Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
File: 34352e3233382e34342e302f32332d3233203d3e20323638333132.roa (raw, json)
Hash identifier: kQqGTP+UpXBrYT1VR/aaAxl6tr3v5DrtGVxi+0prLik=
Subject key identifier: 25:AD:70:74:44:71:0E:EF:03:32:64:9D:B0:DC:76:9E:9D:99:E9:8D
Certificate issuer: /CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Certificate serial: 3F63DD1E915C21BEAD12D27D2DC462037665EFD2
Authority key identifier: F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
Signing time: Wed 03 Apr 2024 18:31:34 +0000
ROA not before: Wed 03 Apr 2024 18:26:34 +0000
ROA not after: Wed 02 Apr 2025 18:31:34 +0000
asID: 268312
IP address blocks: 45.238.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:63:dd:1e:91:5c:21:be:ad:12:d2:7d:2d:c4:62:03:76:65:ef:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F977CCF4428A4568379EFF8DC7F9F1A45C92D40C
Validity
Not Before: Apr 3 18:26:34 2024 GMT
Not After : Apr 2 18:31:34 2025 GMT
Subject: CN=25AD707444710EEF0332649DB0DC769E9D99E98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:fd:22:fc:c9:87:53:88:a4:0c:fc:36:26:
2e:87:19:f3:99:f0:7e:03:9f:5a:3f:3c:6f:f6:22:
85:b9:1d:0e:15:89:61:60:2b:e2:aa:8d:af:db:54:
e7:88:20:16:e5:70:d3:e8:d6:5d:b5:49:22:d2:ea:
df:b5:6e:e8:eb:0d:4c:6e:4f:fd:54:43:8d:3c:50:
10:59:50:3b:7e:72:9c:d8:a6:32:04:cd:58:58:81:
a7:07:92:9a:40:b9:ad:cb:b3:8b:86:6b:5b:db:2c:
5b:37:57:6d:be:8b:fe:3c:88:d7:2d:78:6d:41:c6:
30:e8:42:b7:44:82:f1:0a:a2:28:1e:74:a0:49:92:
b0:f9:0f:f6:f5:be:68:ef:d0:aa:77:33:77:d0:b1:
10:9c:c1:c4:d2:10:13:cf:26:c2:9c:47:80:31:3f:
f5:b6:bb:31:48:26:d0:ea:4f:5c:02:73:9a:cb:f5:
8d:d1:06:46:f8:de:ad:3b:05:dd:5e:92:15:c8:fd:
8d:cb:0e:03:5b:b4:58:00:bd:8b:2e:18:10:32:c2:
29:5b:27:27:76:00:29:2b:c5:07:2f:4d:6d:2e:a8:
d7:70:22:9d:66:88:97:5a:5b:9c:52:70:03:be:4b:
89:b8:58:0d:04:ff:68:41:6f:2e:d0:77:ef:31:11:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:70:74:44:71:0E:EF:03:32:64:9D:B0:DC:76:9E:9D:99:E9:8D
X509v3 Authority Key Identifier:
keyid:F9:77:CC:F4:42:8A:45:68:37:9E:FF:8D:C7:F9:F1:A4:5C:92:D4:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F977CCF4428A4568379EFF8DC7F9F1A45C92D40C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Rj249xesmuL7iX6AdCejJcxf65SmPqsF2CAH8RVT5jP/1/34352e3233382e34342e302f32332d3233203d3e20323638333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.44.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:75:30:ee:29:d9:f8:dc:2e:5b:b4:78:f9:ed:27:3b:69:60:
d5:ac:73:5f:30:e5:11:92:e5:d3:69:f4:0d:a1:54:81:32:2e:
2f:3d:73:10:aa:97:6a:8e:8d:3c:01:27:07:04:13:03:01:31:
6f:c2:93:5b:56:75:50:65:cb:a1:e3:c3:ea:70:7d:01:d2:ab:
06:8a:ff:e6:cd:c4:d3:0a:af:2b:5f:ca:40:4d:5a:01:95:35:
f8:d2:67:f0:91:a4:0b:14:05:9d:e8:6d:7a:e3:d9:b7:ae:7a:
ce:8e:25:9f:07:7c:f2:73:8d:dc:4a:ab:bf:af:e2:34:4a:9f:
d8:89:df:f6:fc:d2:88:34:1c:27:4e:33:7d:ff:69:ff:25:da:
a2:5a:32:8d:bf:eb:1b:66:0f:2d:80:d5:b7:42:12:f1:c0:96:
33:c2:a6:8d:0f:c8:f1:1d:1d:f2:69:0d:43:5d:b9:34:3a:f4:
0b:13:da:5e:26:3d:56:df:ff:cd:35:6e:36:81:61:00:74:d4:
9f:4d:8c:e0:80:c2:65:71:5b:79:a9:0f:7d:4e:7d:40:94:7b:
5d:29:b4:4f:8a:6c:74:8a:dd:6e:16:e5:1b:90:f0:f6:ba:d1:
47:4d:46:29:40:4e:f0:a2:29:15:6f:b5:af:70:74:09:3d:21:
ac:1c:5e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:22:39 2025 by rpki-client