Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134302e302f32322d3332203d3e20323636303732.roa
File: 34352e342e3134302e302f32322d3332203d3e20323636303732.roa (raw, json)
Hash identifier: fq23UuT0jzkORTDL8zST0krH+8cr1AkNAxEYPgax644=
Subject key identifier: C2:F4:C1:89:CC:4F:67:45:4F:96:A5:9C:45:B5:B0:09:CE:98:65:4A
Certificate issuer: /CN=A4F6CF3EA81A06C7671C0EE07506E011FB81992C
Certificate serial: 4BB3B6A39395DD4F94E0467CEA0E4F76FAAF850C
Authority key identifier: A4:F6:CF:3E:A8:1A:06:C7:67:1C:0E:E0:75:06:E0:11:FB:81:99:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134302e302f32322d3332203d3e20323636303732.roa
Signing time: Fri 25 Oct 2024 15:02:20 +0000
ROA not before: Fri 25 Oct 2024 14:57:20 +0000
ROA not after: Fri 24 Oct 2025 15:02:20 +0000
asID: 266072
IP address blocks: 45.4.140.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b3:b6:a3:93:95:dd:4f:94:e0:46:7c:ea:0e:4f:76:fa:af:85:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4F6CF3EA81A06C7671C0EE07506E011FB81992C
Validity
Not Before: Oct 25 14:57:20 2024 GMT
Not After : Oct 24 15:02:20 2025 GMT
Subject: CN=C2F4C189CC4F67454F96A59C45B5B009CE98654A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:2c:9d:a1:1d:37:e6:d6:12:be:4a:04:e5:1c:
c2:60:b6:04:bf:a5:25:0b:b7:92:25:98:51:b6:fd:
7a:08:3f:fe:d5:71:34:cd:fd:15:81:27:36:c1:c4:
55:30:1f:87:91:19:3b:4d:4c:3c:74:7b:16:b6:1d:
e8:95:55:2c:e1:6d:28:6d:74:06:a5:25:ae:8f:ef:
78:03:6a:93:99:13:bc:d9:d5:25:8c:4d:38:78:7a:
92:65:42:a1:f9:6f:10:89:7f:29:0c:3c:18:4d:91:
2d:fa:bc:b8:58:d2:5e:1e:c6:3a:5b:38:73:b1:ba:
64:5e:86:24:06:73:8c:13:a0:b6:ad:49:73:11:23:
dd:fb:03:14:ff:06:ae:25:ea:b8:94:81:21:f5:7d:
17:f2:87:6b:a6:37:f6:1d:d3:1f:10:74:72:41:fc:
49:d1:cb:44:99:9e:a6:18:80:f9:89:2b:de:48:be:
e8:92:a8:74:94:61:3b:e2:84:6d:6c:03:a4:9c:68:
d7:d1:d2:24:12:53:e8:72:e7:e8:c9:58:c0:4d:03:
74:f9:b7:74:7c:4f:cf:db:d9:13:d6:a9:39:6c:af:
cc:46:36:76:d5:4a:36:23:74:f5:5f:f1:ce:e7:4c:
ba:b3:cc:dc:bd:bb:2b:ea:ab:ae:bc:fc:ca:c8:6d:
9b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F4:C1:89:CC:4F:67:45:4F:96:A5:9C:45:B5:B0:09:CE:98:65:4A
X509v3 Authority Key Identifier:
keyid:A4:F6:CF:3E:A8:1A:06:C7:67:1C:0E:E0:75:06:E0:11:FB:81:99:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4F6CF3EA81A06C7671C0EE07506E011FB81992C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2mQiFhihjTBEpZq3ELoY5nxwhdNBcLZBXRSnhZkAmWSi/0/34352e342e3134302e302f32322d3332203d3e20323636303732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.140.0/22
Signature Algorithm: sha256WithRSAEncryption
47:b6:60:ae:59:60:8d:c1:73:89:51:6a:c7:37:83:0c:6f:e7:
34:92:ee:78:dc:9d:59:a4:d6:1f:47:33:f5:0f:b9:1d:50:d6:
ed:89:01:af:48:5a:2f:ac:d1:8e:00:92:54:ac:53:ba:fb:a8:
62:84:31:85:ba:70:c7:ed:24:4e:f6:c7:2d:af:dc:f8:21:a8:
ff:94:09:66:18:4d:8d:8f:5e:57:46:07:64:86:71:89:14:9d:
0d:c1:a9:0b:35:e3:97:16:9f:00:c2:ec:16:2e:15:29:6c:c2:
56:64:64:9c:16:5f:24:dd:3c:2f:8d:07:5a:5d:0f:d4:9e:e8:
c3:83:84:c0:97:b0:ee:d2:72:9f:da:b0:92:a0:9b:77:ad:4f:
49:cb:d6:02:96:d2:4a:c0:d1:8b:14:90:18:2f:72:ec:d3:f9:
0e:3c:e7:4c:b8:d1:ee:12:91:c2:38:e6:01:05:de:b4:be:cd:
df:96:da:d9:8a:97:10:62:68:5c:a9:20:2f:fa:ba:d1:7b:e8:
70:97:fb:41:d3:1e:69:be:4c:26:ad:4a:1a:40:97:c0:4b:c6:
df:61:e2:a4:35:d7:cb:ff:bc:ac:c4:85:b9:1e:60:94:99:0f:
1d:89:49:4a:15:17:db:60:c1:e7:0b:a7:9e:43:7e:bc:6b:04:
e2:ce:aa:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:54 2025 by rpki-client