Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa
File: 34352e362e39342e302f32342d3234203d3e20323636313239.roa (raw, json)
Hash identifier: To/Po4vurxJWuqBIhcK4Qzzd3rsHSJv9yvn0rc5QjOY=
Subject key identifier: 08:BC:A6:C8:2A:75:2B:28:86:7D:36:F3:22:3B:52:4C:C5:31:CD:8E
Certificate issuer: /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial: 2941F33194247C0805EA5123960C95FF41A85906
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa
Signing time: Wed 03 Apr 2024 18:32:20 +0000
ROA not before: Wed 03 Apr 2024 18:27:20 +0000
ROA not after: Wed 02 Apr 2025 18:32:20 +0000
asID: 266129
IP address blocks: 45.6.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:41:f3:31:94:24:7c:08:05:ea:51:23:96:0c:95:ff:41:a8:59:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Validity
Not Before: Apr 3 18:27:20 2024 GMT
Not After : Apr 2 18:32:20 2025 GMT
Subject: CN=08BCA6C82A752B28867D36F3223B524CC531CD8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:09:8b:eb:b3:ee:3a:95:72:89:5c:d6:eb:bb:
f7:f2:1f:00:b9:60:1a:25:d8:60:b7:f0:f5:21:e6:
46:6f:13:f3:da:1d:df:b8:da:aa:90:ff:62:87:fc:
41:c8:5a:ee:d1:56:62:11:dd:94:7d:79:8e:94:20:
5b:cb:87:a4:00:bf:9b:17:f3:e6:4a:76:c5:62:4a:
f7:3e:01:f0:fd:50:fb:0c:d6:53:e1:9f:51:1e:47:
67:47:e9:28:25:05:f3:e1:6b:ba:46:69:ed:34:95:
76:40:9e:30:c0:1a:53:47:c7:7a:63:6f:4a:29:00:
1e:80:00:f3:b1:6b:95:b8:65:7f:4c:5d:b2:4b:f7:
e5:f4:92:b4:73:8b:86:62:ef:bd:eb:12:1d:ec:a6:
e3:65:6c:c6:f5:2d:ce:94:bb:24:f5:99:3f:19:77:
a5:ff:97:33:fd:33:94:17:3a:da:50:bc:97:88:1d:
56:e5:58:7a:7a:0d:0d:13:df:00:55:56:26:db:d1:
d5:c2:35:f6:15:0b:fc:fa:b3:14:77:67:30:d5:23:
ce:fd:48:1d:7e:16:3a:25:8f:fa:34:7b:05:6e:9d:
a1:b0:e6:ea:15:a2:d3:b6:a4:de:0b:35:73:07:6b:
96:1e:3f:13:ed:1a:fa:cf:27:b5:41:e1:c7:82:e5:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:BC:A6:C8:2A:75:2B:28:86:7D:36:F3:22:3B:52:4C:C5:31:CD:8E
X509v3 Authority Key Identifier:
keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/34352e362e39342e302f32342d3234203d3e20323636313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.94.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:67:37:f9:31:6e:3e:60:a4:0d:55:71:98:4b:a7:a2:ce:e3:
e9:9e:ec:73:16:03:50:2f:03:24:bd:d0:37:6c:ca:03:8c:14:
f6:84:5a:a1:60:a5:bf:84:03:2d:2f:06:03:0f:cb:ba:16:70:
33:ec:33:e3:9b:bb:21:08:c9:89:1a:9e:db:26:fa:f0:58:d6:
ac:e5:c9:46:cc:ad:28:9f:b2:89:94:b5:06:d5:51:c9:46:4d:
cd:c6:84:16:fd:19:ce:39:bf:78:93:c2:5a:4e:ca:cf:32:f4:
7a:ba:3f:95:04:ce:cb:8b:38:3a:b3:04:b6:fe:75:78:12:60:
69:50:a8:a5:14:c4:3b:97:33:18:cf:6e:de:5d:8c:76:9c:88:
b6:91:65:02:4f:54:45:6d:d9:ca:74:0d:98:bc:1c:10:d3:22:
97:4f:0f:7f:1a:d9:18:30:d5:4d:4c:44:83:28:c6:ad:49:32:
3f:9f:bb:1b:67:76:93:75:65:ec:c2:7c:5e:60:cf:d2:be:c5:
01:ad:35:5e:be:da:f6:f7:b9:51:5c:19:41:d9:cd:51:78:9f:
5f:ce:b5:98:4d:28:64:70:71:1a:42:c5:ff:85:a6:26:26:49:
27:62:ad:78:21:b7:b3:64:0d:9d:a0:61:b2:df:a0:ce:3b:09:
01:97:7b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:18:42 2025 by rpki-client