Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
File: 34352e3137352e31322e302f32322d3234203d3e20323638383734.roa (raw, json)
Hash identifier: 6nVw7hd57/KKI4kdA0jvWDOdbqeesdCbXtgDiROw8C8=
Subject key identifier: C0:AE:45:D3:FB:84:2D:1C:13:06:F2:4F:FB:90:36:AA:FE:4B:73:91
Certificate issuer: /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial: 293F83800959971C903484D3D4F3B62E8724500C
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
Signing time: Thu 04 Apr 2024 06:28:08 +0000
ROA not before: Thu 04 Apr 2024 06:23:08 +0000
ROA not after: Thu 03 Apr 2025 06:28:08 +0000
asID: 268874
IP address blocks: 45.175.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:3f:83:80:09:59:97:1c:90:34:84:d3:d4:f3:b6:2e:87:24:50:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Validity
Not Before: Apr 4 06:23:08 2024 GMT
Not After : Apr 3 06:28:08 2025 GMT
Subject: CN=C0AE45D3FB842D1C1306F24FFB9036AAFE4B7391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:cf:9f:5a:58:58:c3:7e:2b:7f:a5:51:fe:
13:1c:36:fc:4d:79:6b:02:d4:8c:d6:14:f3:11:9f:
08:0d:0d:e4:8c:2c:92:a8:c7:fb:c9:c1:6d:4e:ac:
67:2c:bb:55:6e:8e:74:c4:ec:d8:e6:34:1a:f3:19:
ca:d5:88:ab:7e:e4:af:1f:29:9f:4e:62:b2:d8:a2:
ae:78:b9:78:ff:70:3b:62:d2:f7:c6:d8:de:aa:3e:
a2:8d:74:f0:ed:4f:cb:32:be:cf:88:b4:d1:1a:13:
87:72:e9:c1:9e:43:c6:bb:6e:35:38:b1:3e:1b:42:
19:ab:53:3d:83:04:67:d1:db:6d:54:3d:6f:48:fa:
89:bc:20:e8:8b:86:20:84:79:e0:60:c0:33:56:4f:
d7:c8:9e:05:d2:df:18:d7:ab:f7:0a:4c:45:3e:b4:
9b:42:31:8a:69:56:cc:84:e6:bb:0f:a1:40:8c:85:
54:6c:5e:45:b6:1b:a6:17:f3:d1:3a:34:0c:57:d3:
5d:57:c8:39:10:04:6c:b7:33:c7:9c:e4:10:0c:42:
58:19:a2:ef:e2:b4:9d:a6:18:27:a1:ae:58:b5:f4:
8e:4a:ba:96:21:f0:c1:fe:97:6d:e2:03:64:9a:bd:
4c:b8:b8:b4:4f:3b:98:7d:33:28:7b:43:5e:9b:97:
18:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:45:D3:FB:84:2D:1C:13:06:F2:4F:FB:90:36:AA:FE:4B:73:91
X509v3 Authority Key Identifier:
keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/34352e3137352e31322e302f32322d3234203d3e20323638383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.12.0/22
Signature Algorithm: sha256WithRSAEncryption
27:6b:6c:1d:fc:21:ab:39:20:87:2f:b8:6a:85:27:6d:35:5f:
86:59:d3:17:9e:24:7c:14:47:ea:92:8c:3e:5e:5d:12:6f:01:
53:57:f7:27:35:bf:d1:4b:1a:f4:50:f1:29:38:8a:c9:f1:f8:
61:02:70:ac:ff:10:16:cf:07:90:32:80:96:4d:6a:8a:81:e2:
5b:3a:a1:08:d4:86:ab:9a:64:9c:79:bd:d5:56:24:3c:99:c1:
c7:fd:d5:f3:b6:02:09:8a:33:66:83:51:39:05:21:95:85:f4:
90:e0:23:d1:98:7b:11:65:4f:32:6c:ff:1f:5e:b4:69:a9:6e:
be:bc:af:8e:a7:de:97:60:a6:3b:bc:31:b8:d4:d0:aa:d0:a7:
b3:8e:dc:26:97:c3:b1:55:bd:51:c7:33:16:27:97:7a:b9:13:
8d:74:b4:8e:93:fe:46:0a:c0:b6:f0:4a:02:9e:64:32:b0:1a:
53:cf:db:50:8b:c9:ae:81:a6:ad:76:83:d3:b6:52:2e:aa:53:
2c:66:33:80:20:37:eb:90:c4:45:ea:b3:77:a7:7e:1d:a1:9a:
82:af:28:a9:76:dd:3a:b2:f4:5c:9c:b6:79:71:1b:15:6e:e9:
13:5e:d7:8f:4c:b9:34:98:e0:37:cf:18:cf:54:11:e9:61:ce:
55:5a:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:26 2025 by rpki-client