Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
File: 34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa (raw, json)
Hash identifier: 0HfFhFLbs2H/SkmxqxOQuBWfUFVkU4LD1cFO+Xn16i4=
Subject key identifier: D7:32:AC:43:EC:42:B4:8F:10:06:2F:55:F9:CA:39:76:79:47:B0:C9
Certificate issuer: /CN=39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C
Certificate serial: 425674A053E30A08D8085253212207C09A61EF2F
Authority key identifier: 39:B8:F3:BC:D0:5F:EC:74:27:73:5F:B3:9C:C3:F2:CD:66:F4:68:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
Signing time: Wed 29 Jan 2025 11:35:46 +0000
ROA not before: Wed 29 Jan 2025 11:30:46 +0000
ROA not after: Wed 28 Jan 2026 11:35:46 +0000
asID: 267669
IP address blocks: 45.224.192.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:56:74:a0:53:e3:0a:08:d8:08:52:53:21:22:07:c0:9a:61:ef:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C
Validity
Not Before: Jan 29 11:30:46 2025 GMT
Not After : Jan 28 11:35:46 2026 GMT
Subject: CN=D732AC43EC42B48F10062F55F9CA39767947B0C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5d:7e:8c:48:4d:df:a4:02:1c:1f:82:55:cf:
47:fd:2b:c1:cd:f7:6f:48:56:79:ac:36:90:53:9b:
9e:f5:f5:0d:d1:81:ef:bb:a0:ae:c0:cb:dd:21:80:
ed:84:cb:6c:29:10:28:e6:b6:21:6f:8c:7d:92:14:
4f:64:a7:04:aa:d3:fd:3f:64:cb:e2:fe:6f:98:7d:
c5:63:01:e7:60:bc:7e:a8:01:b7:6e:11:19:82:73:
9c:3a:11:f1:99:5d:59:ad:85:bb:8a:cd:b6:11:d8:
83:00:ca:1b:51:2e:34:29:58:b9:de:b1:c1:c8:23:
30:1a:48:b6:35:32:0a:66:4d:e9:55:eb:a6:b1:0d:
09:d2:4a:ff:2b:f5:df:50:6a:f3:54:31:5f:e1:d2:
17:d6:33:05:87:2f:be:fb:2b:5f:fa:e9:b6:04:d0:
f7:09:fa:03:85:1d:49:59:64:76:da:d7:6d:b5:69:
bb:3d:7d:ab:72:a2:a3:6b:f6:ca:e1:fb:4b:a2:a8:
95:08:2e:7d:18:71:3f:87:9b:17:a5:32:c1:3f:5e:
51:f2:36:2a:81:f5:e8:00:72:61:0a:a0:5f:47:86:
74:12:e4:30:e2:5b:58:2c:69:bf:0c:33:4f:d5:30:
26:da:c9:6e:24:ce:27:d0:ba:52:25:cf:bb:f2:da:
3f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:32:AC:43:EC:42:B4:8F:10:06:2F:55:F9:CA:39:76:79:47:B0:C9
X509v3 Authority Key Identifier:
keyid:39:B8:F3:BC:D0:5F:EC:74:27:73:5F:B3:9C:C3:F2:CD:66:F4:68:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39B8F3BCD05FEC7427735FB39CC3F2CD66F4680C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CsB6Y59ciYJ28qZef37XCbJjd5qqgptQRwxkuDw2ziou/0/34352e3232342e3139322e302f32322d3234203d3e20323637363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.224.192.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:86:03:e6:f8:00:3c:a2:ec:f0:c9:f0:77:12:bd:97:39:54:
76:9a:b9:9d:e9:fd:0d:af:09:af:dc:c6:3b:ec:18:a2:7a:94:
88:13:97:ba:46:0f:af:7b:81:a0:09:c6:dc:82:5d:fd:dd:f5:
76:3b:9e:03:0b:5b:39:0e:ef:6c:a2:2e:b0:98:5b:aa:c5:da:
73:b5:98:22:6f:0e:3c:61:7a:87:8d:bb:9b:79:37:95:c4:30:
bd:ee:72:46:40:6f:e9:89:34:59:ac:ea:1d:36:2b:0e:6e:70:
98:83:6b:b7:94:55:2a:4e:21:07:7a:7c:e3:2c:7e:89:ad:7b:
3e:ee:b7:7a:c6:39:23:ee:ac:f3:91:98:e7:f7:e8:32:d6:19:
d6:e0:fa:95:0a:e6:38:e5:50:00:dc:58:75:d4:07:ba:2f:b6:
06:56:ad:37:69:f6:9d:0c:b5:84:dc:9c:79:8a:36:be:08:57:
04:6c:33:a0:27:68:36:90:d6:09:9c:69:99:3d:dc:c5:fe:20:
3f:b7:57:1a:a4:ac:76:7d:4f:0c:04:b4:b0:d3:87:73:6b:40:
0e:70:d2:e7:38:e0:d9:f3:fb:8d:d1:50:c9:c1:ae:7d:6c:3d:
85:ed:5f:45:d8:35:4c:e0:0d:68:e2:33:fd:be:ae:a3:12:29:
a3:7a:6f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:27:35 2025 by rpki-client