Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323032.roa
File: 34352e3139312e3230342e302f32322d3234203d3e20323032.roa (raw, json)
Hash identifier: dmChxSPeq0RZCKndH6z9ALcY3I6SKPJrJ6VEoJz4Zao=
Subject key identifier: 3A:E9:E0:45:EC:C5:93:58:E0:4A:98:33:DC:F1:A6:E2:B0:FD:47:FA
Certificate issuer: /CN=D495C627858363377EC2F78374A56D2330185EC0
Certificate serial: 1A238E015A476C09E2431881DA3B3B231C3DED5D
Authority key identifier: D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323032.roa
Signing time: Thu 04 Apr 2024 23:12:28 +0000
ROA not before: Thu 04 Apr 2024 23:07:28 +0000
ROA not after: Thu 03 Apr 2025 23:12:28 +0000
asID: 202
IP address blocks: 45.191.204.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:23:8e:01:5a:47:6c:09:e2:43:18:81:da:3b:3b:23:1c:3d:ed:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D495C627858363377EC2F78374A56D2330185EC0
Validity
Not Before: Apr 4 23:07:28 2024 GMT
Not After : Apr 3 23:12:28 2025 GMT
Subject: CN=3AE9E045ECC59358E04A9833DCF1A6E2B0FD47FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c1:f0:81:be:f4:d5:02:92:a6:0f:b1:94:1d:
77:b1:f8:7d:89:a4:67:f8:be:0d:38:e2:99:21:91:
49:32:98:f6:b8:0a:51:7d:fe:92:18:2a:32:f6:d1:
26:dd:d5:19:03:3e:85:1b:03:61:ec:49:d0:df:ee:
15:d6:05:d1:e6:96:3a:ff:a1:38:9b:18:c4:dd:cc:
bf:15:1f:09:76:2a:51:43:e9:d7:ed:66:f4:0e:14:
52:83:bb:fa:f3:f0:3a:83:e4:c2:b3:46:f8:5a:75:
91:63:0b:fe:2e:0b:20:a2:fc:fd:ab:31:5e:f8:7a:
40:2e:ce:d6:b5:20:92:21:f1:05:d5:74:f4:30:91:
56:26:09:90:2b:a8:8c:88:2e:12:ea:ce:68:eb:0c:
a8:eb:85:88:dd:ed:e7:f3:8e:ef:56:78:de:ab:e9:
9e:4c:e3:50:f7:35:1a:05:84:31:0a:f6:e4:bb:94:
9f:1e:a6:a0:89:1e:1f:f7:f2:5c:58:8d:36:05:de:
ab:e0:2a:1e:c7:03:1a:f5:b9:77:80:54:ac:f2:53:
8d:3f:0a:0a:6f:9f:a0:71:d3:19:95:13:cd:0e:23:
e7:22:03:81:79:7a:5b:f2:96:10:a9:32:d2:1e:a1:
db:57:32:72:c9:4c:31:86:a6:ec:92:96:a2:21:84:
ff:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:E0:45:EC:C5:93:58:E0:4A:98:33:DC:F1:A6:E2:B0:FD:47:FA
X509v3 Authority Key Identifier:
keyid:D4:95:C6:27:85:83:63:37:7E:C2:F7:83:74:A5:6D:23:30:18:5E:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/D495C627858363377EC2F78374A56D2330185EC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D495C627858363377EC2F78374A56D2330185EC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMavfXo8jgvwsFy53k4ELqxGyYaCXehp9Jzn9QrT2hS8/1/34352e3139312e3230342e302f32322d3234203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.204.0/22
Signature Algorithm: sha256WithRSAEncryption
31:5c:96:82:16:aa:e7:cb:fb:4f:2f:f3:67:d3:5f:44:a7:ae:
c8:8e:40:b3:d3:3f:3b:06:43:b9:5b:01:aa:c3:95:56:99:c7:
0d:74:22:73:27:ad:29:d6:f8:f8:0c:c4:b7:84:79:7f:62:8a:
89:9b:a7:ac:6b:86:85:5f:c0:c4:39:47:2e:0d:73:fd:9d:3c:
9b:e2:3b:09:2b:42:6c:ee:49:5d:b7:3b:cc:54:46:4c:24:a8:
83:91:00:79:d7:0a:63:4d:31:b0:34:9b:e1:65:fc:78:15:10:
5c:fd:c9:3b:32:c1:0b:e8:dc:d7:96:ac:b0:1f:a0:9b:39:b6:
87:75:04:96:55:de:33:47:f5:04:80:ec:76:dc:e3:03:8a:2d:
f4:ee:f2:02:ee:2a:38:79:91:d3:5e:63:dd:d3:53:b7:a8:ac:
fe:15:0c:34:e0:a7:a2:2d:f9:90:66:a7:90:cf:d2:eb:10:7f:
8f:b3:46:ba:83:ec:ea:aa:0d:22:bd:d1:3c:86:1e:13:90:b3:
73:21:21:3c:44:c7:57:54:c1:60:cb:0b:53:e4:96:80:a7:9a:
ce:22:30:15:89:c2:ff:5a:58:ad:3f:d8:39:34:b1:5c:4f:e0:
ae:65:c6:09:5e:01:8b:9e:2b:e0:ed:7e:2a:a4:dc:23:ec:65:
c1:84:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:11:59 2025 by rpki-client