Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
File: 34352e37312e36382e302f32322d3234203d3e20323637363031.roa (raw, json)
Hash identifier: IlyUmNrbAz+JCTIYOKNa16wRk1f572hbOH5DqhvMPoo=
Subject key identifier: 4F:2E:26:9C:44:3A:35:AF:B4:DB:83:F1:47:14:84:36:69:11:DA:7B
Certificate issuer: /CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Certificate serial: 71CC7D9A9CD31206AAF615FCF252FFF0FE480724
Authority key identifier: FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
Signing time: Fri 16 Aug 2024 00:37:19 +0000
ROA not before: Fri 16 Aug 2024 00:32:19 +0000
ROA not after: Fri 15 Aug 2025 00:37:19 +0000
asID: 267601
IP address blocks: 45.71.68.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:cc:7d:9a:9c:d3:12:06:aa:f6:15:fc:f2:52:ff:f0:fe:48:07:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF5D171186C7F92AA82E56A3848B9D1390938458
Validity
Not Before: Aug 16 00:32:19 2024 GMT
Not After : Aug 15 00:37:19 2025 GMT
Subject: CN=4F2E269C443A35AFB4DB83F1471484366911DA7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:00:20:66:2b:b5:71:16:a8:05:d6:29:6d:
96:dc:44:c4:86:1f:86:f3:8f:b8:2f:2f:c7:21:08:
88:af:0a:63:30:64:f8:0f:d0:ae:ca:d3:c3:0d:00:
53:7c:22:8f:7b:e4:5a:4e:5c:ed:ff:8e:c8:d0:b9:
e0:d7:88:5b:0e:b6:11:9b:cc:57:6a:bd:cc:ad:05:
f3:c8:42:4a:1f:d4:1f:87:76:b4:31:0a:8e:c9:f7:
ba:02:d0:d8:cb:47:bb:b9:32:2e:b3:7d:7a:45:07:
cb:73:c4:7b:5d:74:83:11:65:3e:ba:7a:43:65:49:
95:5c:f8:93:c7:5d:f4:48:0a:65:85:6e:f4:be:42:
a7:11:92:c6:2c:c9:cc:51:5b:0f:c5:f9:c7:c2:56:
00:99:b7:45:d0:e1:90:8f:d9:51:5d:27:6e:93:61:
87:00:0a:27:35:fc:ee:ce:b9:10:ba:0c:ef:a9:ea:
3a:35:fa:79:10:76:3d:0e:9d:1a:d6:68:d1:b7:e5:
78:3f:a0:72:8e:da:28:c9:8c:e1:18:58:15:89:15:
6d:da:f7:11:dc:4f:f7:76:81:f9:2d:53:2f:be:db:
3e:0c:50:60:ae:fb:3d:80:99:44:82:02:b6:41:00:
f2:68:7a:b5:16:66:f4:57:76:f5:b7:dd:c7:f4:1b:
14:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2E:26:9C:44:3A:35:AF:B4:DB:83:F1:47:14:84:36:69:11:DA:7B
X509v3 Authority Key Identifier:
keyid:FF:5D:17:11:86:C7:F9:2A:A8:2E:56:A3:84:8B:9D:13:90:93:84:58
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/FF5D171186C7F92AA82E56A3848B9D1390938458.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF5D171186C7F92AA82E56A3848B9D1390938458.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVaBNpcMKzq7DBzxANUPfQCgHSD1E3zauTXCscViW4H4/0/34352e37312e36382e302f32322d3234203d3e20323637363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:98:66:b8:d2:da:bb:98:75:ec:be:2a:0c:a7:8f:e1:7a:4b:
11:ba:d7:96:00:45:a6:d4:29:c0:7a:7e:39:b2:4d:36:08:93:
20:6a:68:fe:8e:d0:ea:9f:93:01:19:f2:59:fc:70:d7:64:8f:
dd:ca:c1:5a:32:0d:2d:81:ed:3d:68:05:e3:9f:0e:3e:e8:da:
33:75:72:e3:1d:a7:8c:c5:be:51:90:92:bd:87:51:d3:43:23:
69:36:b6:cf:07:cf:8e:7f:f3:d8:b0:69:a6:c0:07:9a:2e:25:
14:49:e4:b1:27:6a:3b:8d:63:23:cb:b7:1b:13:f6:a8:cd:77:
b6:23:cd:29:8f:cd:13:b1:10:69:b4:80:8a:5f:28:50:bc:57:
37:1f:d9:6d:ef:46:b9:18:89:58:e6:3a:40:e5:1d:c5:72:22:
82:42:11:b8:ca:14:ae:38:82:8c:5e:77:f4:11:d2:f5:50:de:
45:ac:5a:9b:0c:a9:ec:72:a8:7f:bf:cc:14:f1:98:36:7e:d1:
c3:93:f5:45:ea:dd:65:ac:2d:05:97:e0:63:73:9d:c9:8d:cd:
b0:7b:a0:3a:c0:77:b1:6e:1a:4d:1f:51:be:fd:77:ff:52:32:
7e:f1:a0:33:ff:39:c7:2a:19:4f:76:9f:7e:c4:72:0e:af:7d:
b1:63:ea:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:52:17 2025 by rpki-client