Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa
File: 34352e342e3130382e302f32322d3234203d3e20323636303437.roa (raw, json)
Hash identifier: OpvB/7zQLmWM8bVLQe2olhcc0rl6EB3cIjnlgXWlZr8=
Subject key identifier: 1F:BE:11:80:74:B5:BF:04:C4:C7:E9:3D:FA:E0:E0:6E:2A:22:31:C4
Certificate issuer: /CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Certificate serial: 58264D706BABB6135236721A8BBDDD012432ABB8
Authority key identifier: 5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa
Signing time: Tue 21 Jan 2025 20:02:37 +0000
ROA not before: Tue 21 Jan 2025 19:57:37 +0000
ROA not after: Tue 20 Jan 2026 20:02:37 +0000
asID: 266047
IP address blocks: 45.4.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:26:4d:70:6b:ab:b6:13:52:36:72:1a:8b:bd:dd:01:24:32:ab:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5E99902C72558D92C16FA24CBA33F7866E6D6E9B
Validity
Not Before: Jan 21 19:57:37 2025 GMT
Not After : Jan 20 20:02:37 2026 GMT
Subject: CN=1FBE118074B5BF04C4C7E93DFAE0E06E2A2231C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:b5:0b:63:b1:41:46:d2:0d:f5:39:f9:fb:
c3:19:9f:55:10:9a:e9:33:d8:05:d6:ae:68:cc:fe:
ed:71:ac:21:98:2a:ba:b9:9b:cd:7e:97:67:4f:f0:
df:21:5e:f6:4a:9d:cb:83:53:47:03:9e:45:04:9e:
4b:9b:6d:e4:ed:26:32:38:20:0f:72:24:3c:59:9f:
c1:50:42:ad:bf:81:86:0b:c2:33:06:5d:01:46:b9:
4b:62:0a:57:6f:9b:19:18:2c:3a:b6:ae:0e:8a:62:
e3:69:d5:4a:0f:50:5d:df:a6:b5:f4:89:8c:3c:a8:
e1:c9:de:ad:f2:60:60:2e:b4:ff:c3:92:f8:37:35:
86:a6:2d:1c:19:eb:e8:4d:8d:3d:cb:72:32:72:0c:
ad:18:7b:ff:91:dc:96:85:38:ff:b9:8b:2c:d9:1c:
22:c4:c7:7a:18:68:07:b0:8f:ac:7b:23:b1:93:da:
9f:27:48:8a:9a:15:e2:20:1f:01:e2:54:0b:ca:d8:
21:b3:e7:37:b1:5a:57:93:1e:ca:54:ac:23:83:0d:
4c:a1:f0:08:16:cc:e6:4e:59:37:2c:84:9b:93:29:
14:1d:4a:e3:fc:bd:6c:3a:1f:23:bd:eb:6a:9e:fb:
62:cc:4f:ce:81:e7:6a:63:5e:af:71:fe:39:5c:09:
48:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BE:11:80:74:B5:BF:04:C4:C7:E9:3D:FA:E0:E0:6E:2A:22:31:C4
X509v3 Authority Key Identifier:
keyid:5E:99:90:2C:72:55:8D:92:C1:6F:A2:4C:BA:33:F7:86:6E:6D:6E:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5E99902C72558D92C16FA24CBA33F7866E6D6E9B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fUyD7tFxMZVyRSCuShiWWAmmYmBxbggv3SFiVjru5cH/0/34352e342e3130382e302f32322d3234203d3e20323636303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.108.0/22
Signature Algorithm: sha256WithRSAEncryption
96:89:61:0d:14:50:71:52:56:36:f4:06:90:69:3d:0f:b3:46:
0d:a0:ee:e9:64:29:69:32:73:46:b8:14:e2:6b:00:e4:d0:26:
cf:02:d7:0f:17:e1:cf:90:b4:f3:61:50:7e:60:d0:cd:ac:51:
63:cd:ec:1d:39:ed:32:c3:5e:a8:16:99:44:c2:43:cc:e4:5d:
6b:a8:93:41:9d:e9:98:a0:ec:a8:c9:52:8e:60:b1:a6:8c:de:
06:c2:f0:30:0f:40:50:35:9a:87:4b:08:47:a2:82:de:dd:95:
4a:e4:8c:4a:c5:0f:ab:bf:e1:89:ed:87:dd:b4:b7:9b:97:18:
b5:ce:ea:5c:95:8b:e8:af:d6:6f:6f:01:38:df:35:b9:7f:7b:
ab:93:ce:73:92:a6:d7:dd:18:b2:09:07:10:e5:6b:f2:5b:ba:
4f:51:61:1a:b4:e1:64:06:ac:44:11:38:25:19:f0:6f:bb:0e:
3b:00:4b:53:aa:7e:70:95:d2:df:1b:c9:6a:17:77:b9:5d:f4:
38:03:86:bd:89:69:75:6d:7e:39:4c:76:c0:67:d9:f6:34:a6:
64:52:49:2b:6b:18:2e:20:fb:a5:ea:dc:72:4f:bc:0d:7e:90:
64:78:35:85:b0:a9:30:76:de:14:fe:61:b6:1b:cc:1d:6a:67:
1b:c8:d2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:09:10 2025 by rpki-client