Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa
File: 34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa (raw, json)
Hash identifier: uvDWAWwHQEIwaeCaS7oSbgW6akspuwjD8Bob8V00050=
Subject key identifier: 00:CE:13:48:D2:14:81:18:8E:5B:DB:CE:5D:D5:21:59:93:B5:BD:D1
Certificate issuer: /CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Certificate serial: 48CBB5A554CFBFD3775FD15714D6CBF36119930A
Authority key identifier: F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa
Signing time: Thu 26 Dec 2024 17:38:45 +0000
ROA not before: Thu 26 Dec 2024 17:33:45 +0000
ROA not after: Thu 25 Dec 2025 17:38:45 +0000
asID: 267366
IP address blocks: 45.234.132.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:cb:b5:a5:54:cf:bf:d3:77:5f:d1:57:14:d6:cb:f3:61:19:93:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F420AE63ED99124F7D3F14B8FA9C1FF3780067C2
Validity
Not Before: Dec 26 17:33:45 2024 GMT
Not After : Dec 25 17:38:45 2025 GMT
Subject: CN=00CE1348D21481188E5BDBCE5DD5215993B5BDD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d2:33:8d:3d:3b:10:a8:2f:1c:b8:d9:e9:50:
a2:63:7f:7b:26:d8:89:9a:73:0b:31:86:66:57:da:
de:1d:8b:e8:6c:4c:ff:a7:ac:8d:20:f7:4e:f3:a0:
11:21:89:2d:14:70:82:1f:8c:75:7e:53:3e:27:34:
14:6c:09:37:23:43:e8:48:ad:5f:4f:98:9a:41:db:
ab:be:fe:32:71:03:33:c2:40:28:6c:05:67:75:7a:
06:41:5e:26:d3:7f:b3:12:43:54:9b:d7:8a:5d:25:
73:96:be:a7:f1:8b:3a:f7:97:ba:d9:06:11:af:12:
92:6e:02:52:d0:37:7d:c0:f3:28:b7:39:9d:81:09:
76:5b:3c:b3:69:95:52:ab:f9:00:b6:eb:06:a2:07:
a4:e5:76:76:b5:cb:5b:46:b1:98:27:99:37:e0:59:
be:ad:10:e7:9c:29:84:0f:61:61:26:c5:7a:90:e5:
59:33:69:0c:67:48:3f:9c:a0:34:26:1a:1f:62:a5:
c7:e8:27:5c:57:83:ce:e2:87:c1:c1:ee:0c:8c:23:
92:21:fe:32:10:19:48:29:16:d7:01:27:5f:ae:80:
70:91:3a:3a:0d:a1:a8:06:2d:cf:5a:fb:f5:03:19:
fb:e9:c6:f3:e0:d8:2c:e5:a4:94:9c:96:f1:50:20:
fb:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CE:13:48:D2:14:81:18:8E:5B:DB:CE:5D:D5:21:59:93:B5:BD:D1
X509v3 Authority Key Identifier:
keyid:F4:20:AE:63:ED:99:12:4F:7D:3F:14:B8:FA:9C:1F:F3:78:00:67:C2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F420AE63ED99124F7D3F14B8FA9C1FF3780067C2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2riT5sd2VqWFybDfr6r2gBHdkgHSAF1DmFPMWSkhHG1f/0/34352e3233342e3133322e302f32322d3332203d3e20323637333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.132.0/22
Signature Algorithm: sha256WithRSAEncryption
05:af:99:90:72:e4:23:57:5b:35:c1:06:3b:a4:a1:c4:e1:e6:
88:7c:a6:64:6e:bb:ac:3e:29:ee:f5:c6:1a:ac:0f:56:18:30:
04:9b:d1:a0:e3:6b:05:3d:02:1c:53:b2:c0:16:ce:9b:89:30:
cc:1d:fd:a4:8b:5b:2d:ca:cb:10:ee:42:b6:6b:82:2b:82:0d:
19:e2:6b:4b:5c:6c:8d:a0:1c:43:3f:9f:07:b7:98:98:61:b5:
1a:45:8a:31:d2:85:11:30:c3:dc:26:f2:60:3e:bb:c1:f2:a4:
f5:4b:1c:86:8c:c6:c8:6f:23:cb:5e:fd:98:d5:d6:26:44:e1:
bf:01:c2:ca:a6:1f:d5:9d:fd:f0:a0:08:a6:e2:4c:5d:4e:a4:
4a:6e:45:f2:97:7f:23:c1:5f:ac:5c:03:fb:e9:cd:3b:83:23:
3e:a9:2c:09:26:f2:b0:6c:0b:7e:74:e9:b5:b2:15:77:ba:b8:
c6:4a:8b:5a:be:18:fe:be:0f:59:43:1e:1b:7f:cd:e0:dc:95:
55:9b:4b:69:15:63:1f:97:68:cb:1b:db:fa:61:1e:b6:9a:ce:
3d:14:e8:47:99:6b:77:d9:d1:8a:c7:68:69:9c:4f:e2:f7:65:
53:6b:77:69:f2:5f:74:5d:b9:60:cf:39:ce:63:a3:5c:2b:c4:
6e:a9:59:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:48:46 2025 by rpki-client