Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36352e302f32342d3234203d3e20323638343434.roa
File: 34352e3136312e36352e302f32342d3234203d3e20323638343434.roa (raw, json)
Hash identifier: kRioM/amkAwYx5L3RiOLSRV5yeviGDwZmyHfVdg0xPg=
Subject key identifier: 92:CB:9C:AE:31:7C:BB:4C:1D:94:67:FE:CF:CE:72:61:B6:4E:4F:C3
Certificate issuer: /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial: 7A224DF53154D82FB26A8C24DC9E927D6E2E04AD
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36352e302f32342d3234203d3e20323638343434.roa
Signing time: Mon 08 Jan 2024 16:45:42 +0000
ROA not before: Mon 08 Jan 2024 16:40:42 +0000
ROA not after: Mon 06 Jan 2025 16:45:42 +0000
asID: 268444
IP address blocks: 45.161.65.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:22:4d:f5:31:54:d8:2f:b2:6a:8c:24:dc:9e:92:7d:6e:2e:04:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Validity
Not Before: Jan 8 16:40:42 2024 GMT
Not After : Jan 6 16:45:42 2025 GMT
Subject: CN=92CB9CAE317CBB4C1D9467FECFCE7261B64E4FC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f0:e9:36:2a:e9:28:c4:2a:c9:03:b0:66:91:
9f:9d:ae:ea:8d:df:72:5e:67:38:c2:ff:49:ca:69:
fb:0e:47:21:74:7f:5b:8e:5c:88:32:50:6c:b7:ba:
9f:b4:ae:67:50:d2:3b:69:59:eb:0a:ff:8c:ea:d6:
1b:03:70:9d:ba:9b:94:f5:46:53:92:59:46:0e:23:
01:57:42:48:1c:da:d7:f9:5e:9f:e8:a9:a2:09:36:
40:3f:52:65:8e:0c:bf:aa:22:fb:70:93:15:76:00:
d9:2b:29:d3:0c:b4:a6:2a:36:85:8a:58:64:fd:eb:
39:f4:6d:e7:cc:a9:0f:9a:03:97:73:fa:28:be:9f:
f5:3b:70:f0:a4:af:a5:b5:21:31:51:cf:37:58:51:
a1:fb:b1:8d:0d:09:db:65:f9:7e:45:60:44:51:02:
f1:ef:ad:78:5c:a6:0c:44:89:28:fa:5a:ee:c1:f1:
71:3f:01:e5:62:ad:1b:c0:68:f2:f6:92:f0:a9:77:
cb:da:7f:2c:de:ee:41:52:e3:08:eb:e2:0c:63:be:
af:6d:1a:fe:9c:5c:d5:60:58:8b:f5:f1:b4:b1:12:
97:e1:4a:c3:30:6c:5b:e6:b3:ee:34:60:73:89:0e:
c9:13:18:d6:fd:75:c8:9a:66:12:af:0f:df:48:60:
41:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CB:9C:AE:31:7C:BB:4C:1D:94:67:FE:CF:CE:72:61:B6:4E:4F:C3
X509v3 Authority Key Identifier:
keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/34352e3136312e36352e302f32342d3234203d3e20323638343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.65.0/24
Signature Algorithm: sha256WithRSAEncryption
55:a0:9c:89:40:f9:1b:0d:8e:c3:bd:a6:06:1e:4b:96:d7:64:
46:bd:3e:ed:53:88:e6:26:58:7a:c8:c6:7c:cb:0b:17:36:67:
7a:54:da:77:6a:5c:db:2f:61:85:7b:5c:c5:88:be:e7:2a:d8:
b9:a5:b3:fa:6f:72:3a:d5:3c:7d:91:ff:e0:a6:7b:2c:22:8a:
ff:90:3b:2f:b9:82:df:3a:30:ec:43:ec:27:17:a4:d1:ed:25:
7b:02:aa:37:db:3d:63:c8:90:9b:4b:45:91:6e:7a:3f:27:2e:
5a:55:86:04:b8:6a:a7:7b:cc:2c:1b:55:07:36:49:1a:25:ba:
0f:2b:61:3f:8b:32:d6:dd:b9:71:1b:6a:6b:64:1f:e9:08:19:
79:cf:28:18:19:d0:ab:0c:1f:69:b4:1c:ac:a2:fd:39:1a:5b:
88:fe:f2:ac:3b:3b:8d:d4:95:70:fc:a9:62:01:5a:47:46:6e:
51:fc:a2:95:ca:72:53:b9:7b:cd:25:76:0d:a4:ab:c5:22:5a:
5c:37:41:39:62:31:d0:02:28:a6:ea:e6:e6:c5:df:72:61:c7:
b7:9c:25:f2:fa:a6:70:a4:a4:1b:9d:e6:f0:11:73:60:29:62:
64:4c:56:3d:dd:94:82:06:84:f8:5b:dc:fd:79:59:9e:a8:a7:
ad:d3:ee:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:59 2025 by rpki-client