Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
File: 34352e362e3136342e302f32322d3332203d3e20323636313430.roa (raw, json)
Hash identifier: X1IOTOCgKFHUpOpgjA3wU+vEk+Z1uQC+safj9KDFty4=
Subject key identifier: 54:60:FB:99:F4:52:C7:95:0D:86:FE:A8:CB:28:2B:79:42:CC:32:E7
Certificate issuer: /CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Certificate serial: 327F1CEAF3C94B914AD0FA6B24B1AFC84C8ED96C
Authority key identifier: 9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
Signing time: Thu 04 Apr 2024 22:52:38 +0000
ROA not before: Thu 04 Apr 2024 22:47:38 +0000
ROA not after: Thu 03 Apr 2025 22:52:38 +0000
asID: 266140
IP address blocks: 45.6.164.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7f:1c:ea:f3:c9:4b:91:4a:d0:fa:6b:24:b1:af:c8:4c:8e:d9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2
Validity
Not Before: Apr 4 22:47:38 2024 GMT
Not After : Apr 3 22:52:38 2025 GMT
Subject: CN=5460FB99F452C7950D86FEA8CB282B7942CC32E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:ec:9e:97:3f:4c:eb:42:b1:5d:97:81:8e:
d7:dc:e9:cb:e8:0a:db:6e:05:9a:98:75:bd:68:b0:
c3:19:a4:c9:49:3b:8d:39:ec:92:fe:96:ff:ca:2c:
b4:7f:a0:d1:6f:36:9e:74:8a:7c:e3:23:0c:75:76:
01:f9:64:dc:67:5b:69:2a:d0:e2:a4:25:f4:4c:85:
1f:ee:de:75:40:9b:f2:64:f6:ad:8e:62:14:81:ec:
32:13:72:3e:e8:38:9d:ae:ee:1b:59:16:c7:11:0c:
b2:5f:09:48:95:91:44:58:ae:e2:77:23:b0:95:cc:
84:8c:61:34:ec:51:ad:79:db:a5:b5:2a:d9:73:a1:
dc:e9:53:76:cd:a4:7d:8b:fe:61:ef:43:87:a1:80:
f2:bf:5b:1e:da:95:99:5b:ec:b1:94:bb:b1:c2:bb:
a2:8b:2d:cf:27:6c:c1:5b:a4:aa:94:a7:e6:4c:29:
ce:db:bf:55:c4:e9:9b:2f:d9:7e:23:24:c2:80:0c:
76:1e:bf:37:ba:80:06:1a:d4:d7:b4:c3:83:2e:bc:
a0:cb:bf:5f:54:1a:3b:66:6f:96:e2:89:ea:a0:40:
2f:31:dd:85:d4:4f:6a:66:78:de:4f:e7:66:e4:7a:
b1:42:e9:41:7a:fd:8e:d0:df:7e:e3:24:fe:07:d1:
30:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:FB:99:F4:52:C7:95:0D:86:FE:A8:CB:28:2B:79:42:CC:32:E7
X509v3 Authority Key Identifier:
keyid:9C:CE:91:35:2B:AA:C0:EA:33:71:FB:42:CA:C1:03:0A:A9:1B:8B:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCE91352BAAC0EA3371FB42CAC1030AA91B8BE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ePissYU9EcT6K2XuqN177TnBsoJ4kyKQ6Bkd5n3Q2Pa/1/34352e362e3136342e302f32322d3332203d3e20323636313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.164.0/22
Signature Algorithm: sha256WithRSAEncryption
c2:d9:61:24:89:7f:51:da:b2:e1:72:f3:f6:fa:cf:64:c9:b6:
08:b9:26:55:fc:ca:39:ac:ac:00:5a:ca:10:6c:3a:5b:fe:2f:
93:17:66:8e:2e:cd:8b:18:f1:78:49:24:b5:b1:ed:89:f1:4b:
f8:db:77:41:71:9e:c7:18:41:de:c9:76:cf:9c:3e:87:e8:62:
ab:6e:b1:6e:e4:52:c4:db:26:99:5e:6c:98:5f:20:4d:ac:ee:
1c:dc:f3:48:1f:7e:bf:14:9a:fa:b2:d0:07:8c:6f:38:1a:41:
a7:fe:16:f5:5c:18:29:2a:55:16:0d:82:8d:95:f4:53:08:87:
c0:24:14:56:a4:92:1c:4e:12:e6:c9:59:cd:fd:b5:55:f9:4c:
d9:4e:7e:14:d8:85:5b:96:89:6d:3b:ca:bd:09:91:48:19:ec:
0c:57:74:fe:0b:4e:07:9b:d2:82:34:5b:b2:1b:67:3e:0f:30:
f4:50:0d:13:31:7e:89:91:aa:29:29:39:15:23:0a:fd:c2:b5:
74:1e:41:be:e2:19:e9:35:97:b6:51:dc:aa:7d:aa:2d:ca:ad:
4b:fe:99:57:19:76:a3:83:c7:e3:2d:e0:c1:2f:5c:a6:5f:12:
92:e9:65:92:39:c7:7d:dd:14:08:4a:a1:a8:ba:0e:c0:82:af:
49:4c:b2:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:26:02 2025 by rpki-client