Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130302e302f32342d3234203d3e20323638323639.roa
File: 34352e3233372e3130302e302f32342d3234203d3e20323638323639.roa (raw, json)
Hash identifier: NqJBV0xadtHhHrM+PDfjz5C1mkFDIJNlTqVuCjWRkdU=
Subject key identifier: A6:F8:EF:82:71:7C:A2:66:9F:53:6B:97:70:50:0A:43:20:68:BD:71
Certificate issuer: /CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Certificate serial: 557E765C30FD55AE5B4A722354C245C838ED858F
Authority key identifier: B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject info access: rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130302e302f32342d3234203d3e20323638323639.roa
Signing time: Thu 06 Mar 2025 20:00:32 +0000
ROA not before: Thu 06 Mar 2025 19:55:32 +0000
ROA not after: Thu 05 Mar 2026 20:00:32 +0000
asID: 268269
IP address blocks: 45.237.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7e:76:5c:30:fd:55:ae:5b:4a:72:23:54:c2:45:c8:38:ed:85:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8274222DAE9FCA80975171337DDE4FF19CE8E24
Validity
Not Before: Mar 6 19:55:32 2025 GMT
Not After : Mar 5 20:00:32 2026 GMT
Subject: CN=A6F8EF82717CA2669F536B9770500A432068BD71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:f7:c4:f8:48:73:4c:74:b8:5c:f5:5e:7f:
52:bf:3c:ce:cf:fe:cf:9a:8a:4b:b4:ed:47:dd:3d:
4e:19:a2:c2:64:28:a4:9b:90:18:ed:f5:e1:e0:28:
5b:c9:83:52:4c:ab:1e:23:51:ab:b2:07:af:8f:86:
e4:ed:20:cd:16:af:6d:95:fa:1a:a9:2f:c8:ee:d8:
4c:74:32:b2:fb:c7:49:fc:03:f0:98:58:b8:64:84:
0a:59:54:45:be:00:7c:b4:20:d3:06:3d:81:b9:39:
21:4d:be:80:53:f4:fe:98:fb:0f:a9:ba:ef:91:d3:
1e:7c:1d:ff:2e:11:8c:fe:0a:ee:1b:b0:09:15:77:
44:6f:6b:f4:11:4b:31:fa:da:9b:83:69:77:fe:03:
11:0c:17:6c:ec:a6:c1:17:4f:30:83:7a:a6:15:7a:
b4:9f:1a:e5:fb:7f:54:09:84:6f:8d:a2:f7:e1:7c:
0b:a7:36:c8:27:da:b8:d9:c2:b6:ba:bb:4b:04:aa:
6f:8a:ea:66:68:38:d3:43:88:74:e2:60:9e:5a:30:
89:c1:c7:4e:0d:39:a0:df:0b:4d:9c:7c:27:43:37:
5b:51:48:11:3c:82:0c:b4:d5:76:86:48:1b:9a:ac:
9b:85:2d:40:6c:78:a4:11:72:61:23:c2:d1:bf:a1:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F8:EF:82:71:7C:A2:66:9F:53:6B:97:70:50:0A:43:20:68:BD:71
X509v3 Authority Key Identifier:
keyid:B8:27:42:22:DA:E9:FC:A8:09:75:17:13:37:DD:E4:FF:19:CE:8E:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8274222DAE9FCA80975171337DDE4FF19CE8E24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/1/34352e3233372e3130302e302f32342d3234203d3e20323638323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.100.0/24
Signature Algorithm: sha256WithRSAEncryption
77:6d:b7:15:67:e1:53:8d:39:07:c1:d3:f1:5c:5e:9f:c0:9c:
c4:17:7c:fb:3d:6a:6b:4d:23:5d:e6:2d:5c:75:3c:ae:c3:fd:
91:e1:59:9f:39:23:ac:d0:c9:3a:54:a1:9f:de:01:35:e7:35:
e4:81:55:c3:45:82:cc:c0:bb:75:df:b2:2d:d8:cf:43:b9:0e:
cc:aa:a1:74:c2:6a:6e:d7:fe:3d:ea:38:f2:dd:6d:64:94:58:
40:a7:d6:4b:a3:a5:0c:f0:2d:81:7c:e4:41:3c:ae:f4:98:eb:
2c:1f:4d:ce:5c:e0:4d:c0:76:12:29:57:39:29:f4:77:2b:cb:
0b:89:8e:72:cc:31:b8:bd:7d:77:7d:22:f3:f0:2b:43:5a:94:
8e:d6:6a:4e:5f:a4:aa:d0:61:6f:51:72:e5:43:1a:a5:2c:03:
b3:af:3e:4c:71:88:da:1d:59:6b:97:cf:5a:3f:e6:b6:0c:f2:
8b:56:d9:6a:b6:4b:5c:dc:23:c3:d6:a5:96:0e:58:9c:0e:28:
cc:bb:7f:53:eb:1b:f9:22:96:16:96:93:c8:a6:cb:90:b7:40:
2e:48:78:fc:44:43:eb:c7:49:fb:a1:b5:2e:f9:f1:c0:e6:72:
1e:37:13:cf:b9:38:6d:f5:6c:96:79:62:68:ba:ce:ba:07:b9:
d6:c3:dd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 05:44:19 2025 by rpki-client