Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
File: 34352e3136352e32302e302f32322d3232203d3e20323633363635.roa (raw, json)
Hash identifier: C5AwftG5UIdM9w7DkVssbpeb1srHOIT6DStCAUng2Kk=
Subject key identifier: CA:05:22:5A:9C:23:76:2E:D1:72:AF:C6:E9:CE:FD:44:E4:F3:6E:8F
Certificate issuer: /CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Certificate serial: 63CC8B177A1D554FC3D5A73976341B37C061E593
Authority key identifier: DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
Signing time: Thu 07 Nov 2024 20:54:50 +0000
ROA not before: Thu 07 Nov 2024 20:49:50 +0000
ROA not after: Thu 06 Nov 2025 20:54:50 +0000
asID: 263665
IP address blocks: 45.165.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:cc:8b:17:7a:1d:55:4f:c3:d5:a7:39:76:34:1b:37:c0:61:e5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDF75D11A85F5023747B20E973994EC53D23A68E
Validity
Not Before: Nov 7 20:49:50 2024 GMT
Not After : Nov 6 20:54:50 2025 GMT
Subject: CN=CA05225A9C23762ED172AFC6E9CEFD44E4F36E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e8:b1:40:f6:f0:5d:a6:d9:dc:46:76:d3:82:
43:bc:d7:f6:75:b5:5d:17:a6:0c:be:95:a3:b4:8c:
0c:b0:12:2c:56:8a:3d:36:17:08:f3:7b:df:68:02:
ac:29:3e:45:07:5f:98:14:95:8b:5c:72:f3:aa:e4:
f1:b8:20:bf:24:39:22:49:37:dd:f1:36:c9:a1:8e:
55:0b:9e:6b:d1:2d:f5:a2:1c:b2:75:e9:dc:0d:b6:
05:b7:0f:44:6b:54:82:21:93:a6:ff:ae:d4:e2:23:
57:3d:89:ab:68:97:4c:4c:c5:5d:a7:cd:ae:b6:b8:
e7:89:fb:59:77:ec:25:11:bc:63:96:25:e5:4e:3f:
ac:99:56:29:4d:42:17:bc:0b:3d:d8:62:06:34:67:
59:85:68:e0:27:37:d0:fd:2f:4c:12:a4:cd:85:fa:
b0:8d:60:ed:71:ae:b4:40:9b:f4:76:b9:ea:76:ee:
56:f9:10:c7:7e:35:63:ec:c6:28:4c:b6:d5:9b:78:
d1:b3:e4:27:da:5e:16:2b:61:66:56:ce:ab:d3:10:
db:38:9b:9e:f0:c0:64:36:2e:d3:17:70:10:58:a4:
c6:fd:02:1f:c3:fe:b1:07:14:1b:c2:15:65:3b:14:
b2:fd:5a:70:c2:1c:2b:fb:ca:60:81:a7:8d:6a:3b:
54:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:05:22:5A:9C:23:76:2E:D1:72:AF:C6:E9:CE:FD:44:E4:F3:6E:8F
X509v3 Authority Key Identifier:
keyid:DD:F7:5D:11:A8:5F:50:23:74:7B:20:E9:73:99:4E:C5:3D:23:A6:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/DDF75D11A85F5023747B20E973994EC53D23A68E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDF75D11A85F5023747B20E973994EC53D23A68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3232203d3e20323633363635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.20.0/22
Signature Algorithm: sha256WithRSAEncryption
77:4e:52:31:d3:12:a3:fa:6e:0d:9a:50:64:98:c5:a1:00:42:
97:53:53:51:ef:d9:30:50:c4:8d:f8:23:a2:58:80:5a:8c:03:
4c:5d:76:99:e6:c4:a8:a5:73:4a:cb:d9:e0:ab:59:c9:eb:5f:
2a:6c:aa:3a:9e:0e:33:15:0d:11:33:17:c2:84:96:92:91:23:
2c:6b:2c:bc:f2:00:d1:ae:a0:0b:d1:e1:23:2a:bb:b9:e5:ec:
00:32:17:9e:7c:99:07:14:43:79:f5:40:fd:01:16:f0:a8:9a:
1d:61:4c:de:f5:94:a3:1b:c3:93:e8:a0:5b:5f:d1:76:5c:ff:
e0:6c:f9:51:38:97:b0:43:b4:e6:0f:5d:f8:93:aa:f8:a1:ee:
27:44:20:ee:12:22:68:04:38:a0:81:7e:50:e1:d6:52:60:22:
76:da:22:3f:0b:c9:24:c8:8d:90:9a:61:92:fd:3a:2c:40:fd:
1a:e5:a8:bb:4d:8b:10:16:19:80:07:f3:50:bc:c4:ff:17:00:
c0:84:6d:b1:d7:24:3d:79:b6:22:dd:b0:bc:29:e4:b6:53:9e:
99:c1:2b:5c:30:de:2c:f8:76:1b:72:2c:32:f1:9f:98:66:06:
4c:00:38:4b:81:bf:1a:a1:36:5b:f6:7e:7b:7b:20:d5:7e:3f:
02:0e:30:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:05:26 2025 by rpki-client