Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa
File: 34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa (raw, json)
Hash identifier: QZ5khfUsi+958aQWGDgPg73WI3YSLxtj7k0lBaXzKQ0=
Subject key identifier: E5:44:F4:FC:16:13:48:4D:73:21:A4:61:91:2E:21:56:57:CC:46:12
Certificate issuer: /CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
Certificate serial: 3DE66986C5396184F46530368BA07A236F47F2A5
Authority key identifier: D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa
Signing time: Thu 04 Apr 2024 22:50:20 +0000
ROA not before: Thu 04 Apr 2024 22:45:20 +0000
ROA not after: Thu 03 Apr 2025 22:50:20 +0000
asID: 268479
IP address blocks: 45.161.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:e6:69:86:c5:39:61:84:f4:65:30:36:8b:a0:7a:23:6f:47:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D706703A52B31DDA5188756CCD2DCC18305F3F93
Validity
Not Before: Apr 4 22:45:20 2024 GMT
Not After : Apr 3 22:50:20 2025 GMT
Subject: CN=E544F4FC1613484D7321A461912E215657CC4612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:89:68:d5:0b:32:e3:12:73:bb:d5:98:8f:0e:
1a:97:6b:3f:81:4b:95:3a:f0:7f:e9:35:ab:a2:cb:
ab:56:42:be:25:88:80:e6:7e:99:58:94:19:a2:dd:
05:91:c5:fc:26:a5:56:37:12:8b:d5:50:a6:8e:81:
0f:1c:7f:78:07:03:99:5f:a1:46:f2:79:7c:a4:ba:
9c:63:71:5b:a4:4f:a0:dd:7d:aa:6b:0a:e1:bd:5a:
8b:70:81:e8:49:eb:8d:a3:1a:69:1e:ee:2e:9d:79:
d3:0b:e1:ee:f7:9a:e0:33:6b:87:a2:88:af:7d:93:
11:69:5f:6f:c2:e5:9d:a2:92:c6:94:80:fe:d9:26:
52:f3:2f:c5:ca:3c:19:1e:4e:6a:30:b8:4f:4e:cf:
fa:10:f8:82:83:10:5d:4f:70:2a:42:2d:9f:47:d8:
a1:e2:d6:40:d4:0e:38:4f:56:63:4c:5b:23:a5:0c:
43:01:93:cb:81:4c:27:fe:01:7c:65:4c:6c:f8:24:
c0:fd:fe:c9:6a:ba:27:2e:6b:d7:cd:2b:3a:fe:cb:
f6:78:1c:30:ff:33:c6:ee:72:f2:e5:30:ec:92:64:
ec:e1:1d:f5:4d:0e:64:bb:86:0a:6a:bb:86:96:1f:
33:04:96:73:0c:72:e1:34:05:53:89:14:64:96:b4:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:44:F4:FC:16:13:48:4D:73:21:A4:61:91:2E:21:56:57:CC:46:12
X509v3 Authority Key Identifier:
keyid:D7:06:70:3A:52:B3:1D:DA:51:88:75:6C:CD:2D:CC:18:30:5F:3F:93
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D706703A52B31DDA5188756CCD2DCC18305F3F93.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BjybTEAP24B7uZm7Gs5oENdFYGYgVo7xGAwgGcYurEe3/1/34352e3136312e3234302e302f32322d3234203d3e20323638343739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.240.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:af:a9:df:5c:75:76:54:d2:31:3e:7c:5d:a7:eb:d5:72:a1:
b8:0a:35:2c:fd:bc:bd:e1:ba:07:9c:51:61:8a:ba:27:41:3d:
45:00:b2:b1:72:8f:54:b4:d9:89:9b:6c:3a:22:d9:3f:32:21:
c1:ac:6b:fe:c2:45:61:ff:87:ae:6e:6a:a0:d5:0d:91:95:83:
2b:96:69:69:ef:e5:10:2f:ca:1b:c1:6a:96:68:91:da:f9:7e:
48:3d:38:06:84:a8:65:a0:d2:b9:e9:4f:02:e4:11:5e:6d:bc:
58:88:2a:b5:af:e6:25:76:0b:6b:e2:9b:47:2c:01:b2:75:cc:
64:e9:a2:4e:84:0f:7d:6e:a0:62:f4:0e:a7:1c:54:6c:f8:ba:
c4:4f:1d:e0:30:45:de:be:6f:71:2d:92:da:f6:00:6e:6e:d3:
db:cc:d4:a5:dc:e2:60:80:b8:9d:ae:29:44:46:62:f9:2f:06:
fd:de:ae:d9:d0:e8:ab:c6:92:88:7b:2a:56:f5:a8:25:ca:14:
e3:12:e6:d6:94:00:fa:c2:fc:fc:a4:a5:1d:25:31:2a:92:e8:
2c:de:92:81:16:a3:0e:62:51:25:e2:17:bf:d9:60:e7:de:84:
9c:35:a8:41:b1:c3:56:d2:bd:95:3d:87:bb:8b:0a:a3:d0:89:
05:13:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:46:06 2025 by rpki-client