Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/34352e37312e34302e302f32332d3332203d3e20323637363334.roa
File: 34352e37312e34302e302f32332d3332203d3e20323637363334.roa (raw, json)
Hash identifier: 2SfOt31pNJ925LmnuDFOlU20j2ddyP7TnewhNIVUIGU=
Subject key identifier: 9E:BB:68:A3:D9:D5:E5:6F:2A:AC:27:02:1D:4F:58:62:59:F5:5A:52
Certificate issuer: /CN=A5FC978C4C40DFA72931518FA40AD7A23CE7D33E
Certificate serial: 5B2FC21E4E228059AA54B02060E2A7F7A6EAAF3C
Authority key identifier: A5:FC:97:8C:4C:40:DF:A7:29:31:51:8F:A4:0A:D7:A2:3C:E7:D3:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/34352e37312e34302e302f32332d3332203d3e20323637363334.roa
Signing time: Tue 15 Oct 2024 23:13:09 +0000
ROA not before: Tue 15 Oct 2024 23:08:09 +0000
ROA not after: Tue 14 Oct 2025 23:13:09 +0000
asID: 267634
IP address blocks: 45.71.40.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:2f:c2:1e:4e:22:80:59:aa:54:b0:20:60:e2:a7:f7:a6:ea:af:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5FC978C4C40DFA72931518FA40AD7A23CE7D33E
Validity
Not Before: Oct 15 23:08:09 2024 GMT
Not After : Oct 14 23:13:09 2025 GMT
Subject: CN=9EBB68A3D9D5E56F2AAC27021D4F586259F55A52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:8b:a6:c5:6e:52:b5:d3:2f:80:4b:dd:03:
0a:c2:8a:a4:c8:f6:19:b5:e3:8f:ac:a6:8c:65:9e:
84:a1:37:d4:47:20:13:c4:86:e9:aa:dc:b4:f7:78:
d9:a1:0b:94:cf:be:a0:14:f4:64:40:a6:83:9d:f1:
73:f2:b0:ac:4c:d9:7c:53:a5:d2:1a:91:a4:06:11:
2a:2f:31:d3:45:40:38:18:19:ad:ed:29:7d:ee:93:
26:ce:a8:0c:95:c3:2e:67:1c:89:18:b4:02:07:c8:
d2:4b:af:64:37:01:36:87:ee:cd:e4:aa:52:2b:72:
68:5d:40:ae:d0:41:44:38:ce:59:4d:4d:56:cc:84:
2e:36:85:43:8e:8e:68:ed:30:36:ac:46:76:e5:50:
1b:d4:56:e6:6b:49:0b:59:f0:f9:8e:c8:9f:fd:dc:
a5:12:46:a1:ae:dc:fe:a8:e6:e1:91:b5:b7:94:2c:
00:53:70:e7:0c:43:59:09:b9:d6:86:66:21:50:b9:
e5:37:22:17:3d:78:ef:7a:8d:51:cd:94:f0:12:8e:
49:61:44:f6:41:2f:30:1e:f3:cd:0c:97:11:5a:28:
6e:40:1e:fe:cd:9d:7e:f5:8c:38:a6:10:8d:c1:f4:
bb:2e:3a:ea:85:8d:b6:8a:86:f7:a6:c3:1a:30:b5:
d7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:68:A3:D9:D5:E5:6F:2A:AC:27:02:1D:4F:58:62:59:F5:5A:52
X509v3 Authority Key Identifier:
keyid:A5:FC:97:8C:4C:40:DF:A7:29:31:51:8F:A4:0A:D7:A2:3C:E7:D3:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5FC978C4C40DFA72931518FA40AD7A23CE7D33E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8V8f5jPCdBFtRF66MFjWDK24nqTEzz9fvDXAGdMiNawo/0/34352e37312e34302e302f32332d3332203d3e20323637363334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.40.0/23
Signature Algorithm: sha256WithRSAEncryption
43:82:d6:0e:00:44:d2:0a:17:8b:ac:35:04:09:26:f9:a9:b3:
76:ee:a0:43:72:26:f9:65:88:4c:e1:0c:49:df:02:0a:7b:b0:
54:a3:af:94:14:76:66:b1:5c:e1:02:8c:f5:46:ee:4f:82:29:
ea:32:c7:b3:8f:fa:20:9d:b2:1f:60:83:b5:2d:f1:73:a3:11:
cb:aa:c7:43:04:99:4b:97:0a:54:84:cf:99:39:03:cb:d4:4c:
77:f0:7c:5a:12:9f:43:dd:99:ea:c9:ab:b5:51:7f:79:74:28:
8c:ce:ed:6f:cc:0c:81:85:da:ce:7c:40:08:e0:1f:89:ee:ad:
51:a1:27:ff:cc:66:71:20:71:90:64:5a:3f:15:d6:99:53:57:
87:29:2b:9b:33:fe:cf:e4:1c:17:68:b7:c3:65:6a:02:ba:f7:
f1:a9:d7:0c:df:96:82:50:71:87:76:de:ff:99:d3:91:4d:cc:
41:41:ce:4f:82:30:42:b4:78:00:86:c5:5b:b3:0f:56:e7:9b:
1b:3d:2f:55:56:e7:a8:2b:de:6d:4b:78:40:c0:72:bd:da:6a:
e2:db:e9:d0:69:7d:41:3a:2e:f8:ed:45:f5:40:f8:bf:5d:c3:
ad:ac:36:b4:a2:a5:68:90:1e:e7:1d:01:4c:82:bc:21:a8:ef:
3c:2c:0b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:17 2025 by rpki-client