Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/34352e3233372e342e302f32322d3234203d3e20323638323932.roa
File: 34352e3233372e342e302f32322d3234203d3e20323638323932.roa (raw, json)
Hash identifier: eeoAW50v+vw7gZxyacv3npxzwcpubUxfU+XpMQahwnM=
Subject key identifier: 80:E3:A2:3A:65:F2:9F:88:79:0A:AC:C8:44:7E:0F:B5:66:F4:CC:FD
Certificate issuer: /CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Certificate serial: 7E4C9B9A3E917C8F1157F40E8ACA8FA7B55BDFED
Authority key identifier: 99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/34352e3233372e342e302f32322d3234203d3e20323638323932.roa
Signing time: Thu 18 Apr 2024 12:25:52 +0000
ROA not before: Thu 18 Apr 2024 12:20:52 +0000
ROA not after: Thu 17 Apr 2025 12:25:52 +0000
asID: 268292
IP address blocks: 45.237.4.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:4c:9b:9a:3e:91:7c:8f:11:57:f4:0e:8a:ca:8f:a7:b5:5b:df:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87
Validity
Not Before: Apr 18 12:20:52 2024 GMT
Not After : Apr 17 12:25:52 2025 GMT
Subject: CN=80E3A23A65F29F88790AACC8447E0FB566F4CCFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:cb:85:98:2c:4b:41:72:ca:89:f4:dd:18:
4e:e4:ab:fc:3f:f1:e2:f0:c2:8f:d9:78:19:37:c2:
b2:d7:c4:79:c8:f9:5d:11:54:79:66:e8:82:19:36:
62:4c:43:2b:b1:f8:3a:cb:a7:d8:20:fb:74:be:e1:
12:9f:33:fa:59:44:00:a5:37:1b:e6:77:f4:e9:b6:
2a:40:b5:0c:f6:fe:3f:d4:e8:8c:9c:f0:4f:c2:04:
46:2a:27:6c:61:2f:fa:49:2e:d7:80:d0:c4:88:dc:
d1:4a:c6:a1:61:d4:5f:a5:f2:5b:7f:d7:00:00:9b:
b3:77:6a:31:6b:02:20:ea:f5:54:a2:6f:9c:44:2e:
98:60:94:93:bc:ae:47:20:73:d7:73:c0:be:36:77:
c9:c8:17:ae:1f:3c:d1:5d:33:e5:bb:8d:bd:5e:d8:
da:2b:81:b9:73:9a:af:06:14:2d:a1:22:c5:c3:2c:
4e:72:5b:81:77:c9:0b:3c:4d:db:0c:98:1a:7b:cd:
7a:fd:bf:25:72:5f:6a:66:97:82:12:4c:0c:43:75:
61:fc:18:8d:9e:7d:f3:12:5a:58:34:cc:5b:2f:47:
23:1f:dc:d4:16:75:86:c4:d8:f2:ca:87:38:cb:cf:
81:92:aa:6d:14:83:a9:12:1b:f6:85:95:1d:d3:5e:
cc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E3:A2:3A:65:F2:9F:88:79:0A:AC:C8:44:7E:0F:B5:66:F4:CC:FD
X509v3 Authority Key Identifier:
keyid:99:65:B1:E2:93:1C:94:CD:A0:3C:B6:3E:F3:A6:CA:E3:3B:C1:5E:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9965B1E2931C94CDA03CB63EF3A6CAE33BC15E87.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bbd3dczZLozaqUhFgrU2bTiA7j7jKozTGgERdz8o2bhn/0/34352e3233372e342e302f32322d3234203d3e20323638323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.4.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:35:af:f6:53:29:69:ae:e0:9f:20:15:e8:16:eb:0f:a1:25:
6c:4d:a3:39:d0:ed:35:32:01:56:d1:81:0a:eb:30:a7:50:f9:
89:80:47:e9:9e:45:53:cc:7d:4a:59:27:d1:3a:21:7d:7e:ba:
99:d3:c6:2f:0e:3e:8a:9a:1b:84:cd:71:3c:f8:b5:5f:d6:0e:
ba:78:2b:95:4f:92:fa:50:b1:64:fa:83:93:0a:9d:11:e7:a3:
4e:cb:9c:85:c7:23:c3:09:40:97:93:e5:8f:19:cc:15:d7:ea:
12:2e:2b:d4:2c:8c:3b:45:ee:9b:a9:54:36:c1:36:02:26:c4:
e6:e4:6f:4a:15:60:15:53:b1:e5:f5:a4:d7:99:8f:73:a3:c4:
71:51:e6:d3:84:e0:83:02:c2:e5:af:ea:db:46:7c:65:63:dc:
37:e0:dc:34:18:ec:5f:9c:f9:06:0c:1d:9d:08:0c:b2:cb:7c:
a1:7a:c7:84:25:92:17:af:da:95:01:92:e5:fb:f3:c0:54:61:
e2:17:a2:89:d2:3a:dc:fc:74:47:5c:d5:24:6b:a5:5b:74:7a:
13:f9:24:a8:4a:77:33:6e:4c:0d:fe:e8:1f:62:f7:c9:fa:a8:
e9:ee:9c:86:8f:31:d8:7b:27:19:c7:ab:76:be:d0:8c:a7:3c:
f4:87:c6:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:15:36 2025 by rpki-client