Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
File: 34352e3136382e39342e302f32342d3234203d3e20323733333932.roa (raw, json)
Hash identifier: gt5tqBEg3jFXShQNm+YBRk3Z1Yro4CB4g8YQR7lt3B0=
Subject key identifier: E4:52:99:FF:D4:99:EB:D3:00:33:B3:C6:ED:88:91:52:51:F0:3B:B2
Certificate issuer: /CN=98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD
Certificate serial: 01FD7321BE419E6757144DC06F59DC34FEA8013C
Authority key identifier: 98:F1:0F:1A:F7:DA:0A:16:BA:10:2F:7C:E8:83:66:D0:DC:7A:8E:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
Signing time: Tue 18 Feb 2025 08:43:35 +0000
ROA not before: Tue 18 Feb 2025 08:38:35 +0000
ROA not after: Tue 17 Feb 2026 08:43:35 +0000
asID: 273392
IP address blocks: 45.168.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:fd:73:21:be:41:9e:67:57:14:4d:c0:6f:59:dc:34:fe:a8:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD
Validity
Not Before: Feb 18 08:38:35 2025 GMT
Not After : Feb 17 08:43:35 2026 GMT
Subject: CN=E45299FFD499EBD30033B3C6ED88915251F03BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:df:29:52:b0:fd:37:4b:e2:a4:af:10:b4:8c:
7b:6b:01:6b:16:a4:f2:32:5f:a6:7d:82:bf:8d:40:
56:42:0a:71:78:dd:ca:6c:35:0b:76:57:af:37:ea:
fd:31:4b:53:b8:68:45:a5:85:69:07:65:d5:c8:6e:
89:c5:1b:95:fb:c1:86:0c:ef:df:e0:bf:8e:41:7b:
d1:32:ff:06:d5:01:ac:c9:58:5b:b2:dd:25:35:67:
7e:c4:5e:d4:bb:8c:75:51:23:78:2b:47:06:e7:71:
71:62:eb:dc:c5:d3:41:ea:e3:76:6c:03:37:ba:96:
ff:c0:60:f9:d4:08:ea:23:63:7c:df:b9:bb:be:ae:
c1:a4:68:18:a8:17:30:37:de:40:41:1e:9f:f0:65:
8b:a0:23:cf:37:29:55:5a:85:09:69:85:42:3b:b9:
ad:67:ac:02:3b:e8:12:7f:0a:d1:4a:0d:30:26:ae:
16:0e:cb:cb:42:3b:fd:40:45:6f:6c:1e:7d:e4:52:
79:f5:42:2a:03:d8:9d:47:ef:a7:94:45:da:26:41:
69:03:22:65:5d:2b:5c:e0:74:ae:87:28:b5:48:d7:
fe:c6:4f:a7:13:85:7d:0b:dd:8c:52:e5:e0:cd:03:
86:fa:2e:8b:af:a0:a0:4a:ec:9e:a6:a6:cc:53:98:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:52:99:FF:D4:99:EB:D3:00:33:B3:C6:ED:88:91:52:51:F0:3B:B2
X509v3 Authority Key Identifier:
keyid:98:F1:0F:1A:F7:DA:0A:16:BA:10:2F:7C:E8:83:66:D0:DC:7A:8E:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/98F10F1AF7DA0A16BA102F7CE88366D0DC7A8ECD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H5YWuNT1D2qDSD4A8MJzAbT7YtPiBh6Y1rbQPgAxtRHW/0/34352e3136382e39342e302f32342d3234203d3e20323733333932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.94.0/24
Signature Algorithm: sha256WithRSAEncryption
29:aa:fa:84:de:07:28:29:98:ae:eb:50:2a:96:13:c4:aa:d7:
80:01:5e:8b:b4:d5:2d:34:90:e3:da:b9:6c:d1:e0:15:5d:e3:
41:f2:1d:19:5f:04:04:31:df:5f:aa:98:ae:2a:85:e0:c8:d3:
02:bb:5b:e1:af:64:cd:98:f4:3a:d7:6a:f5:ea:32:ba:f8:d1:
15:73:f6:35:7a:3e:90:56:2d:c6:72:d6:aa:b7:fb:83:3e:a2:
98:f8:ac:76:13:d7:b6:20:af:c8:11:33:cc:51:c3:1a:32:ea:
94:16:5b:2d:97:e7:e1:00:58:b8:32:5b:ab:d3:3f:6b:30:e9:
a1:8f:c7:2e:e0:84:b0:ad:a4:87:e5:e4:d8:0f:77:53:ae:71:
b9:b1:70:2b:59:7e:ca:d4:7c:5b:b8:17:b8:2a:72:20:e6:90:
8e:6d:95:5f:d2:b5:0d:7e:6a:f9:56:e2:76:ff:86:e5:bf:70:
c2:0c:4a:fd:96:5e:70:9e:35:77:6a:24:7f:6d:40:0d:5c:a6:
3a:b1:55:b3:13:39:c1:c1:4f:1e:43:36:57:fd:c3:b1:57:5d:
42:87:ca:48:aa:48:73:1f:29:7a:c6:d6:92:5c:c5:b2:4b:a6:
d6:a6:fd:e9:48:8c:56:83:33:db:ee:db:c9:00:fe:b8:29:61:
be:1a:c3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:35 2025 by rpki-client