Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231382e302f32342d3234203d3e20323638373332.roa
File: 34352e3137312e3231382e302f32342d3234203d3e20323638373332.roa (raw, json)
Hash identifier: pIrU1Fpj83xfKRVEmGTQCpCvT8ibqaHNxfLQyFdrB8s=
Subject key identifier: 8B:68:5D:86:3E:37:D9:8E:DB:95:26:24:5C:A7:9C:3F:6E:68:9C:D5
Certificate issuer: /CN=B7124651D19D132543E991B7A74DD4A680768A09
Certificate serial: 1D7742C83EC0CA168B801975FFAC80B44B228B17
Authority key identifier: B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject info access: rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231382e302f32342d3234203d3e20323638373332.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 268732
IP address blocks: 45.171.218.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:77:42:c8:3e:c0:ca:16:8b:80:19:75:ff:ac:80:b4:4b:22:8b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B7124651D19D132543E991B7A74DD4A680768A09
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=8B685D863E37D98EDB9526245CA79C3F6E689CD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ee:c7:33:83:2c:f9:04:f5:1f:04:ed:43:58:
17:d8:0b:b1:c5:64:2c:66:70:fc:23:8e:0b:d5:b1:
40:de:8b:9a:49:80:93:6a:23:86:a7:68:f7:d7:5a:
f6:b3:40:48:59:1b:17:08:fe:0d:79:da:91:5a:ed:
03:70:58:aa:f1:f4:f0:76:42:96:a0:76:cb:fb:60:
89:06:53:5e:ae:3a:01:f4:4a:31:5d:03:ac:e6:e0:
9b:6e:a5:fd:e6:a9:a9:61:ff:a5:f1:1d:b4:0c:b2:
b7:87:83:14:58:bc:21:ae:82:95:28:3e:c3:41:de:
4d:ce:75:19:30:f2:21:c1:46:cb:70:02:cd:0f:dc:
d6:1b:ff:85:6b:0e:eb:74:92:0d:fc:3e:a8:e1:18:
6b:ab:60:bd:fe:78:59:99:33:02:6e:28:80:bd:b3:
f3:d4:f4:ae:0f:14:1b:9d:38:20:fb:fa:35:ce:d2:
f8:26:36:05:26:50:75:13:24:ea:6c:39:80:21:92:
a8:d8:a8:36:94:04:bd:ff:8c:52:5f:f9:08:0b:b4:
5e:d6:d8:3f:17:7c:15:c4:4f:33:16:ad:b6:59:20:
84:90:32:54:68:33:72:3c:d2:66:1d:d9:cd:cb:fc:
aa:45:14:58:0e:c0:0c:74:e2:13:7f:29:bb:25:a4:
7a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:68:5D:86:3E:37:D9:8E:DB:95:26:24:5C:A7:9C:3F:6E:68:9C:D5
X509v3 Authority Key Identifier:
keyid:B7:12:46:51:D1:9D:13:25:43:E9:91:B7:A7:4D:D4:A6:80:76:8A:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/B7124651D19D132543E991B7A74DD4A680768A09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B7124651D19D132543E991B7A74DD4A680768A09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/n16y1LULYkKyXzmNmYgQsCe9sv9vwi43PQLzrQpKjSM/1/34352e3137312e3231382e302f32342d3234203d3e20323638373332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.218.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ec:df:cf:79:67:0c:95:7c:b6:8a:6c:10:a6:0b:9c:a5:83:
49:cf:66:ce:6b:69:66:8d:5b:88:a7:88:d9:a8:fc:4e:a7:58:
1a:f7:ba:c2:c5:00:ed:ba:97:87:3d:ec:35:e8:4e:cb:93:da:
24:48:53:38:e9:69:62:ce:0d:d9:0d:ec:85:ea:dc:a1:3a:fb:
a1:fe:f9:7c:29:cd:ce:6d:3b:3f:f2:b1:da:1f:ca:c9:3b:5f:
21:f2:14:3e:26:43:24:94:ca:7d:13:9f:30:ed:11:48:49:3f:
e1:eb:29:70:24:97:63:de:d5:4a:1a:cf:c3:63:58:b2:c5:74:
c7:46:08:7c:17:1e:e1:01:8d:71:fa:7d:42:b7:23:0c:a4:2c:
5b:df:cb:74:fb:c6:26:77:b8:11:40:90:1f:24:89:d9:57:5f:
3a:c9:20:d5:79:f1:f0:45:a0:a4:a1:42:80:29:0c:9e:45:57:
66:34:63:9b:82:af:f3:67:82:5c:79:fc:7a:c3:19:c9:34:0d:
d3:b2:48:55:f1:43:53:db:9a:ad:de:9e:23:d0:b9:99:7e:47:
90:d2:eb:3a:d5:04:be:40:63:6a:9d:8c:8f:4e:8d:d3:7b:21:
a4:f3:5c:4b:2a:55:c7:aa:64:d4:ce:81:ec:5b:ad:49:3f:52:
9b:f2:15:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:10 2025 by rpki-client