Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3332203d3e20323638383431.roa
File: 34352e3137342e302e302f32322d3332203d3e20323638383431.roa (raw, json)
Hash identifier: dIkODrAmCajAgpaeufnz16IdTB09FZGbxPjxUGSxr50=
Subject key identifier: 5B:E3:AC:FC:FA:9D:76:4F:8D:66:26:4D:40:C5:30:A3:B0:85:F3:2B
Certificate issuer: /CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Certificate serial: 0E24569D4BCD2F71CF4E4CF9DC838D2CBB87990B
Authority key identifier: 5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3332203d3e20323638383431.roa
Signing time: Wed 12 Feb 2025 11:29:49 +0000
ROA not before: Wed 12 Feb 2025 11:24:49 +0000
ROA not after: Wed 11 Feb 2026 11:29:49 +0000
asID: 268841
IP address blocks: 45.174.0.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:24:56:9d:4b:cd:2f:71:cf:4e:4c:f9:dc:83:8d:2c:bb:87:99:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Validity
Not Before: Feb 12 11:24:49 2025 GMT
Not After : Feb 11 11:29:49 2026 GMT
Subject: CN=5BE3ACFCFA9D764F8D66264D40C530A3B085F32B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:66:0e:4c:db:32:a4:8b:c2:d9:02:44:db:70:
31:60:f1:5f:a0:c8:9f:e6:ed:31:88:bd:ed:f6:f6:
b5:82:37:da:26:4c:24:3d:b1:9f:06:22:d2:33:ec:
36:a8:80:4b:29:32:8e:25:64:3f:e9:19:d8:8f:8b:
8f:ae:e3:53:f2:3d:94:8b:2b:d1:08:9d:83:2b:ca:
60:0c:70:41:50:fa:c3:a5:27:46:8a:a7:83:78:f2:
34:23:04:58:77:3d:14:ca:16:1a:4c:ef:f2:fc:2a:
b6:b1:f8:2e:04:4a:3e:38:27:cf:09:38:b9:72:1e:
fb:b9:37:0a:76:92:0f:1f:6b:f1:27:bc:6d:1c:52:
c7:61:63:92:97:bc:42:aa:5a:1c:5d:f8:ae:4d:52:
57:a4:90:f5:06:a0:a0:d9:90:83:80:ae:f0:84:86:
de:ce:fa:f0:3c:06:b2:9a:18:e0:56:4d:0d:e5:e3:
2b:c9:94:cd:92:16:d5:0f:4c:44:c3:59:9d:c2:15:
26:ba:6e:0b:8e:f3:a8:f0:8b:78:db:36:8d:9c:05:
65:1c:38:4f:38:c2:0a:0c:64:87:4b:25:58:fc:6d:
71:94:0d:51:e8:a1:9b:fe:a3:39:97:b2:10:1a:85:
5a:b1:c3:b1:81:56:a0:bf:f8:3a:92:9d:8d:26:56:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:AC:FC:FA:9D:76:4F:8D:66:26:4D:40:C5:30:A3:B0:85:F3:2B
X509v3 Authority Key Identifier:
keyid:5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/34352e3137342e302e302f32322d3332203d3e20323638383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.0.0/22
Signature Algorithm: sha256WithRSAEncryption
15:12:18:5d:e0:7d:5f:c9:9d:9a:d4:3a:e5:93:a8:24:1e:00:
d4:d0:9d:76:db:2e:c1:39:d4:70:62:36:e2:70:77:09:66:35:
8a:69:db:20:f0:df:84:71:23:fa:11:4d:6b:63:d2:0e:7c:90:
63:dd:94:f9:36:e0:92:b4:48:75:19:7f:39:71:92:60:8f:a0:
63:50:52:6f:91:49:17:fd:41:43:fc:52:c6:c8:7c:70:e2:e2:
fe:68:b4:bd:17:30:69:26:14:86:d5:c7:f7:5b:79:fe:1d:3f:
aa:70:01:34:35:0d:de:80:89:84:a4:71:36:da:7c:63:c3:60:
13:87:49:90:fb:ac:6f:c1:cc:39:5d:8b:2f:ee:75:94:7c:c0:
df:78:6c:a8:e1:e7:16:08:e3:10:7d:ab:1a:4f:4e:9a:f2:4d:
a2:0c:93:46:98:0e:c4:e2:d3:78:2a:ee:d8:5a:14:b2:13:fe:
68:86:e0:71:f0:08:d9:ad:c4:65:34:69:dc:1a:58:97:4c:b9:
8e:ce:d6:98:7a:7e:65:2b:e8:89:81:5e:3f:17:92:75:a0:c7:
9b:44:7c:6a:1e:05:26:4b:0e:fd:e0:ae:5d:8e:a2:c2:f1:ea:
d5:e2:e5:c2:e7:2a:6b:61:f8:2a:e4:32:96:7b:37:24:5c:6f:
ce:97:52:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:44 2025 by rpki-client