Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
File: 34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa (raw, json)
Hash identifier: J3lae4kaaH3zerZTPGQGXWvaX/imEX3a4zZe6w5ylLg=
Subject key identifier: 6D:C0:9C:9B:0C:16:F2:1A:80:02:B1:25:F6:E5:9C:26:1F:E4:D0:13
Certificate issuer: /CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
Certificate serial: 5FBDBFB8D1033D8A795A551564832DE41A041D3C
Authority key identifier: C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
Subject info access: rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
Signing time: Wed 12 Feb 2025 14:39:57 +0000
ROA not before: Wed 12 Feb 2025 14:34:57 +0000
ROA not after: Wed 11 Feb 2026 14:39:57 +0000
asID: 268746
IP address blocks: 45.171.228.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:bd:bf:b8:d1:03:3d:8a:79:5a:55:15:64:83:2d:e4:1a:04:1d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C75639341EB310D9105CD98A48FC7CED1EC5D643
Validity
Not Before: Feb 12 14:34:57 2025 GMT
Not After : Feb 11 14:39:57 2026 GMT
Subject: CN=6DC09C9B0C16F21A8002B125F6E59C261FE4D013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:56:93:f1:7e:1f:21:bd:20:9a:0d:89:d6:96:
8c:30:98:c3:de:e6:dc:cd:25:e6:a6:6a:0f:9b:fd:
ce:a6:b6:20:e5:f3:f4:63:e9:28:da:f1:58:a1:9d:
96:39:00:2e:9e:fe:1c:57:a8:8a:e6:a3:4c:a1:75:
f0:8d:41:36:5b:87:9e:ea:42:06:f4:53:0f:64:f0:
aa:5e:c6:bf:88:9a:b7:65:66:87:41:57:f4:eb:30:
07:63:80:b6:b0:2b:6b:73:b0:db:35:fd:f0:b0:b9:
99:b2:41:1e:7b:08:01:32:bd:54:24:2d:1b:50:d7:
18:7d:2f:e8:bb:6f:28:53:99:d6:6c:cd:f5:82:ed:
7a:3a:de:e2:e8:76:82:fe:66:49:6f:f0:96:a6:e7:
a8:78:54:3e:24:9c:a6:c4:55:b6:c6:d9:6d:f1:af:
b7:a6:5c:f9:a3:ea:4f:85:41:68:2d:41:4c:03:ed:
73:e2:01:d1:8a:39:2a:d1:35:0a:7d:dd:f2:bc:7c:
16:c5:55:f2:e4:71:3b:a2:bf:79:23:20:be:58:32:
7c:fe:18:f4:88:3d:84:20:f8:04:a3:48:c0:a7:8c:
74:9b:9a:1a:18:d6:dd:24:4e:09:f4:19:0f:55:76:
09:3d:93:44:63:d1:a4:7a:5d:63:ff:35:b2:43:7c:
db:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C0:9C:9B:0C:16:F2:1A:80:02:B1:25:F6:E5:9C:26:1F:E4:D0:13
X509v3 Authority Key Identifier:
keyid:C7:56:39:34:1E:B3:10:D9:10:5C:D9:8A:48:FC:7C:ED:1E:C5:D6:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/C75639341EB310D9105CD98A48FC7CED1EC5D643.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C75639341EB310D9105CD98A48FC7CED1EC5D643.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/sQoVXD3vwPhHETfDm3R6Z3KpEFeVN8FWpnwapiAKCys/0/34352e3137312e3232382e302f32332d3233203d3e20323638373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.228.0/23
Signature Algorithm: sha256WithRSAEncryption
60:aa:78:b2:32:50:b1:2e:0e:60:d5:0f:ce:8c:40:5f:02:f2:
2e:e5:7c:25:de:60:0a:9e:dc:0c:6a:b5:13:86:19:73:b8:95:
aa:e3:c4:4e:07:a8:46:fc:ad:7f:e0:c7:81:27:59:c1:61:10:
15:ee:9d:e4:34:7b:fb:25:64:a5:5d:ec:6c:c4:a9:bc:66:94:
cf:7c:5b:3c:5d:41:f2:d0:76:ee:ce:69:1e:fe:c2:57:65:04:
07:f7:15:c7:e3:92:d7:76:9a:54:79:4e:94:e8:b3:a4:06:ae:
af:fd:91:c0:1d:4b:6b:76:c7:e4:2f:87:ac:a0:45:6c:94:6c:
c3:ad:da:a3:5b:4b:12:f8:0c:0d:a1:f4:b6:82:75:cd:b5:5d:
c4:7e:ad:55:bd:c4:b3:b1:37:d4:dc:57:6d:59:d8:d4:3b:56:
3b:d0:c8:30:5b:7c:ff:83:91:13:8c:3f:63:4e:3b:d9:00:42:
ed:0b:ae:55:e6:27:d1:09:23:dc:c0:8d:d7:d9:76:1d:d9:b9:
df:20:55:cd:c6:5e:f3:f4:42:4a:45:25:b9:ac:a8:ba:57:27:
83:42:15:91:40:b6:a8:5b:3d:9e:b4:b4:c8:08:42:6a:7b:ae:
5a:6e:b4:53:c4:6c:a5:b7:dd:5d:97:bb:8b:cf:90:0c:9e:8a:
6d:7e:e4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:03:42 2025 by rpki-client