Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa
File: 34352e3136392e35362e302f32322d3234203d3e20323638313230.roa (raw, json)
Hash identifier: HxEMahHmhZsNi0JM7AN3/3QPVM7zmXdffCVFubZPFnQ=
Subject key identifier: 27:B7:CF:7A:E2:7D:7D:E7:04:33:03:6B:4C:2F:75:CD:18:BF:89:CB
Certificate issuer: /CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Certificate serial: 696985E2A3F106CBCF2B5147ADC51AB2F4B7CC42
Authority key identifier: 95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa
Signing time: Thu 07 Mar 2024 17:01:41 +0000
ROA not before: Thu 07 Mar 2024 16:56:41 +0000
ROA not after: Thu 06 Mar 2025 17:01:41 +0000
asID: 268120
IP address blocks: 45.169.56.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:69:85:e2:a3:f1:06:cb:cf:2b:51:47:ad:c5:1a:b2:f4:b7:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Validity
Not Before: Mar 7 16:56:41 2024 GMT
Not After : Mar 6 17:01:41 2025 GMT
Subject: CN=27B7CF7AE27D7DE70433036B4C2F75CD18BF89CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e9:82:63:bd:c8:21:c8:01:dc:71:6a:4b:08:
c7:ed:df:fc:fe:63:73:61:ae:ac:38:58:2c:fd:b7:
d1:0a:a1:b9:d9:0a:4a:8e:08:2b:39:0d:d5:c1:2f:
39:86:57:67:92:0b:3c:0b:4b:a1:f1:62:23:64:1e:
bb:1e:53:93:a3:41:7d:f5:f8:29:87:69:8d:d1:b2:
25:27:dd:17:76:bf:0a:99:59:2b:4a:6a:46:5a:42:
b8:bd:b9:d4:09:ea:36:4a:b7:4f:b9:60:01:4f:eb:
d6:f4:f6:b6:76:88:fa:b6:40:13:ab:4d:d5:1f:af:
1f:01:a9:82:1a:93:55:83:ca:37:6d:cd:7b:28:8f:
80:a7:5f:28:a7:29:3c:2f:c1:a8:30:18:65:f4:5a:
12:58:50:73:d7:fa:a4:da:64:64:c1:9d:9c:8a:07:
cc:08:36:76:1e:aa:9e:5a:d7:0e:59:fc:30:7a:e4:
9a:4d:7b:6b:d6:d9:b0:24:07:eb:66:e1:e0:01:ea:
7e:83:09:71:73:60:dd:af:e8:25:75:f9:0c:34:98:
21:4c:ec:69:2e:0c:86:ed:ea:cf:bf:12:b6:42:7b:
9c:a6:90:49:59:37:97:a6:8d:e3:ec:6f:e6:12:73:
d8:c2:bb:38:e5:30:21:9d:9f:fe:9a:d5:9e:73:42:
77:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B7:CF:7A:E2:7D:7D:E7:04:33:03:6B:4C:2F:75:CD:18:BF:89:CB
X509v3 Authority Key Identifier:
keyid:95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35362e302f32322d3234203d3e20323638313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.56.0/22
Signature Algorithm: sha256WithRSAEncryption
77:c5:15:8b:bb:94:25:30:96:bc:c3:94:2c:ad:4c:d5:58:d7:
9f:86:11:d2:4a:d1:d5:2d:b4:49:81:5c:62:93:15:47:10:da:
ff:1a:74:f1:02:62:b2:25:69:1b:6b:d7:ed:5a:ef:fe:f0:81:
e6:53:97:63:77:cb:b2:73:68:c8:11:3d:27:1f:15:b6:a4:21:
48:23:d9:19:61:f3:3e:b6:cc:cf:b7:79:dc:c4:c3:83:92:8b:
2e:f7:b5:cd:fc:9d:f6:42:49:f5:2b:d9:80:0c:d8:6a:c4:d3:
74:6a:00:a8:0b:ea:bc:9e:3a:c0:09:37:b8:35:ab:88:d5:53:
e3:9b:60:c9:ea:b9:4c:dd:0c:d9:54:42:0f:cb:d1:5d:61:e0:
00:82:d3:11:7d:53:9a:8a:ff:3f:26:e0:e0:50:5f:6e:10:00:
ad:40:d7:0a:8c:c2:d8:0b:e2:74:cb:33:af:0f:92:56:8f:db:
50:d4:2e:47:e2:81:84:8a:1d:4b:68:64:ae:31:26:84:e5:ed:
f5:a9:08:6b:f6:85:6e:5d:a3:a4:8d:23:77:34:47:7f:ef:ee:
40:58:ac:a8:a0:cf:f2:bd:03:19:c4:b8:da:6d:bb:8c:db:0b:
82:11:c5:b3:ef:5b:a6:6f:a4:28:e8:bb:3a:9e:34:62:09:1c:
8c:45:95:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:34 2025 by rpki-client