Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31382e302f32332d3233203d3e20323638343436.roa
File: 34352e3136312e31382e302f32332d3233203d3e20323638343436.roa (raw, json)
Hash identifier: cc802LqqKsx9adBojiHBF1OMXl6Go/IvgmeRpVMr3js=
Subject key identifier: 5E:BA:84:04:9E:39:A8:8A:91:D1:09:6A:DB:84:A4:16:27:EF:13:B2
Certificate issuer: /CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Certificate serial: 980B3ABE1DEFBCDA466841A4782B2E58D55F34
Authority key identifier: D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31382e302f32332d3233203d3e20323638343436.roa
Signing time: Wed 05 Mar 2025 19:00:04 +0000
ROA not before: Wed 05 Mar 2025 18:55:04 +0000
ROA not after: Wed 04 Mar 2026 19:00:04 +0000
asID: 268446
IP address blocks: 45.161.18.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
98:0b:3a:be:1d:ef:bc:da:46:68:41:a4:78:2b:2e:58:d5:5f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40
Validity
Not Before: Mar 5 18:55:04 2025 GMT
Not After : Mar 4 19:00:04 2026 GMT
Subject: CN=5EBA84049E39A88A91D1096ADB84A41627EF13B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:16:ea:a2:08:1e:2a:b4:bd:56:75:b4:20:
6b:54:21:8c:6f:cd:ea:cf:58:0a:cd:ce:05:6c:c4:
86:89:9b:9a:b3:6a:94:07:b8:05:5d:56:53:0e:a2:
b2:c7:fd:7c:a4:85:17:2b:c9:6d:0d:9d:02:16:d6:
b6:d8:5d:43:35:39:b7:fd:8a:f4:8d:ee:cd:e6:f5:
88:82:df:14:46:81:34:77:b4:94:00:93:bf:cf:3d:
bd:80:b6:56:ef:f8:b2:fe:df:39:f3:f1:bd:43:76:
ed:df:37:bd:bd:66:e1:85:24:c0:4c:0c:36:4d:3b:
9d:b5:13:d0:32:6c:49:b3:70:30:47:cd:de:f7:96:
68:33:49:b3:f6:aa:a2:e2:69:e6:30:b1:c2:72:6a:
32:c1:95:42:84:1a:d2:bb:41:5b:7d:05:4b:13:59:
dd:a8:a5:c5:73:90:64:f6:bf:04:bc:d2:48:c9:30:
26:65:ec:12:74:52:5b:9d:f2:d7:37:08:8f:77:ed:
d5:d9:80:53:35:d4:b0:c0:ae:bc:fe:c3:db:04:5e:
91:97:17:b7:d4:b0:4c:c2:a8:1d:84:d6:15:18:67:
8e:aa:57:6d:06:eb:a4:b5:4f:76:db:9c:d3:78:f0:
58:11:80:bb:4d:be:8b:66:fa:e5:d7:f0:4b:cb:92:
6d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BA:84:04:9E:39:A8:8A:91:D1:09:6A:DB:84:A4:16:27:EF:13:B2
X509v3 Authority Key Identifier:
keyid:D0:A1:93:8A:F5:3C:AB:91:5A:A9:E5:27:1A:1C:C0:6B:CE:0D:4F:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0A1938AF53CAB915AA9E5271A1CC06BCE0D4F40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hu2HCEaCSJmqkeL6L39GzErd8mJ5CzGDATrHAAF1C58S/1/34352e3136312e31382e302f32332d3233203d3e20323638343436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.18.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:10:c5:0b:bc:11:b4:3d:eb:9d:c4:04:ca:ab:ee:e1:e8:da:
60:86:0e:4d:75:76:b9:c6:52:fd:fd:e5:c8:a8:ab:9d:b4:04:
10:40:a7:3f:28:84:34:4e:ee:d1:29:ed:3f:8b:2e:38:ce:bd:
99:12:bd:bb:2b:86:b8:8b:bb:70:aa:31:b3:07:53:01:09:f1:
a9:f9:dc:84:b8:46:d8:9c:7b:f7:58:04:b3:73:c5:34:12:26:
45:49:b3:4f:71:90:ca:a6:83:73:93:59:af:73:94:9b:31:42:
64:61:12:5b:b9:22:cc:cf:1f:15:51:4d:c0:00:5a:4f:86:0e:
d6:a9:1b:5c:b5:5c:0d:2d:ae:4a:b1:d9:9d:24:f4:00:30:e7:
b4:92:bc:30:dc:c5:91:f9:96:31:3f:6e:a4:c4:88:de:df:68:
9c:f6:71:6d:6b:5e:9d:d1:30:73:41:b5:2c:37:92:ab:cf:31:
6f:a6:18:69:40:01:e4:21:13:ec:71:3b:2a:68:47:2c:2d:30:
d7:3c:1d:0a:e3:d9:56:c7:6b:4d:54:7b:53:cf:6a:c9:78:62:
eb:e0:2d:53:29:a7:bc:fb:b0:25:28:b1:01:1b:a7:de:be:bd:
25:c2:3c:82:ea:e4:31:75:ed:a9:e4:40:a9:be:5f:8e:07:67:
3b:21:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:45:59 2025 by rpki-client