Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32332d3233203d3e20323638323231.roa
File: 34352e3233362e35322e302f32332d3233203d3e20323638323231.roa (raw, json)
Hash identifier: TP1DZhDPcJtZEbCLC5hzbgMAWAKbtcDJimX9hhg43y4=
Subject key identifier: 67:54:C6:88:DF:E9:25:38:D5:0C:B8:C5:B4:49:BD:3F:1D:61:58:DB
Certificate issuer: /CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Certificate serial: 2AD6AB5BA4857B0F9F7E7204C245823488DF999A
Authority key identifier: 42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32332d3233203d3e20323638323231.roa
Signing time: Tue 28 May 2024 19:21:10 +0000
ROA not before: Tue 28 May 2024 19:16:10 +0000
ROA not after: Tue 27 May 2025 19:21:10 +0000
asID: 268221
IP address blocks: 45.236.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:d6:ab:5b:a4:85:7b:0f:9f:7e:72:04:c2:45:82:34:88:df:99:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42D604698AFA9BA492807398AA6527B6E7B04AB4
Validity
Not Before: May 28 19:16:10 2024 GMT
Not After : May 27 19:21:10 2025 GMT
Subject: CN=6754C688DFE92538D50CB8C5B449BD3F1D6158DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:32:40:7e:9e:af:72:15:0a:e2:c1:13:d3:
ef:36:79:51:f9:f4:5e:40:ed:97:fa:00:40:8c:45:
18:92:26:c9:e9:78:fd:f8:57:d4:ee:1d:ad:60:06:
b7:fd:63:79:82:52:ea:ac:52:91:5b:77:82:bc:06:
d6:f8:cc:83:86:c3:7e:d0:b8:b8:fc:1e:80:1e:65:
a5:54:f7:e2:07:2f:2d:30:7f:e1:37:32:ab:36:d1:
2d:18:b8:a6:3d:81:09:76:f5:0d:e6:79:43:6e:ed:
64:07:87:bc:e5:8d:f0:b0:63:ee:9e:ff:57:bf:30:
8c:77:1d:b2:f9:43:9a:23:9f:4a:23:6d:95:80:3f:
da:83:4d:d5:ed:8e:fc:7b:73:7c:97:5d:f2:7d:20:
9c:57:7e:2e:3a:61:bd:14:6b:fb:dd:d3:e0:ab:f8:
17:89:c7:5d:cc:1b:22:e9:96:bd:48:04:94:52:42:
eb:e4:1f:f5:84:5d:5f:50:7c:86:2d:35:10:ef:4e:
12:da:91:95:91:9e:56:ab:4f:d1:b3:84:3e:b5:5b:
f0:cd:2d:05:8c:f6:8d:79:10:8e:0a:b9:7b:12:3a:
f9:f3:ac:d5:a2:fe:bf:75:63:5c:0a:1d:8c:ce:e0:
f8:05:0f:8b:94:99:74:22:ee:e0:99:74:a2:85:a5:
62:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:54:C6:88:DF:E9:25:38:D5:0C:B8:C5:B4:49:BD:3F:1D:61:58:DB
X509v3 Authority Key Identifier:
keyid:42:D6:04:69:8A:FA:9B:A4:92:80:73:98:AA:65:27:B6:E7:B0:4A:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/42D604698AFA9BA492807398AA6527B6E7B04AB4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/42D604698AFA9BA492807398AA6527B6E7B04AB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NhCXVoo4oDxkFt1dvth7wKDCFouiu7pjwzfzyka5P5N/0/34352e3233362e35322e302f32332d3233203d3e20323638323231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.52.0/23
Signature Algorithm: sha256WithRSAEncryption
51:4a:2b:2a:8e:7e:9c:e4:7f:5e:9d:18:98:bc:ec:bf:52:01:
59:b3:6a:16:87:ad:d5:24:5e:57:eb:e5:46:46:b4:f3:72:36:
9a:30:e0:e4:91:9f:2e:b2:6f:fd:4d:ef:be:31:1e:4e:b4:52:
52:60:9b:a9:e5:71:d2:78:dd:b1:96:75:89:67:fb:6b:28:4a:
9f:67:ae:e5:4c:a7:ca:1c:f4:c6:1f:05:1f:95:31:0e:a2:9c:
b8:9a:35:f2:19:46:73:36:98:54:de:9d:d4:a1:70:8e:54:9a:
e6:e0:de:da:4f:c6:12:ce:13:5f:b5:14:b3:d4:57:6f:7a:4d:
29:b3:26:e9:ef:16:42:7a:5e:c2:55:23:82:85:08:56:8f:03:
9c:07:65:56:b3:96:60:83:9f:ea:88:86:77:30:df:2e:df:04:
64:04:24:dd:85:0a:fc:77:ad:77:89:05:be:8e:39:a6:6b:07:
2d:e5:d5:f8:2e:cb:25:f5:e6:64:08:94:67:81:dc:f1:76:ca:
38:b4:e6:c0:28:ee:79:4d:a4:84:69:fa:ca:18:b2:e8:f8:65:
92:ce:5c:69:e5:65:c3:47:99:55:74:dc:95:2d:9d:a8:09:57:
64:60:00:65:88:04:9f:9f:0c:86:52:98:a7:10:ad:c4:34:9f:
2c:f2:19:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:52 2025 by rpki-client