Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa
File: 34352e36352e3132382e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier: aXfj/De4cXHAVp3d1jS+xcMjwQoESiFLKTnQbPIe1YU=
Subject key identifier: 25:C0:B1:C6:60:BC:3B:09:FF:65:93:0C:99:DE:D8:4A:26:4E:0A:03
Certificate issuer: /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial: 1AA82EEB3B3520F274F899519D0471EF4F8FDE7D
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa
Signing time: Tue 09 Jan 2024 11:37:00 +0000
ROA not before: Tue 09 Jan 2024 11:32:00 +0000
ROA not after: Tue 07 Jan 2025 11:37:00 +0000
asID: 266528
IP address blocks: 45.65.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:a8:2e:eb:3b:35:20:f2:74:f8:99:51:9d:04:71:ef:4f:8f:de:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Validity
Not Before: Jan 9 11:32:00 2024 GMT
Not After : Jan 7 11:37:00 2025 GMT
Subject: CN=25C0B1C660BC3B09FF65930C99DED84A264E0A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:76:5b:23:c4:72:f6:d0:e3:2b:e6:77:57:94:
1a:2c:24:86:ae:65:89:08:48:7d:36:d7:ce:a9:d2:
d6:62:eb:34:bc:e3:d1:97:7b:66:a8:0d:12:80:01:
c2:99:ea:7f:d1:32:b7:4d:95:b7:38:fd:9a:88:d1:
ca:3f:ff:90:60:20:70:f6:15:2f:72:23:e3:f3:f2:
ac:c7:57:b9:b4:6e:24:8e:92:cc:cc:cd:ac:bb:ba:
6a:bf:f1:86:81:bb:23:ab:5d:00:44:8b:e8:00:89:
87:07:9a:e4:fa:6f:26:6d:b7:88:29:31:5a:50:eb:
3a:2e:23:51:f6:d7:8d:b3:da:81:b5:52:dd:1d:6d:
8e:64:b8:9d:fd:7a:61:51:b1:7e:a9:31:f1:ee:2a:
4b:a5:eb:b2:a7:18:ca:4d:91:c4:b5:35:9d:8b:21:
9e:31:32:63:51:02:3e:90:af:5f:94:58:20:f8:86:
6a:b6:20:c3:4e:6f:ff:c3:c8:a5:0c:7c:b5:7a:26:
eb:e6:9a:6d:0e:78:33:e8:2a:2c:2c:d3:ba:fd:95:
c3:8d:de:91:bb:2b:3d:b1:cb:5b:04:77:dc:fa:4f:
eb:f6:3d:9e:42:89:3c:36:36:83:24:cf:d8:3c:1b:
19:9b:7a:08:5f:5f:9b:8e:ff:09:89:9b:85:9a:0b:
19:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C0:B1:C6:60:BC:3B:09:FF:65:93:0C:99:DE:D8:4A:26:4E:0A:03
X509v3 Authority Key Identifier:
keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132382e302f32342d3234203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:cf:48:42:72:46:0c:d8:4c:4f:8c:dc:d4:94:5b:71:1f:d2:
38:1a:84:ee:b5:a6:e7:f5:5b:03:94:06:21:08:56:53:48:00:
96:df:c8:cf:cc:7c:5b:11:89:ab:0c:d8:82:e2:98:f2:d8:00:
e4:8c:4c:ff:60:27:69:10:eb:f9:21:7d:76:2e:0a:fd:7b:aa:
69:58:ad:1d:3e:64:94:c3:5b:87:db:e5:18:5c:50:62:57:9e:
0e:5b:7d:a5:8d:02:08:5c:24:71:b5:92:04:13:0e:bc:6f:f6:
4f:e7:c5:af:ea:f6:0c:d6:38:64:01:db:f5:76:63:7d:ee:44:
e0:bb:6b:30:f3:ac:7b:88:3e:93:8a:91:15:ee:a8:8e:3b:67:
4f:e0:11:ae:ee:ee:a7:84:97:84:d1:da:62:11:bd:af:4a:ea:
77:55:7b:2e:d7:79:2f:98:88:66:e8:cc:b5:4b:ec:99:98:09:
7c:fb:7c:8e:99:99:75:6b:46:d1:9b:e4:61:8b:af:0a:28:c6:
9f:27:99:c3:0f:30:d3:58:62:81:84:32:12:77:b1:a4:f6:e7:
fc:ac:ce:21:bd:8e:a2:32:a4:3b:7b:1a:70:02:a9:dc:63:08:
ee:00:5a:43:95:23:65:5c:7f:a0:d3:6c:e1:81:9c:ce:84:07:
2c:06:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org