Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa
File: 34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa (raw, json)
Hash identifier: jS/sq3uYyioMez6EcVMB0onTuJL77AQj0ZY8ktUSpT4=
Subject key identifier: 8D:22:11:E7:F8:FA:51:3D:69:6E:3F:32:1C:00:49:92:62:40:0A:5B
Certificate issuer: /CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Certificate serial: 10FF9B631BA3AC0737A8A689F5690BEF71491713
Authority key identifier: 82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa
Signing time: Thu 04 Apr 2024 12:27:48 +0000
ROA not before: Thu 04 Apr 2024 12:22:48 +0000
ROA not after: Thu 03 Apr 2025 12:27:48 +0000
asID: 268250
IP address blocks: 45.236.236.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:ff:9b:63:1b:a3:ac:07:37:a8:a6:89:f5:69:0b:ef:71:49:17:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82564553AE299B22FAC12CA23483B4453FF22D0A
Validity
Not Before: Apr 4 12:22:48 2024 GMT
Not After : Apr 3 12:27:48 2025 GMT
Subject: CN=8D2211E7F8FA513D696E3F321C00499262400A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:da:57:8d:d2:b4:b6:ad:4b:1a:c8:bc:db:6c:
fc:cf:2f:9a:34:91:19:92:17:e4:df:fc:b3:0f:27:
f1:e6:02:74:d0:49:c8:e0:5c:e5:c0:e1:86:86:70:
7f:d1:14:b2:46:49:ae:dd:53:e7:b0:65:1f:49:3e:
1a:41:bb:18:bf:b3:eb:cb:38:a0:b8:92:8e:e8:d5:
87:84:39:50:84:94:1e:67:6a:57:b9:96:87:3b:6b:
4e:53:d8:eb:d6:2a:86:76:d1:76:ec:37:67:bc:12:
22:93:dc:94:bd:e5:3a:75:d3:d1:a7:b3:12:67:f9:
40:92:b3:9d:ff:74:d3:fc:90:a8:e7:3b:15:e5:85:
be:62:2a:a8:9b:8f:de:39:c5:a5:3c:93:08:07:05:
a8:3d:61:d4:80:28:93:42:a7:59:74:fb:c9:05:84:
d8:db:03:3e:62:9c:cc:ce:a7:ed:6e:77:9c:94:58:
08:02:f3:43:63:b5:1b:e5:bc:42:2d:05:d1:fc:88:
58:51:2f:d0:dd:ef:ca:b4:bc:f1:dd:5f:10:48:8b:
fe:74:83:2a:ab:14:82:e0:91:0a:6e:1c:2b:d0:be:
00:07:88:7f:ca:fd:c0:79:7f:9e:04:d0:21:e1:41:
74:50:ac:3a:7b:70:54:fc:08:a1:81:01:34:de:2b:
9c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:22:11:E7:F8:FA:51:3D:69:6E:3F:32:1C:00:49:92:62:40:0A:5B
X509v3 Authority Key Identifier:
keyid:82:56:45:53:AE:29:9B:22:FA:C1:2C:A2:34:83:B4:45:3F:F2:2D:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/82564553AE299B22FAC12CA23483B4453FF22D0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/82564553AE299B22FAC12CA23483B4453FF22D0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BFn7LQ2HsnA2JbTdLp6FeEpmyc8V8vREpFM3Cua7nduc/1/34352e3233362e3233362e302f32322d3234203d3e20323638323530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.236.0/22
Signature Algorithm: sha256WithRSAEncryption
13:2b:a1:8c:15:92:f0:8e:5c:fa:3b:55:84:6a:30:dc:45:d5:
6f:93:07:0c:14:80:a7:9d:7b:f9:81:3a:16:0d:29:45:f1:17:
39:78:4c:27:b1:60:4b:f1:6d:ee:0d:3d:15:4c:32:f9:d0:69:
10:64:df:73:25:2f:e1:4b:63:90:80:ae:3c:51:82:60:ad:ec:
34:cd:b5:7a:2b:f0:f7:67:66:41:e0:4a:2c:a0:2a:b0:af:ab:
87:ad:ae:5b:00:e5:17:5f:35:05:06:9b:e0:32:c7:0e:4b:14:
74:07:ae:0e:f6:92:c2:32:47:f5:9e:8e:41:72:9c:95:27:71:
b9:05:d3:80:89:63:1f:e7:9b:70:1a:e0:5b:50:e5:dd:a0:9b:
45:3d:51:ac:ab:54:02:53:97:01:20:b9:f3:67:74:c3:26:5a:
38:89:f5:a8:a0:5b:33:4a:91:55:89:b3:41:2e:ad:3c:6d:8f:
ab:bb:cb:56:60:7f:76:fc:20:70:dc:1a:c4:c6:1d:b9:b7:a2:
dc:50:29:1c:64:a7:e6:06:bf:54:ad:5e:43:09:6f:1f:ee:30:
1c:f4:b7:49:0a:80:53:88:b9:4c:aa:6c:8e:00:87:43:93:58:
71:93:1f:d5:bb:7a:50:57:4f:e5:d3:10:94:e4:a9:9a:b2:16:
53:b3:41:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:10:18 2025 by rpki-client