Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
File: 34352e3232342e33352e302f32342d3234203d3e20323636393234.roa (raw, json)
Hash identifier: JJ7dMEASrz7PjFciXcQgrWuYAyyTaRde/Jb/deddWWA=
Subject key identifier: 2B:36:0B:DC:56:F8:E1:5B:19:C5:82:4F:A4:A8:39:76:57:DB:9A:FC
Certificate issuer: /CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Certificate serial: 6642A7678CE4B5398629500F4E0FFB023B8B6920
Authority key identifier: 8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
Signing time: Mon 13 Jan 2025 00:27:05 +0000
ROA not before: Mon 13 Jan 2025 00:22:05 +0000
ROA not after: Mon 12 Jan 2026 00:27:05 +0000
asID: 266924
IP address blocks: 45.224.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:42:a7:67:8c:e4:b5:39:86:29:50:0f:4e:0f:fb:02:3b:8b:69:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B335337CBEB54BBDC0C51BA434F4439E700C05A
Validity
Not Before: Jan 13 00:22:05 2025 GMT
Not After : Jan 12 00:27:05 2026 GMT
Subject: CN=2B360BDC56F8E15B19C5824FA4A8397657DB9AFC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:77:b7:c7:b7:6c:73:65:da:0c:b0:38:8b:a3:
c8:0b:03:21:99:1a:f6:8a:3f:e3:d7:3f:b4:72:ac:
15:65:24:5f:ee:7f:46:e7:dc:c1:2b:f4:21:00:bd:
c3:4e:ca:0e:15:b8:fd:e4:9c:f3:8d:f4:3e:cd:dc:
a7:51:7c:d1:6c:47:14:9d:a8:6f:27:bf:4e:fc:63:
99:ff:ac:8b:e6:ff:91:a3:91:a6:4b:dd:89:22:b0:
a1:55:31:3b:43:fe:42:9e:27:3e:36:0a:ae:22:0f:
7b:87:67:9c:b9:2f:36:7f:2b:ac:d9:fa:3b:ef:38:
9e:86:6d:48:a2:9d:aa:df:5f:59:e9:7f:6e:57:08:
26:14:fa:4c:e8:40:a6:d8:16:ba:78:49:ca:51:ba:
4a:c5:67:e7:a1:42:ec:1a:54:ef:7d:96:88:be:9c:
e8:bd:58:2a:3c:a7:3a:76:d4:a5:cf:e9:c6:14:2f:
b1:f7:b3:3e:6c:e0:f5:a4:b0:d3:ef:0d:15:17:ce:
d2:05:73:b2:6c:7c:d1:bd:20:a8:53:71:bb:df:eb:
4b:29:80:49:0d:ae:a1:f1:95:32:c1:0e:e8:be:6b:
41:36:3f:69:5b:19:9e:15:d5:85:64:2e:c2:7d:35:
47:5a:ca:d0:d1:be:e3:9c:db:07:8a:7f:a3:95:b8:
cf:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:36:0B:DC:56:F8:E1:5B:19:C5:82:4F:A4:A8:39:76:57:DB:9A:FC
X509v3 Authority Key Identifier:
keyid:8B:33:53:37:CB:EB:54:BB:DC:0C:51:BA:43:4F:44:39:E7:00:C0:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/8B335337CBEB54BBDC0C51BA434F4439E700C05A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B335337CBEB54BBDC0C51BA434F4439E700C05A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oFbK8WgYXBAkG8PKmg4AcVuCugC4Cwy5xLG2i3EWSEc/0/34352e3232342e33352e302f32342d3234203d3e20323636393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.35.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:d9:c9:8e:49:f9:73:b9:9f:01:1a:e5:cb:b9:d1:b2:e2:4e:
54:17:c3:69:27:95:b9:73:54:de:20:c0:2e:d7:00:e0:ef:65:
6a:30:f9:d8:b8:63:7c:5c:85:fd:1b:e8:36:c9:96:0c:f0:4e:
14:71:55:23:db:fc:98:62:d8:a2:04:bd:0a:a5:f5:17:66:87:
56:22:e8:62:7c:5e:fa:cc:b1:df:85:5c:dd:25:eb:19:a6:57:
3a:15:56:cb:25:5a:9b:a5:74:c2:9a:0d:25:f8:9c:fa:39:9f:
d2:ee:6c:d0:e2:f6:ac:da:c9:43:a8:44:86:f3:6d:d5:2d:90:
6d:e0:60:aa:d2:38:77:31:ec:45:a4:50:a8:ea:03:4f:49:bc:
71:45:d0:24:86:0c:e1:08:61:31:e0:2c:17:5f:0a:32:d1:82:
1b:c8:2c:98:bc:13:02:19:ee:45:9e:db:24:0c:d4:65:89:b9:
3c:95:ed:e0:c7:c7:2f:5f:8d:15:28:12:c0:ef:e1:99:b3:74:
bb:34:a8:83:d0:bd:84:34:ef:96:b4:50:04:53:fe:e8:f0:11:
9b:0c:32:89:10:a9:55:2d:eb:85:4f:db:e0:64:d9:5d:35:d3:
0d:58:73:3b:d9:a0:52:f7:2e:06:ce:a6:00:00:78:6c:9c:36:
9f:a7:7a:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:56:23 2025 by rpki-client