Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32342d3234203d3e20323637313335.roa
File: 34352e3232392e3232382e302f32342d3234203d3e20323637313335.roa (raw, json)
Hash identifier: 7wL5G+khCH+PEtwVjTCBU+8MVmnOd2+XiBSV3eThfTA=
Subject key identifier: A0:0D:0B:91:A7:D7:92:59:18:10:8C:AA:6A:5F:59:D7:98:E2:66:68
Certificate issuer: /CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Certificate serial: 28829292AE31C1DB201E59B40B2926B7034D83C8
Authority key identifier: 8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32342d3234203d3e20323637313335.roa
Signing time: Mon 20 Jan 2025 13:29:01 +0000
ROA not before: Mon 20 Jan 2025 13:24:01 +0000
ROA not after: Mon 19 Jan 2026 13:29:01 +0000
asID: 267135
IP address blocks: 45.229.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:82:92:92:ae:31:c1:db:20:1e:59:b4:0b:29:26:b7:03:4d:83:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ABB79087ACA27A21985F6F05B9103D446BB65F4
Validity
Not Before: Jan 20 13:24:01 2025 GMT
Not After : Jan 19 13:29:01 2026 GMT
Subject: CN=A00D0B91A7D7925918108CAA6A5F59D798E26668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:47:e9:b4:43:92:0c:b0:38:6d:7b:95:17:
89:ff:86:97:b0:7d:f7:a0:41:cb:20:67:63:ad:52:
d8:71:28:8d:37:ac:5c:df:b9:e5:cf:ea:96:80:8a:
3d:4c:21:3b:0f:67:f3:fb:e0:a7:a7:24:d8:23:ef:
5e:2f:b9:e7:e9:bf:2a:27:db:4a:f6:69:ad:31:70:
ba:bf:66:eb:69:3f:bc:28:61:34:c1:63:ff:84:77:
88:70:3a:18:89:fd:bf:65:34:65:ff:75:05:e4:90:
b3:06:00:7c:b8:56:63:f5:db:8f:ca:62:92:c9:22:
c4:69:fb:01:78:1f:43:71:54:e5:0b:f9:41:74:b2:
24:48:57:d6:30:05:2a:e3:ea:ed:fe:e6:a3:f8:cf:
7a:db:a7:ec:bd:44:5e:e6:30:80:52:b5:c0:5d:db:
55:7c:03:c7:1b:6e:6a:21:b0:3e:ad:7b:8b:87:47:
a5:f0:f1:ad:08:06:8d:49:19:95:db:4e:ee:d0:1c:
a0:82:20:80:c3:ca:70:96:26:8a:7f:06:60:98:23:
de:46:6d:a0:0a:aa:cd:ad:a2:21:da:93:52:ec:a6:
67:48:34:a1:5a:83:f6:00:51:4e:c0:8a:8b:3b:0f:
a6:8a:4b:3d:37:3b:51:c2:72:68:3f:df:3c:34:9c:
86:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:0B:91:A7:D7:92:59:18:10:8C:AA:6A:5F:59:D7:98:E2:66:68
X509v3 Authority Key Identifier:
keyid:8A:BB:79:08:7A:CA:27:A2:19:85:F6:F0:5B:91:03:D4:46:BB:65:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/8ABB79087ACA27A21985F6F05B9103D446BB65F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABB79087ACA27A21985F6F05B9103D446BB65F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YRkEPMpkPPLFKhxMdxQRqQ6gwRURWYiadVAKw6wNtCD/0/34352e3232392e3232382e302f32342d3234203d3e20323637313335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.228.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c3:fc:3e:17:c1:4d:45:d0:ef:bc:d1:1c:a4:19:13:e3:98:
17:d3:6a:b5:3d:a6:01:d5:a9:eb:ff:cb:df:72:a4:7a:9e:0e:
0c:92:a3:2c:4b:04:ce:bd:38:65:15:8d:3e:88:41:e6:58:66:
0f:b9:72:ea:97:53:b8:56:be:98:19:43:bc:5c:a2:17:2d:37:
e2:45:6e:fa:67:a2:b5:29:31:ee:20:5c:e2:d6:42:02:9e:16:
e5:5e:be:ad:e5:0b:dc:ce:78:8c:5b:86:bb:83:04:ac:7a:22:
36:d0:35:28:ca:9c:f8:75:b1:f1:66:71:aa:44:94:45:96:85:
47:70:4f:c2:35:45:69:d6:63:1b:83:5d:e4:23:de:7a:d6:35:
7d:3e:e4:bb:ca:5d:2d:95:99:1c:5a:15:48:a8:39:a3:0e:a1:
b0:aa:52:29:b8:bc:a3:d9:b7:fb:02:88:7f:ff:c5:a8:af:79:
82:20:02:16:47:d4:70:2e:bd:f1:fe:41:54:18:54:26:28:53:
ba:d5:9b:1c:ae:57:a6:ea:49:e7:47:d8:f4:89:34:7a:76:d2:
bb:b4:33:18:33:04:3f:17:2e:d6:0f:bd:af:f0:e0:17:f9:f9:
bd:1d:52:e6:a5:55:b6:c3:ad:cb:26:94:ea:b7:01:20:47:27:
ff:b0:31:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:39:06 2025 by rpki-client