Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
File: 34352e3233382e372e302f32342d3234203d3e20323638333038.roa (raw, json)
Hash identifier: +UmVVbR4WatNXPISg3zU2iALuC/mLAA/8q054zIxajY=
Subject key identifier: 01:22:F6:D1:47:EE:8A:9A:68:51:D4:91:64:A0:3A:08:BA:60:19:C6
Certificate issuer: /CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Certificate serial: 0830F51A91F401D2230EE6FC2DAA5B727A1D252F
Authority key identifier: 7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
Signing time: Mon 21 Aug 2023 14:42:29 +0000
ROA not before: Mon 21 Aug 2023 14:37:29 +0000
ROA not after: Mon 19 Aug 2024 14:42:29 +0000
asID: 268308
IP address blocks: 45.238.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:30:f5:1a:91:f4:01:d2:23:0e:e6:fc:2d:aa:5b:72:7a:1d:25:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7E71CA6C0D976155FE8642D776AC920AA8929FA7
Validity
Not Before: Aug 21 14:37:29 2023 GMT
Not After : Aug 19 14:42:29 2024 GMT
Subject: CN=0122F6D147EE8A9A6851D49164A03A08BA6019C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8b:a2:98:60:db:42:15:56:98:c1:c4:99:86:
1d:a4:df:08:87:c0:05:d8:55:ea:ab:2f:24:60:0a:
2a:48:71:ca:56:91:16:e3:7d:a5:9f:8b:45:ec:d2:
a8:49:46:66:03:19:bb:99:66:cc:4d:2d:ee:83:99:
0f:56:fd:38:dd:43:2d:c4:15:59:42:f8:61:0f:a8:
39:df:af:5d:2f:2c:db:07:a0:68:c2:44:a1:4f:ec:
a6:18:f9:35:f3:ab:fb:05:37:80:99:79:d6:1b:73:
d0:8b:27:09:88:70:a4:72:5f:71:d2:a2:00:2f:3c:
16:86:3e:6d:44:eb:93:69:b7:49:7d:97:21:2e:da:
e8:bd:4d:99:d9:f9:78:cd:54:09:29:ce:f8:c8:2b:
b5:91:b6:d2:b9:2b:b8:ea:6b:9b:8b:10:a1:da:2e:
b4:bd:0f:ef:a5:d7:ef:0a:d4:56:26:ee:da:10:3d:
09:ae:d9:7c:74:8e:1d:2e:16:bf:5f:29:d4:cb:63:
45:e1:cf:84:b6:dc:53:e8:38:ef:76:5d:ea:5c:ae:
6d:c3:cc:fc:86:dc:ef:46:18:3b:8a:ee:1f:f8:d7:
b8:24:73:06:5b:74:17:a0:54:35:ac:0f:de:91:4e:
35:64:a3:5d:20:23:de:9b:f3:8a:57:4a:d9:5a:04:
16:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:22:F6:D1:47:EE:8A:9A:68:51:D4:91:64:A0:3A:08:BA:60:19:C6
X509v3 Authority Key Identifier:
keyid:7E:71:CA:6C:0D:97:61:55:FE:86:42:D7:76:AC:92:0A:A8:92:9F:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/7E71CA6C0D976155FE8642D776AC920AA8929FA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7E71CA6C0D976155FE8642D776AC920AA8929FA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/2/34352e3233382e372e302f32342d3234203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.7.0/24
Signature Algorithm: sha256WithRSAEncryption
40:8a:2b:68:58:c6:e7:ed:cb:34:04:64:9e:8e:06:9e:98:3c:
32:59:54:97:02:23:c0:c9:20:b3:a5:f1:31:77:b8:6d:9f:8a:
2a:54:58:e9:11:38:40:a6:b9:d2:c1:ce:ee:79:8a:42:a4:8a:
3b:7c:6c:63:52:fc:79:f1:9d:04:bb:56:e9:54:dd:e8:d3:e5:
ec:a6:c1:63:8e:40:cf:30:96:b7:c9:0e:c8:70:91:fc:fa:2b:
98:ef:1f:0d:89:33:25:88:de:d5:88:9c:07:0f:ae:2e:19:8c:
00:2e:5d:32:2b:e2:c4:de:84:2a:80:1f:90:14:2e:df:62:1f:
e4:b5:f2:e5:94:af:87:52:9b:29:42:aa:c6:0b:66:f4:4a:6b:
03:63:10:2f:12:5f:3d:95:a4:1b:d1:1a:d3:2a:e1:10:2c:d3:
60:94:cb:58:db:9b:46:ca:fa:2c:1f:90:3e:c9:ce:f4:88:a1:
6e:57:b2:4c:5c:6f:a8:cb:f7:22:3b:ab:fa:16:d1:2f:86:c3:
3a:01:de:33:fc:7e:ec:02:4c:b4:c3:8c:b8:65:f4:bb:ed:5e:
65:52:2f:42:2d:2f:d5:08:1a:b3:61:c9:d2:f7:25:13:33:07:
ba:b1:34:5e:3c:a3:37:5e:41:bf:a2:28:a7:af:72:32:68:3e:
25:82:a2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:17:11 2025 by rpki-client