Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/34352e37312e38342e302f32322d3234203d3e20323637363032.roa
File: 34352e37312e38342e302f32322d3234203d3e20323637363032.roa (raw, json)
Hash identifier: 1NxEPZFmMr8y2/dlgVX6k0u/Jfu4X7J3Z/0pEUeqw54=
Subject key identifier: 4F:8C:09:65:4D:7F:79:F2:65:21:13:9B:D8:44:A2:99:34:F1:27:80
Certificate issuer: /CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Certificate serial: 13B9BDA5469E322D02D5402ACB082C715979EA3A
Authority key identifier: 2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/34352e37312e38342e302f32322d3234203d3e20323637363032.roa
Signing time: Thu 06 Mar 2025 08:07:40 +0000
ROA not before: Thu 06 Mar 2025 08:02:40 +0000
ROA not after: Thu 05 Mar 2026 08:07:40 +0000
asID: 267602
IP address blocks: 45.71.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:b9:bd:a5:46:9e:32:2d:02:d5:40:2a:cb:08:2c:71:59:79:ea:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CA2E9742BAFB03FFF8B4807AB9075FFCC310370
Validity
Not Before: Mar 6 08:02:40 2025 GMT
Not After : Mar 5 08:07:40 2026 GMT
Subject: CN=4F8C09654D7F79F26521139BD844A29934F12780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:dd:42:c4:93:50:29:b8:84:ce:74:09:a9:d7:
26:f7:ea:37:d9:72:80:ca:b0:b9:74:c4:e7:bc:90:
e0:ab:44:fc:d6:b5:ff:ff:34:6f:c0:e1:3b:f9:ea:
c3:65:e6:71:a9:07:0a:6e:c3:be:ae:2b:f5:aa:71:
85:6e:8c:da:57:2a:25:ae:18:b2:3b:0e:d1:cc:2c:
83:8c:ee:36:c7:d2:5f:fa:07:5e:63:ca:2e:34:e9:
fb:e1:f9:ef:96:29:e9:ec:a7:f0:37:62:a0:e9:cc:
2e:ba:c0:d8:3e:b9:d4:e7:27:11:40:3f:dc:13:38:
92:1b:20:7f:64:fa:35:37:f0:d0:56:b0:e6:42:48:
e9:ff:0b:77:6c:58:0b:6b:a9:62:5b:db:f5:8c:8c:
e4:33:a7:09:70:d8:fa:56:96:bc:6a:67:b2:a3:8b:
95:29:6b:55:33:d5:d6:d4:8d:85:7e:52:f5:cf:98:
92:f1:dd:96:21:7e:db:a8:a8:c0:ab:75:28:ea:c1:
b3:21:71:02:18:c9:e3:fb:d7:ee:16:c4:04:19:58:
c2:8b:a1:6f:59:b1:32:e5:71:5b:60:65:07:4c:6c:
32:72:35:cc:9e:2e:76:f5:32:0b:25:9f:52:fd:5e:
4f:5a:a0:14:01:af:2f:45:e1:43:8e:ca:ae:7f:d4:
c5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8C:09:65:4D:7F:79:F2:65:21:13:9B:D8:44:A2:99:34:F1:27:80
X509v3 Authority Key Identifier:
keyid:2C:A2:E9:74:2B:AF:B0:3F:FF:8B:48:07:AB:90:75:FF:CC:31:03:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2CA2E9742BAFB03FFF8B4807AB9075FFCC310370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H9GR54GwqyqBgVYj1eHDXfNXS1h7qhaFLEnrqnBQqCAM/1/34352e37312e38342e302f32322d3234203d3e20323637363032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.84.0/22
Signature Algorithm: sha256WithRSAEncryption
41:7a:c1:26:a1:be:df:9b:67:a6:35:9d:a7:25:73:65:b0:5c:
60:d3:5d:c1:7a:fb:9e:3c:65:19:52:7a:bd:03:66:4e:57:e3:
40:01:10:34:57:e7:a5:ad:e8:90:09:0c:9e:bd:c9:91:05:12:
2b:61:ad:bb:ff:f1:d5:4a:c0:34:70:f5:7b:00:f6:47:dc:1b:
26:45:bf:4e:4b:83:82:a1:5a:e2:96:e4:70:28:93:5c:05:4e:
8e:70:1a:a3:ef:0c:29:52:b2:07:41:7c:26:a6:bb:82:3f:4d:
72:70:78:1b:52:db:3f:66:94:b3:2d:b7:4e:6e:0f:93:ee:64:
85:8b:d1:f4:72:ec:8d:b8:1a:70:f7:3e:2f:2f:bc:20:25:cb:
bb:04:79:58:85:8f:64:af:02:c9:37:a7:b8:93:9c:61:5a:11:
a8:10:32:7c:74:96:bc:fd:50:a0:f8:83:b6:fd:c1:11:23:f5:
c0:74:bc:0e:29:f6:80:5b:f4:fd:6f:66:77:a6:59:32:22:00:
e8:2e:5e:2f:8d:ca:2d:46:40:7b:4a:76:e4:af:6b:5a:41:11:
77:af:f7:dd:77:08:32:ff:18:85:e1:94:43:f0:eb:f7:91:a2:
f9:ef:22:1b:de:ca:1e:5d:96:5d:c5:66:65:bd:74:a4:ab:00:
27:31:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:42:05 2025 by rpki-client