Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa
File: 3134332e302e3134342e302f32322d3232203d3e20323634303230.roa (raw, json)
Hash identifier: KlAQLvZ9XiK6eMmHyjQgg2fhcwYeYpXkuR6DgBB490A=
Subject key identifier: 45:FF:49:62:B5:84:01:B4:BD:C6:1B:1C:A4:66:22:A9:F5:9B:13:56
Certificate issuer: /CN=3E3293CF66479CC79346F97DCC606E532A1DA675
Certificate serial: 52E5DB7BA32B20EFBD053219E93ED0863BD482B9
Authority key identifier: 3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa
Signing time: Thu 04 Apr 2024 19:25:56 +0000
ROA not before: Thu 04 Apr 2024 19:20:56 +0000
ROA not after: Thu 03 Apr 2025 19:25:56 +0000
asID: 264020
IP address blocks: 143.0.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e5:db:7b:a3:2b:20:ef:bd:05:32:19:e9:3e:d0:86:3b:d4:82:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E3293CF66479CC79346F97DCC606E532A1DA675
Validity
Not Before: Apr 4 19:20:56 2024 GMT
Not After : Apr 3 19:25:56 2025 GMT
Subject: CN=45FF4962B58401B4BDC61B1CA46622A9F59B1356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4d:7d:c2:07:85:17:67:2b:a9:fb:da:85:6b:
02:52:bc:69:6e:45:ed:fa:39:be:de:3b:53:34:2b:
8e:5f:b3:33:33:f1:34:83:3a:ae:a7:d7:f9:4c:b2:
66:b1:5c:70:fc:ee:8e:db:9f:a4:a4:0f:b3:c9:f1:
2b:53:f7:b1:ee:60:28:55:b7:c7:d9:55:c8:94:81:
5d:22:b7:68:c6:f0:17:e3:63:ed:36:2a:31:98:64:
c8:3e:e5:af:3f:a6:1f:83:a8:3e:db:5b:d1:e4:c5:
e1:5f:4f:16:72:4c:a9:58:dc:4a:db:a2:39:40:e5:
a9:89:ca:3e:13:28:5e:47:1e:0a:bd:49:ca:ba:56:
9d:e4:83:46:46:94:da:41:8d:cb:57:cf:db:38:d4:
08:5f:7a:2f:ea:03:b3:41:b1:06:72:2b:ff:d6:f7:
e1:df:9b:b7:fd:a3:46:c1:70:7d:eb:0f:14:97:9f:
f2:af:5c:4f:aa:4f:44:07:d8:49:95:b0:d5:77:d7:
73:db:5a:d0:48:cf:9d:d0:b5:26:07:50:6c:c1:54:
3e:ba:80:6d:88:47:60:c2:1f:97:da:6d:1f:35:86:
71:ab:67:08:ca:6b:90:52:5f:83:08:b3:c7:7e:2b:
38:82:5d:1e:3a:f7:0a:a1:15:1b:5f:77:3e:e6:8e:
99:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FF:49:62:B5:84:01:B4:BD:C6:1B:1C:A4:66:22:A9:F5:9B:13:56
X509v3 Authority Key Identifier:
keyid:3E:32:93:CF:66:47:9C:C7:93:46:F9:7D:CC:60:6E:53:2A:1D:A6:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3E3293CF66479CC79346F97DCC606E532A1DA675.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E3293CF66479CC79346F97DCC606E532A1DA675.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HUHzM3xDLQ8k82m7ZnQ9rqqTGSD4Sjv1ca4dC1riVezV/1/3134332e302e3134342e302f32322d3232203d3e20323634303230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.0.144.0/22
Signature Algorithm: sha256WithRSAEncryption
87:ec:24:57:46:77:64:a4:fe:10:6f:85:6c:dd:f3:dd:e5:56:
6a:0e:08:bf:f2:f8:cf:66:d9:e4:5d:7b:8d:b6:53:69:c9:66:
7e:aa:f5:c1:d0:b5:4a:f4:3e:d4:f8:13:48:02:29:f8:5d:14:
53:f7:69:9d:95:c8:cb:95:60:15:6d:5d:93:b6:b4:9e:e5:d9:
75:a7:86:c3:51:0e:96:2a:d8:44:9c:b0:ee:60:71:99:88:3f:
cc:9e:d6:92:07:e1:32:94:b8:6f:0b:a9:b1:a5:98:7c:77:24:
17:f0:04:f1:ba:60:ec:43:02:4e:e4:fe:4f:73:fb:c0:5f:56:
64:dc:85:42:34:91:6a:a9:d1:b6:d6:7e:62:08:32:28:02:59:
c4:0d:40:0b:d4:17:21:5b:6a:b3:56:df:86:32:ac:14:16:d6:
04:13:a9:22:43:c8:be:9a:45:94:9d:a6:c9:c7:30:29:23:ff:
6e:6d:1e:b2:8e:81:7c:d2:1f:63:a5:eb:54:29:c4:9c:d0:f3:
73:bc:e6:5a:81:ab:f8:97:1d:da:48:f0:37:4f:8e:63:b1:73:
39:86:08:5c:4b:a8:37:3b:74:51:25:8c:f9:31:6f:bc:21:92:
72:96:a5:4d:05:30:76:2a:f4:0a:dc:1d:36:5b:57:90:76:16:
8d:29:91:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:51:21 2025 by rpki-client