Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31312e302f32342d3234203d3e20323639363938.roa
File: 34352e3139312e31312e302f32342d3234203d3e20323639363938.roa (raw, json)
Hash identifier: iv0POY8mIRyOg/HYOYDDX1LFqC3RWiM1Z2FqcPd0htU=
Subject key identifier: 82:2B:06:D4:A2:E1:CA:A6:BC:06:D4:50:4D:B7:E8:AE:23:DE:18:AE
Certificate issuer: /CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Certificate serial: 687CA08E50E823349B6EE4B08F718130CC7070B3
Authority key identifier: F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31312e302f32342d3234203d3e20323639363938.roa
Signing time: Thu 04 Apr 2024 04:50:42 +0000
ROA not before: Thu 04 Apr 2024 04:45:42 +0000
ROA not after: Thu 03 Apr 2025 04:50:42 +0000
asID: 269698
IP address blocks: 45.191.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:7c:a0:8e:50:e8:23:34:9b:6e:e4:b0:8f:71:81:30:cc:70:70:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F221C31BD2AD9D051303E1E7DE991DC00987A722
Validity
Not Before: Apr 4 04:45:42 2024 GMT
Not After : Apr 3 04:50:42 2025 GMT
Subject: CN=822B06D4A2E1CAA6BC06D4504DB7E8AE23DE18AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cb:c7:b9:e1:1a:cc:6e:63:d6:ab:2d:26:0a:
01:7a:66:62:66:03:36:e6:35:45:12:bf:da:2f:c0:
8e:e7:02:5c:25:e8:85:c5:c0:36:9c:99:a9:46:ab:
24:1f:cd:27:62:53:32:53:f6:a9:16:01:30:94:28:
15:7e:90:db:98:83:e1:ad:7e:c9:d7:c3:a9:46:97:
57:f1:66:75:34:b6:28:57:1a:1e:b5:72:55:08:7c:
41:3c:99:e8:9a:1d:17:22:46:82:ec:a5:a4:1b:40:
34:b6:0a:f9:9a:65:7c:60:8f:3e:62:41:65:79:ad:
ce:f3:5c:86:fb:cf:e2:51:29:0e:d7:c5:19:7f:92:
4a:37:22:86:9d:05:9e:78:f2:74:d5:d6:6a:f4:af:
0a:6c:92:64:83:cd:2d:a0:43:8d:9d:7e:22:95:4d:
24:bd:d0:4a:f5:1d:24:a4:c1:37:4e:46:61:fa:f6:
af:e6:e0:59:10:16:65:8e:e0:77:59:00:fc:c5:a4:
b0:93:f0:2d:ec:b1:5e:33:79:0c:71:af:20:74:66:
d3:45:e1:b1:57:c6:6a:1c:29:47:d9:60:e8:49:55:
19:63:8c:27:57:11:4b:e6:65:95:3f:11:44:8e:0c:
be:f8:f3:8f:71:7f:59:ca:07:92:50:6f:70:63:fa:
30:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2B:06:D4:A2:E1:CA:A6:BC:06:D4:50:4D:B7:E8:AE:23:DE:18:AE
X509v3 Authority Key Identifier:
keyid:F2:21:C3:1B:D2:AD:9D:05:13:03:E1:E7:DE:99:1D:C0:09:87:A7:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F221C31BD2AD9D051303E1E7DE991DC00987A722.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/1/34352e3139312e31312e302f32342d3234203d3e20323639363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.11.0/24
Signature Algorithm: sha256WithRSAEncryption
79:eb:a3:8e:a5:69:bb:a2:b8:59:9a:4f:ac:b5:78:5d:53:17:
d8:3a:96:2e:60:f2:22:42:d1:64:09:24:c2:5d:f7:06:07:f4:
02:88:37:68:92:ec:d7:e9:20:bd:19:b9:f9:b9:76:6b:fe:bb:
a9:21:c7:42:f4:a1:79:6e:9a:01:3f:f0:3d:bc:03:a4:f6:3b:
68:38:59:7d:b9:8a:60:3d:78:63:a3:3a:7e:f0:12:59:60:52:
da:ab:0a:81:bb:de:e7:c7:f8:df:2c:82:96:68:26:b7:a2:5c:
1a:4c:dc:fb:e0:13:10:7b:a6:19:e5:bd:c8:37:fb:45:58:6f:
df:0c:f8:70:04:27:f9:70:13:f4:dc:0c:db:a8:f7:05:d9:a7:
1f:a3:63:30:17:d0:5e:64:34:5f:20:6e:77:1a:df:68:c5:5d:
67:34:c2:78:fc:8a:a4:89:60:c5:32:f4:69:77:f3:80:c2:ec:
e1:82:b8:6a:d4:4c:81:4e:63:cc:b1:76:2b:db:ed:4f:69:f6:
f6:ba:a7:b8:a4:0d:92:da:8a:56:03:db:a2:5f:78:03:be:81:
76:a9:7c:73:63:dc:32:ee:a6:af:bd:8f:a4:ba:e0:18:0b:b6:
ec:ba:b3:ed:f6:bf:29:15:c4:5e:57:4c:ba:dc:92:9c:39:25:
e8:2b:42:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 21:28:45 2025 by rpki-client