Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa
File: 34352e342e38302e302f32322d3332203d3e20323635393333.roa (raw, json)
Hash identifier: Hjx5RjpzokA4knJgq0k249DxnjzKzpITikPCcGMUtr8=
Subject key identifier: 37:6B:16:87:99:F4:63:6B:01:F2:FD:AA:D4:68:66:5A:71:CD:5C:03
Certificate issuer: /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC
Certificate serial: 6DA0A8BC877DD13F37367288BCEB5C2EAE57DA04
Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa
Signing time: Wed 22 Jan 2025 14:57:21 +0000
ROA not before: Wed 22 Jan 2025 14:52:21 +0000
ROA not after: Wed 21 Jan 2026 14:57:21 +0000
asID: 265933
IP address blocks: 45.4.80.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:a0:a8:bc:87:7d:d1:3f:37:36:72:88:bc:eb:5c:2e:ae:57:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC
Validity
Not Before: Jan 22 14:52:21 2025 GMT
Not After : Jan 21 14:57:21 2026 GMT
Subject: CN=376B168799F4636B01F2FDAAD468665A71CD5C03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1c:00:89:e9:9a:4a:0c:6b:8e:bf:63:07:27:
32:eb:90:31:7c:66:c6:55:22:57:21:dc:90:ca:f9:
63:2b:8c:fc:fa:5f:28:fd:64:30:f2:a1:08:6d:5f:
db:5c:46:4c:51:3c:84:e0:97:64:6a:99:4f:c4:74:
a8:cc:e5:ac:e6:c8:08:37:97:96:2c:f2:ef:63:bc:
b2:3d:e3:53:70:d7:9e:34:ac:da:d3:64:dc:2d:aa:
f0:83:05:8f:d9:74:90:2d:f2:dd:55:1f:83:af:08:
b3:45:f2:a8:05:ee:7a:cb:11:88:92:d3:22:9a:9e:
cb:c4:c8:63:6d:78:ff:7c:8d:9d:84:41:c9:84:75:
0d:5f:cd:a3:67:a8:77:69:1a:3f:8f:d6:c5:ff:6d:
0a:66:4e:14:dd:91:48:f6:40:24:94:16:24:f4:4a:
5c:b9:30:63:dd:d0:89:81:ae:3d:d2:90:96:d7:f7:
71:28:1c:50:f0:13:cb:e5:51:5b:25:94:6c:5c:75:
3b:77:98:9c:fb:88:1d:59:e2:11:f3:2f:b3:7a:06:
ef:d2:46:b6:df:3f:a0:73:3a:e1:04:17:66:c9:be:
66:af:81:eb:10:f9:e1:02:3f:cf:48:81:84:28:0e:
07:44:01:d7:34:c7:ed:b4:34:e2:e1:70:2a:f3:0d:
4a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6B:16:87:99:F4:63:6B:01:F2:FD:AA:D4:68:66:5A:71:CD:5C:03
X509v3 Authority Key Identifier:
keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/34352e342e38302e302f32322d3332203d3e20323635393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.80.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:41:dd:ee:79:0d:1d:ac:fc:3b:7f:66:85:6b:ee:92:80:e4:
62:34:b8:71:07:cd:da:b5:89:3c:94:d4:bc:cf:fc:ea:5e:09:
5c:a7:7e:84:a2:e9:f1:7f:7b:cf:3c:18:c4:29:a3:7b:1f:1e:
b3:d4:39:c3:a4:33:e1:e4:46:d5:7d:0f:9e:1d:49:20:17:8e:
39:d3:48:35:6a:cd:94:1a:65:53:73:b8:3a:a8:56:ba:e6:a3:
d1:ac:b7:87:5c:ae:d6:b8:b3:12:1d:5e:37:68:7d:5f:6f:18:
e5:54:66:88:c1:62:f6:2a:ae:d8:de:ce:4e:2e:1b:13:1d:80:
66:f4:46:06:0b:d9:9c:a5:f1:01:17:dc:a2:94:b5:45:d2:12:
bf:3a:2a:a0:10:2f:7d:69:c7:b7:b4:fa:66:d0:99:10:77:af:
2a:aa:2d:d1:18:3f:c5:c2:2b:99:e9:3f:bc:be:81:11:3d:b5:
1c:49:81:79:6e:39:9f:d5:4f:7d:0a:b0:55:2f:4e:66:41:06:
f8:9b:ce:4f:66:4d:45:b4:e1:15:b3:19:97:08:12:ff:60:3f:
c4:c0:9e:ce:43:ff:7e:4a:f3:d7:71:4c:2b:96:13:7a:8b:e7:
27:2a:9e:57:8e:59:8f:9a:6d:ec:d2:da:20:01:14:47:e7:0b:
1c:a7:e5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:34:17 2025 by rpki-client