Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa
File: 34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa (raw, json)
Hash identifier: 4PWby78ehy3CRp4pWqFXib/8/o/5L1h775jEicFARUY=
Subject key identifier: 4D:CC:F5:02:28:55:C8:FB:BF:16:97:89:12:28:98:D8:EE:CF:28:EF
Certificate issuer: /CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Certificate serial: 781708BEB89E18CC57A596B943EEF985E058C581
Authority key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa
Signing time: Mon 06 Jan 2025 18:53:57 +0000
ROA not before: Mon 06 Jan 2025 18:48:57 +0000
ROA not after: Mon 05 Jan 2026 18:53:57 +0000
asID: 267059
IP address blocks: 45.228.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:17:08:be:b8:9e:18:cc:57:a5:96:b9:43:ee:f9:85:e0:58:c5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Validity
Not Before: Jan 6 18:48:57 2025 GMT
Not After : Jan 5 18:53:57 2026 GMT
Subject: CN=4DCCF5022855C8FBBF169789122898D8EECF28EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:20:a9:52:ee:ef:22:1f:eb:fc:5e:56:16:3f:
ce:f1:59:90:fd:64:d1:f4:9b:6b:71:2a:6f:c1:84:
c4:e8:a2:26:ba:5e:28:c1:c7:cc:2d:e8:5b:16:ba:
6a:10:06:30:69:0e:53:54:52:48:f3:ce:a2:53:4b:
7e:23:64:3e:79:a9:7f:66:4c:af:d6:35:2d:2c:af:
73:8d:f2:23:c4:8e:4a:89:26:6b:ae:c6:9f:9d:29:
63:d4:8f:2f:9a:93:b4:6d:58:77:23:b3:6e:aa:db:
90:cc:d3:72:9d:f6:16:93:a6:78:24:11:a1:a2:15:
68:fc:3e:40:1e:e8:c6:e0:97:34:12:fa:d0:c3:fc:
14:b8:f0:a0:24:9f:01:8c:31:9d:0c:c4:8e:db:47:
41:6c:83:bb:2e:d9:7c:ea:c5:2a:eb:70:c9:d9:73:
17:f6:e0:e1:10:4d:22:1b:27:15:16:97:b0:49:3c:
86:f3:bf:a2:1b:95:2b:bc:33:ad:fc:2a:ef:62:ae:
97:cd:c1:2e:d2:71:6a:f1:e0:ad:20:5c:b0:3e:f6:
55:07:5b:13:3f:7a:a5:51:de:53:17:d2:06:eb:44:
11:78:b7:14:8a:5c:dd:63:b7:a1:d2:62:01:a3:9e:
6e:6f:5a:33:3c:24:b8:dc:e4:c2:2e:af:f0:cc:a5:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CC:F5:02:28:55:C8:FB:BF:16:97:89:12:28:98:D8:EE:CF:28:EF
X509v3 Authority Key Identifier:
keyid:3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/34352e3232382e3131302e302f32342d3234203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.228.110.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:57:b5:4d:ed:e3:ec:55:b4:c7:a1:4f:d9:e3:47:a3:a4:89:
e9:c8:8a:a0:9b:43:64:15:0f:a0:58:32:9d:52:13:06:90:2c:
af:b9:38:d4:fa:47:00:7e:22:60:21:f6:9d:96:da:77:a4:23:
ee:bd:13:b6:1a:47:e8:e1:6b:47:09:10:32:d6:8b:74:4e:9f:
18:23:16:de:11:10:36:62:52:27:cb:29:89:e4:9d:81:0a:17:
f1:dd:21:59:86:13:22:27:7c:20:39:07:e7:26:7a:6e:5e:b0:
bb:c0:26:d1:d5:45:38:09:e8:e2:9c:86:a7:ae:c7:13:ee:cf:
ed:ff:14:15:52:cc:4d:f8:7d:06:37:63:4f:14:9f:5e:79:d5:
a7:ae:e2:54:10:00:8d:71:5f:6a:b1:73:fe:a2:e7:9b:fe:81:
52:31:80:32:32:30:d0:77:72:8b:de:6d:40:dc:c8:75:d8:95:
c1:5d:8e:2a:75:45:b3:fe:57:56:d9:6b:79:70:af:c0:04:53:
60:58:1b:c3:65:39:b3:67:c8:df:86:53:3f:9c:f2:82:57:33:
13:e6:34:64:21:be:94:87:47:ad:77:68:95:50:d3:00:8d:e0:
d9:1e:a5:ff:02:b2:f1:b8:5c:87:6b:89:39:8d:cb:b1:1b:75:
ea:72:18:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:09 2025 by rpki-client