Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa
File: 34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa (raw, json)
Hash identifier: 5qBK2Zt8vngU+wMdjDMdYbQd0Z5LH8BGIDvGAD3/xkc=
Subject key identifier: 99:A4:2B:31:8B:DB:D0:91:8C:0C:9F:C4:8A:8E:BB:09:02:7B:26:8E
Certificate issuer: /CN=BF9D09185198062395625CCDCA55DA0C823BC527
Certificate serial: 0B59CACD63C8F134B4E0E9BC1B1CDA39F88678E1
Authority key identifier: BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa
Signing time: Thu 04 Apr 2024 23:21:27 +0000
ROA not before: Thu 04 Apr 2024 23:16:27 +0000
ROA not after: Thu 03 Apr 2025 23:21:27 +0000
asID: 268331
IP address blocks: 45.238.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:59:ca:cd:63:c8:f1:34:b4:e0:e9:bc:1b:1c:da:39:f8:86:78:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF9D09185198062395625CCDCA55DA0C823BC527
Validity
Not Before: Apr 4 23:16:27 2024 GMT
Not After : Apr 3 23:21:27 2025 GMT
Subject: CN=99A42B318BDBD0918C0C9FC48A8EBB09027B268E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:70:a0:9c:2d:69:bb:d0:ea:14:6e:3a:0d:
62:88:c8:c7:6d:33:1d:72:19:a4:f4:bf:ca:83:ad:
36:8e:0b:c7:5b:90:b7:0f:03:90:99:9c:9f:0d:af:
5f:e8:52:c8:7b:61:4f:e3:64:28:ea:8f:2b:7f:1d:
20:d3:5a:b0:96:f2:25:64:c4:cd:4a:42:91:e0:95:
f1:be:1a:14:56:c9:c4:e8:b4:5b:2d:64:0a:39:4a:
cd:e0:cc:9d:57:7e:a8:c7:53:7d:1c:66:3d:43:55:
1a:74:08:37:83:56:ca:82:f3:30:d3:47:4f:a1:6d:
b4:b8:83:02:99:93:81:d9:2f:9c:c0:4f:e4:63:89:
b5:57:fb:5e:00:2c:4d:e4:85:10:85:f8:ce:6c:60:
c0:71:6b:08:c9:69:06:e3:4a:6f:ed:06:b8:c2:7a:
ca:08:9a:5d:93:cf:cb:25:b7:e9:94:eb:92:10:14:
75:64:ba:04:dc:ac:ac:27:f5:71:e3:27:a7:cf:05:
32:57:55:cf:af:a2:d6:a1:ba:a1:62:b6:0c:4f:b1:
c6:30:f8:af:5a:5e:44:3e:f6:c7:e2:41:d3:06:c5:
ec:75:29:0d:8f:db:2f:f2:45:56:25:6e:60:ef:23:
73:63:6a:33:a4:80:bb:65:9c:24:e3:0d:07:9c:2e:
84:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:2B:31:8B:DB:D0:91:8C:0C:9F:C4:8A:8E:BB:09:02:7B:26:8E
X509v3 Authority Key Identifier:
keyid:BF:9D:09:18:51:98:06:23:95:62:5C:CD:CA:55:DA:0C:82:3B:C5:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/BF9D09185198062395625CCDCA55DA0C823BC527.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF9D09185198062395625CCDCA55DA0C823BC527.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H248hoi7i19GS224vzB3PSbvxpQ89Si55EHTSSGXALaa/1/34352e3233382e3131322e302f32322d3232203d3e20323638333331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.112.0/22
Signature Algorithm: sha256WithRSAEncryption
30:20:2a:0b:fc:5f:6a:24:ef:63:0f:ba:c5:2e:4e:3f:3d:db:
36:fb:bd:75:de:da:95:16:19:78:ac:0c:75:d7:b8:01:40:5a:
fb:e3:26:72:dc:b1:5f:b8:e9:cc:e6:70:4b:2a:6c:73:1a:dc:
66:40:e5:7f:0e:da:68:cf:45:bc:09:ee:56:36:e3:f6:06:07:
cd:f8:b8:34:79:ae:2e:2b:11:3c:02:5e:40:0a:da:1f:84:84:
ac:b5:72:65:bd:5d:a7:a4:97:69:e1:e6:c2:d5:fe:c6:23:27:
12:77:e3:3c:b8:75:66:6d:35:f2:ad:22:7e:09:42:23:f1:99:
1b:73:f7:72:1a:b9:23:72:72:09:5c:41:f7:a8:27:ee:bc:8e:
6f:59:a8:cb:a1:1a:da:38:a0:6a:e7:9f:06:bc:89:e3:75:9b:
59:c4:f7:d3:95:98:28:d2:11:70:60:0a:a6:3d:8a:0d:df:3f:
38:34:b3:f0:78:f5:ac:ff:0a:1f:de:5c:2e:7a:2c:c5:36:78:
6e:3a:8f:c2:19:b8:35:78:ea:22:1a:41:e8:fd:79:06:86:c2:
0a:ed:2f:48:6a:fc:ef:1d:cf:13:37:2b:c1:36:d7:21:e2:74:
1e:30:26:a5:63:6e:a7:db:91:e6:53:64:cc:d3:06:0c:f9:7f:
b3:35:aa:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:03:30 2025 by rpki-client