Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/34352e3137362e34302e302f32322d3234203d3e20323638393239.roa
File: 34352e3137362e34302e302f32322d3234203d3e20323638393239.roa (raw, json)
Hash identifier: xkWRGOZIzBRCjOwH00hhXT8DlnCo71wst0kT0gmlTiM=
Subject key identifier: 0E:5B:AE:CC:29:C5:04:52:52:45:4C:D4:88:99:75:0C:E7:A5:9B:F4
Certificate issuer: /CN=A58717AA812972E28B6CC3B85ADD1610222992E2
Certificate serial: 59D951F276EB5CF500B6EE0279A253E7B68C2023
Authority key identifier: A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A58717AA812972E28B6CC3B85ADD1610222992E2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/34352e3137362e34302e302f32322d3234203d3e20323638393239.roa
Signing time: Thu 06 Mar 2025 00:34:22 +0000
ROA not before: Thu 06 Mar 2025 00:29:22 +0000
ROA not after: Thu 05 Mar 2026 00:34:22 +0000
asID: 268929
IP address blocks: 45.176.40.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d9:51:f2:76:eb:5c:f5:00:b6:ee:02:79:a2:53:e7:b6:8c:20:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A58717AA812972E28B6CC3B85ADD1610222992E2
Validity
Not Before: Mar 6 00:29:22 2025 GMT
Not After : Mar 5 00:34:22 2026 GMT
Subject: CN=0E5BAECC29C5045252454CD48899750CE7A59BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:22:51:b0:3a:29:7d:bf:e6:ac:6c:ac:c5:06:
3a:36:29:5a:94:f0:b2:d5:c1:15:8f:0e:ec:db:ff:
03:39:cf:d0:11:36:16:d4:65:80:0a:bf:47:9f:21:
2f:ac:1e:b1:99:a2:db:7b:b0:64:4f:f0:7a:3a:c3:
43:78:5b:89:b1:a5:7c:61:f5:1f:07:38:e4:62:ae:
27:84:ba:8b:87:25:d2:5e:8d:c9:ac:88:19:d4:01:
11:78:47:73:4d:47:f1:84:d9:db:80:0d:66:71:54:
48:56:be:79:5c:fb:4b:37:bb:2f:f7:9d:05:69:76:
a9:d8:47:b5:6a:ad:87:32:df:29:17:b4:34:09:c9:
f7:33:8c:ed:ad:26:9f:45:e6:b2:49:34:5a:b6:2f:
f1:94:c1:e6:87:b1:b6:98:2a:23:8b:33:0e:04:8f:
a8:51:e9:46:d7:8c:5e:dd:92:4c:71:60:2e:72:0f:
17:6f:6d:f2:fd:b5:ce:a4:47:eb:65:0a:01:d3:59:
b2:55:72:05:9e:df:5b:e7:7f:41:9a:c5:46:d5:6e:
24:45:00:cb:34:1c:86:4f:bf:07:b2:2b:75:34:21:
89:14:3a:c7:30:e4:54:ed:1e:0c:84:20:4e:54:05:
1d:38:ad:5c:9a:05:bd:8e:91:74:54:2d:d2:ca:0d:
4d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5B:AE:CC:29:C5:04:52:52:45:4C:D4:88:99:75:0C:E7:A5:9B:F4
X509v3 Authority Key Identifier:
keyid:A5:87:17:AA:81:29:72:E2:8B:6C:C3:B8:5A:DD:16:10:22:29:92:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/A58717AA812972E28B6CC3B85ADD1610222992E2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A58717AA812972E28B6CC3B85ADD1610222992E2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/KK5XknWoWsdrVeiwCZGzinFq6BNW1vKNFkoS9noZMdh/1/34352e3137362e34302e302f32322d3234203d3e20323638393239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.40.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:d6:b1:b3:07:22:8d:14:ba:1c:a5:51:48:df:cb:5b:6d:b5:
52:b9:76:a6:a3:b9:a9:96:6f:95:09:a8:61:ef:52:c5:23:b7:
d1:d2:29:c9:26:e2:86:b7:61:0c:a8:ad:a8:1a:74:9e:db:3b:
f3:35:bb:15:2c:16:2e:a3:bf:63:57:ea:65:b5:e2:ae:bc:51:
6b:d0:25:31:f6:cf:fa:4f:76:1e:10:d0:05:17:a3:c3:a5:f5:
fe:ba:96:68:76:44:c3:2a:3b:e2:33:39:5b:3e:4f:e3:c7:c8:
99:41:21:74:d7:d5:ed:8a:1e:e3:21:50:b3:45:82:9e:fa:7a:
a8:0b:8f:4b:48:f4:94:4a:45:7c:be:7b:d7:93:05:3b:5f:10:
e9:1b:c6:db:84:d2:57:5a:79:4e:93:4b:b3:49:46:b7:57:54:
96:b4:af:5e:b2:b5:5b:fd:97:ea:1f:bb:d0:d0:33:5c:5e:b2:
21:84:75:67:05:0d:ed:20:a9:40:c9:fe:a2:fa:1f:f7:35:b6:
77:d9:80:14:84:9d:db:45:03:e1:4f:2c:ac:e8:b0:ae:3c:77:
fb:97:09:71:79:f6:78:a3:f4:a1:65:8d:05:7e:bb:4f:e1:44:
90:cc:68:5f:48:08:21:56:5f:fc:c5:53:2f:7b:f5:2f:d0:47:
fb:54:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:51:15 2025 by rpki-client