:02:0b:e9:cb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BE05977B60E4F720D421198D070234D3CC75446
Validity
Not Before: Dec 23 18:44:22 2024 GMT
Not After : Dec 22 18:49:22 2025 GMT
Subject: CN=21B1D21FF5AEA507321560F47379DDC31D801EE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:09:f0:bf:aa:6a:f7:a9:5e:b6:a9:6c:07:
ff:d3:44:e9:46:72:43:93:ee:28:b8:bc:d0:c2:a4:
4e:f3:65:ad:d9:d8:61:1a:63:50:db:1d:3d:32:14:
85:8b:90:74:d1:57:4f:d5:76:eb:c0:ba:bf:91:82:
94:a7:10:41:9a:3b:2b:f7:1a:37:5a:09:57:7b:4d:
71:30:bf:d4:4f:b5:2f:ac:10:ed:c7:ae:7c:82:7a:
e4:da:11:3c:c1:ea:93:e1:cc:cf:02:4d:25:d9:8c:
53:a2:44:5e:6e:88:5b:fa:26:f0:39:d0:c6:54:42:
4c:90:e0:01:d3:f7:b4:dd:a6:0e:8a:f3:25:d8:9b:
ab:31:67:4d:34:60:cf:f4:0e:b4:1d:0d:7f:f5:50:
47:56:85:1c:9f:c8:4c:7b:1b:e1:67:06:f9:e7:c6:
3b:c6:1e:6a:30:c7:83:94:5d:f9:b2:06:e2:85:50:
03:4b:6f:a5:ff:8d:3f:4a:9d:65:02:20:0b:d8:ed:
b9:25:30:9c:aa:25:3c:fa:49:cf:57:f7:b8:8e:63:
dc:eb:ff:23:62:c5:f7:52:04:b2:f6:4b:0e:56:52:
56:93:77:7d:f1:ee:42:62:e4:53:b7:53:a8:7a:6c:
63:cc:7c:1b:06:23:f7:6f:9b:28:4f:36:b8:aa:aa:
3b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B1:D2:1F:F5:AE:A5:07:32:15:60:F4:73:79:DD:C3:1D:80:1E:E8
X509v3 Authority Key Identifier:
keyid:9B:E0:59:77:B6:0E:4F:72:0D:42:11:98:D0:70:23:4D:3C:C7:54:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/9BE05977B60E4F720D421198D070234D3CC75446.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BE05977B60E4F720D421198D070234D3CC75446.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5DnLH6DsGFxeaSGWVy5NZFPNCHayCf8s7JHikWfKuAp/0/34352e372e3130302e302f32322d3234203d3e20323636353833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.100.0/22
Signature Algorithm: sha256WithRSAEncryption
90:fd:79:c4:85:de:05:77:87:24:e8:f0:31:6d:51:38:aa:96:
32:d6:f6:50:2c:88:14:c8:5d:42:ab:e9:25:f7:ca:ac:f4:80:
be:d7:0a:15:c8:ec:07:f4:0d:63:76:95:ed:02:d0:a0:14:5c:
04:4f:52:f4:0e:92:ad:dc:75:0a:55:a8:ad:64:33:b9:4c:5f:
b5:69:c0:1a:17:9e:0a:0a:57:a1:11:f8:bd:36:bd:a5:06:4c:
0b:f8:e2:a4:2e:56:ed:83:83:be:69:20:9a:d9:cf:af:e9:7c:
49:0a:61:93:7a:b4:b4:b0:fa:fc:19:bc:2d:d1:b9:b3:28:1c:
f6:f0:c0:f7:04:e8:c0:56:ed:63:cf:b7:53:78:ee:23:d2:eb:
43:47:f8:b7:93:fb:5d:63:b6:cc:a8:f3:8e:fd:e6:6b:fb:7d:
76:47:85:4f:e6:8a:75:13:6b:fc:83:f0:1f:a6:42:59:33:37:
03:6d:e4:45:37:a7:dd:2b:06:5b:57:d1:7d:cd:63:f0:97:6c:
6b:2a:db:ed:d7:13:b5:57:a4:d4:f8:ff:53:db:c5:f5:63:09:
f8:a8:df:02:bb:2f:3e:91:f3:d3:f5:be:14:da:ed:6a:bd:ae:
05:dc:d8:0c:cf:fd:04:6b:d5:0a:9c:62:aa:b1:4a:38:ec:fc:
eb:d0:f8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:08:41 2025 by rpki-client