Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e362e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e362e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: ylunEjOrzcIUxYB400LDELrbcK32glEQSmp7ohEpR8o=
Subject key identifier: 37:29:6D:E3:2B:6B:42:A0:3D:17:C9:55:2F:6F:ED:00:6D:FC:58:A4
Certificate issuer: /CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Certificate serial: 082A3F5414128C97ABA2489926FE683E9A2A384C
Authority key identifier: 7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e362e302f32342d3234203d3e20323638333038.roa
Signing time: Mon 21 Aug 2023 14:42:29 +0000
ROA not before: Mon 21 Aug 2023 14:37:29 +0000
ROA not after: Mon 19 Aug 2024 14:42:29 +0000
asID: 268308
IP address blocks: 45.238.6.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:2a:3f:54:14:12:8c:97:ab:a2:48:99:26:fe:68:3e:9a:2a:38:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Validity
Not Before: Aug 21 14:37:29 2023 GMT
Not After : Aug 19 14:42:29 2024 GMT
Subject: CN=37296DE32B6B42A03D17C9552F6FED006DFC58A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:6a:36:17:83:7f:3b:a6:2a:96:e4:fa:29:ef:
fa:64:14:d3:ba:09:e1:3b:73:0a:68:0e:dc:a3:d3:
bc:90:37:14:8b:8b:17:5e:20:89:dd:8e:cc:29:91:
db:12:98:3f:cb:c3:a8:7e:54:34:70:f0:1e:b5:13:
b7:7c:de:af:6e:95:fd:ff:a0:ce:f3:6b:03:d6:de:
6d:ee:cb:ce:9b:1d:e2:87:ca:b3:56:65:4a:2c:f4:
59:21:be:ad:33:72:7b:a2:d7:49:67:61:aa:45:64:
fc:e1:de:9f:8e:a3:19:9d:1a:6e:4b:cd:cc:16:a5:
68:b2:76:db:b3:f2:7f:43:35:b8:f6:8d:15:16:c6:
65:08:69:56:45:7d:e7:1f:45:27:a4:c3:21:0d:71:
31:09:b2:d5:42:a1:8f:8c:6b:a2:b4:a2:12:e1:ea:
29:ac:90:db:8b:b2:85:0a:8c:d5:3d:5c:a0:e0:1a:
41:3c:3b:a6:20:93:0b:68:64:bf:9a:c8:d6:a5:79:
ab:29:df:a4:0f:88:f5:ee:08:44:8c:c9:e5:22:f7:
8d:42:e5:b7:90:71:1a:87:a9:eb:a7:a6:b3:73:d8:
67:04:9b:3f:97:38:f2:79:b1:03:5d:3d:83:1b:87:
36:5d:a3:27:c6:6e:4d:ab:19:f3:1e:3f:51:58:d0:
e5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:29:6D:E3:2B:6B:42:A0:3D:17:C9:55:2F:6F:ED:00:6D:FC:58:A4
X509v3 Authority Key Identifier:
keyid:7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/7E71CA6C0D976155FE8642D776AC920AA8929FA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e362e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:b0:e0:60:e1:18:95:07:72:cd:19:2b:6b:7f:d9:8f:c6:6b:
de:c7:2b:dd:70:92:c8:3b:c7:b3:ed:51:c1:4e:18:0f:dc:6a:
1c:7a:97:a8:78:44:0a:25:f9:73:28:e0:69:c7:97:7e:dd:b7:
f0:72:71:06:68:b0:a2:c0:a2:61:d4:d9:4d:0c:e2:c4:06:e5:
50:21:51:d9:ee:e5:2a:e5:a9:49:ec:29:fb:c3:1b:e0:85:1c:
e8:f5:3d:b7:cc:c0:d0:33:f8:46:0a:62:5b:cd:cf:e9:a6:2d:
df:ad:61:6d:92:01:45:5f:96:20:70:16:68:8f:7b:47:05:99:
d6:18:61:26:43:a2:af:a7:1c:6a:a8:71:22:99:e8:6b:cf:45:
b8:c2:f4:af:32:c7:31:5c:a2:96:c7:54:7b:4f:bd:3c:c8:0d:
da:f8:26:ce:13:e2:80:30:b6:e3:af:96:f1:f6:80:b4:1d:ee:
01:fc:59:27:af:f8:85:ca:8d:3f:8a:30:15:8f:8d:97:78:57:
16:b4:38:cf:15:a7:e5:ef:7e:e5:f8:49:47:db:e4:e7:61:fe:
0b:c7:de:05:e0:ec:26:07:8a:40:7d:75:ce:db:f6:81:d9:bf:
fa:36:b9:d1:02:8a:55:dc:d6:b6:1f:f8:fd:34:7d:d1:ab:20:
de:61:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:21:34 2025 by rpki-client