Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
File: 34352e3233322e33362e302f32322d3234203d3e20323637323432.roa (raw, json)
Hash identifier: 3jhuvPCfE9NQvEUihWLFsEUj5gJdW5izmTxvxxDBeYY=
Subject key identifier: 35:B4:B9:70:BC:4D:3F:71:7A:8E:89:D3:6D:9F:4B:CA:10:01:83:4E
Certificate issuer: /CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Certificate serial: 52D6645C7018915CD558ECD230E88F38DA32F3B3
Authority key identifier: 78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
Signing time: Thu 06 Mar 2025 19:46:01 +0000
ROA not before: Thu 06 Mar 2025 19:41:01 +0000
ROA not after: Thu 05 Mar 2026 19:46:01 +0000
asID: 267242
IP address blocks: 45.232.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:d6:64:5c:70:18:91:5c:d5:58:ec:d2:30:e8:8f:38:da:32:f3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7894119F99DAD39051E9516FAF4C2DAA5CD1BE70
Validity
Not Before: Mar 6 19:41:01 2025 GMT
Not After : Mar 5 19:46:01 2026 GMT
Subject: CN=35B4B970BC4D3F717A8E89D36D9F4BCA1001834E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:55:24:ff:c9:c7:bd:b8:20:c1:fe:d3:3e:
da:7e:a4:c0:03:2f:9b:9f:2d:1f:85:07:cf:1b:b0:
c9:d5:db:24:e4:a8:d8:d5:d3:14:ed:b5:9e:2c:57:
d3:c4:1a:5c:6e:86:77:42:83:7e:d1:e9:87:46:ca:
8d:30:2f:bf:7d:9a:26:f3:97:4a:26:ce:8a:fa:95:
41:2e:a4:32:03:9e:57:da:96:29:1c:93:e4:a4:fa:
69:f4:99:5c:25:fb:76:4b:6d:12:85:42:4d:63:1d:
88:01:ea:2d:f9:79:c8:ef:f9:73:19:65:8c:95:b0:
f9:30:e6:d6:0c:88:c7:cb:4e:4a:d6:3a:75:78:e4:
1b:0d:de:1b:26:81:c8:26:88:71:22:1d:2d:21:c5:
70:47:69:91:97:a6:42:f0:d2:83:8f:bb:a6:ba:08:
06:0e:5b:8f:14:65:5c:f8:22:e4:c5:29:b2:c6:12:
6e:70:7c:26:a5:9b:90:3b:49:e5:5c:99:4f:dd:39:
c1:87:20:51:ac:f1:1c:f0:04:3a:54:1b:a8:8a:ba:
64:71:6e:57:62:94:40:73:e3:a7:22:a9:f7:bb:3c:
39:08:78:e1:88:4b:c8:79:3c:da:58:b7:0b:71:c6:
80:90:48:d5:a2:8b:d0:cc:58:08:95:28:8d:a1:a7:
83:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B4:B9:70:BC:4D:3F:71:7A:8E:89:D3:6D:9F:4B:CA:10:01:83:4E
X509v3 Authority Key Identifier:
keyid:78:94:11:9F:99:DA:D3:90:51:E9:51:6F:AF:4C:2D:AA:5C:D1:BE:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7894119F99DAD39051E9516FAF4C2DAA5CD1BE70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxCt4Am8PGVjivGshjjPNnbaibVyncrahiUE67ZPAVaT/1/34352e3233322e33362e302f32322d3234203d3e20323637323432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.232.36.0/22
Signature Algorithm: sha256WithRSAEncryption
60:13:f0:24:84:d7:15:81:52:b2:2c:e9:35:8d:f5:98:53:39:
fd:66:6a:83:7a:1c:62:51:64:d5:a5:ae:d6:0f:78:f4:40:74:
2d:17:c2:ee:b2:f7:c0:61:5d:ca:7b:d1:f1:fc:4c:a5:6d:6b:
d9:67:54:ee:36:09:40:c7:68:a1:3b:24:f8:a2:d8:2a:55:a1:
46:a9:dc:62:d1:bb:60:1e:de:30:fe:14:cc:ca:80:d3:d8:5d:
97:9f:22:bc:89:d6:bb:52:d2:47:d1:0a:63:3c:82:2f:a4:a4:
f2:d3:31:20:58:04:7a:56:3f:43:ae:c0:46:47:01:46:b0:a7:
ea:5b:2f:39:5f:45:d5:08:28:8b:15:e8:81:f2:4d:cb:04:6c:
a0:83:53:c1:f2:8d:e9:68:6e:84:ff:ae:ab:9d:8c:37:61:d5:
52:64:32:d4:2c:9f:a5:e5:7f:35:c5:ab:a5:d0:28:8f:1e:91:
a6:04:75:4b:7b:cf:16:d9:cb:af:82:30:26:d6:ff:5a:73:14:
27:56:82:5a:05:46:b8:19:df:ac:08:30:9a:b5:09:97:6c:80:
6b:e8:80:6a:48:86:d2:0c:65:c4:cb:01:12:bb:8b:22:e1:cb:
8b:7a:7c:70:18:c1:56:ec:29:f3:d9:a3:2f:aa:61:b9:b9:c2:
2d:aa:5c:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:50:30 2025 by rpki-client