Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3137342e3134302e302f32322d3332203d3e20323633303437.roa
File: 34352e3137342e3134302e302f32322d3332203d3e20323633303437.roa (raw, json)
Hash identifier: IZpWa2eVtj6I6hy6S5o7SZwauG9OgA/sdbGNKg5n7no=
Subject key identifier: EA:88:9B:87:19:D1:AE:45:36:30:B3:69:34:EC:85:9A:EC:B4:0B:97
Certificate issuer: /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial: 2BF39D505B62D7A92D6C17538A040AE752E61902
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3137342e3134302e302f32322d3332203d3e20323633303437.roa
Signing time: Thu 30 Jan 2025 13:06:47 +0000
ROA not before: Thu 30 Jan 2025 13:01:47 +0000
ROA not after: Thu 29 Jan 2026 13:06:47 +0000
asID: 263047
IP address blocks: 45.174.140.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:f3:9d:50:5b:62:d7:a9:2d:6c:17:53:8a:04:0a:e7:52:e6:19:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
Validity
Not Before: Jan 30 13:01:47 2025 GMT
Not After : Jan 29 13:06:47 2026 GMT
Subject: CN=EA889B8719D1AE453630B36934EC859AECB40B97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:57:7b:17:24:09:26:ee:46:00:1d:da:ac:
19:57:cd:89:e1:07:a5:99:b9:51:7e:f3:14:ec:1b:
f4:8f:40:8b:d9:c8:ed:06:f7:2d:cb:dd:e5:f9:bc:
31:c6:ef:7f:f9:75:b3:d5:70:8e:89:f9:01:ea:5c:
f8:d3:5d:49:f1:27:d4:db:db:66:62:50:6d:3d:eb:
d9:8e:4b:51:48:61:91:fa:62:94:68:56:e4:cf:d7:
4e:2e:6c:ca:bc:b4:6d:19:fc:0b:73:61:2e:84:b9:
eb:89:c4:81:0a:ea:78:78:8a:74:e8:cd:e0:4f:05:
d8:7b:c3:ba:82:ab:1c:61:c1:7f:f5:90:23:e4:68:
e1:ae:a3:fb:cd:50:0f:69:6b:29:60:f0:f7:00:b5:
22:ab:c8:f7:e7:dd:c7:8d:90:bd:93:33:a1:c0:65:
eb:59:cd:10:29:4a:60:b7:88:f5:f3:cf:39:4c:2a:
4e:1f:9d:fc:a4:a0:b2:f2:fe:b0:47:20:07:58:1d:
10:1a:b0:9a:5b:0b:9f:f5:3b:93:ad:6e:b3:60:e1:
fb:4e:a4:cd:b5:ba:37:9f:7b:b5:bd:9c:8a:5c:56:
b3:18:a0:24:c8:4b:30:2b:70:af:0a:fa:cb:de:9c:
a0:86:78:7e:66:92:f3:24:d8:3c:d5:1f:b1:26:0f:
15:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:88:9B:87:19:D1:AE:45:36:30:B3:69:34:EC:85:9A:EC:B4:0B:97
X509v3 Authority Key Identifier:
keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/34352e3137342e3134302e302f32322d3332203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.140.0/22
Signature Algorithm: sha256WithRSAEncryption
52:82:20:4e:26:79:d1:1a:f5:e6:2f:16:1e:0b:c6:cf:c2:5b:
da:88:95:bd:96:1f:6f:a5:3d:7c:8a:bb:36:ef:49:bc:85:c0:
2d:63:04:69:bc:90:8c:3a:b0:8f:4c:e1:f9:ef:e3:66:e9:7f:
79:f8:93:d8:d9:22:88:34:85:58:7a:b5:ba:4a:e0:0e:32:44:
e9:e0:28:d7:ab:61:c9:62:c9:95:dc:b2:3e:93:29:ac:06:0e:
d2:45:c3:2b:93:59:e6:fb:1b:d3:d7:6a:b8:60:f3:c1:a7:24:
ab:ec:16:91:b0:c1:18:99:08:00:b7:01:21:32:32:4b:e4:f8:
22:51:97:38:49:54:23:27:7d:f5:8a:88:f4:55:dc:71:3d:8f:
fa:9f:f6:fb:5d:8a:b6:26:3b:74:87:fc:ad:9b:00:21:d5:fd:
e0:ee:cc:14:ae:6e:4a:d8:88:8e:47:da:aa:02:0f:33:a6:47:
d1:6c:33:dc:ad:18:37:98:57:2d:66:28:c0:2e:57:cf:c7:1c:
63:a7:6f:59:f3:d0:f5:31:73:4e:34:57:86:ff:f1:94:ad:b7:
d8:a5:a1:15:07:d9:11:c9:73:6c:91:2f:ba:d9:43:aa:c3:6f:
4a:44:8c:a4:a9:0b:66:62:21:2d:11:d2:a9:dd:c8:05:e8:ed:
a2:ce:69:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 11:55:38 2025 by rpki-client