Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35392e302f32342d3234203d3e20323638313230.roa
File: 34352e3136392e35392e302f32342d3234203d3e20323638313230.roa (raw, json)
Hash identifier: CnxuFC/jRDIuXWoOqxzDTArvCWTw7exk/c4LLdnTzBc=
Subject key identifier: B1:71:FC:68:33:AB:CE:47:D7:91:3A:5C:DF:A1:35:32:71:3B:15:B7
Certificate issuer: /CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Certificate serial: 48CA3D87E0470DE6CD25D6FBF69FAC4E97DF8B01
Authority key identifier: 95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35392e302f32342d3234203d3e20323638313230.roa
Signing time: Tue 05 Mar 2024 15:54:47 +0000
ROA not before: Tue 05 Mar 2024 15:49:47 +0000
ROA not after: Tue 04 Mar 2025 15:54:47 +0000
asID: 268120
IP address blocks: 45.169.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ca:3d:87:e0:47:0d:e6:cd:25:d6:fb:f6:9f:ac:4e:97:df:8b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95207D3AA322298A09BE47FE56BE6B847CBD596E
Validity
Not Before: Mar 5 15:49:47 2024 GMT
Not After : Mar 4 15:54:47 2025 GMT
Subject: CN=B171FC6833ABCE47D7913A5CDFA13532713B15B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a9:8a:ed:8f:b9:42:9c:9b:70:f1:f1:35:7a:
1c:13:49:62:b1:c6:3b:49:c3:b3:1f:06:54:55:ab:
d9:77:37:16:ea:a8:ed:13:d4:97:a1:b1:21:8e:eb:
18:51:6c:73:77:83:ce:d0:cd:a9:56:75:ea:c7:2e:
7d:bc:4b:dd:27:33:aa:8d:c7:c7:a0:2b:c8:9e:5e:
57:ba:45:0e:99:21:05:11:81:db:1c:4a:47:96:ff:
72:83:10:6d:4b:1c:bb:a5:cc:f7:62:2d:77:bb:e0:
be:04:91:f2:62:5a:2d:c7:1b:e3:ae:ad:e7:fd:30:
7e:e9:35:70:a6:05:fc:9a:78:7c:91:61:6d:f6:ce:
ba:8e:a9:e2:57:19:c5:b5:c7:73:c7:79:b9:10:7a:
e0:21:9b:91:da:3f:ba:1a:5c:22:7d:68:92:80:9f:
90:b3:87:cb:b9:3c:f5:b2:db:83:5b:9c:32:1f:36:
1e:5e:e5:83:dd:ae:cf:86:da:aa:39:b8:cc:ca:89:
06:b9:a6:d7:4c:5f:6b:fe:68:ff:a8:8e:bc:51:5e:
07:54:52:e9:92:45:00:d5:6b:83:04:98:21:d0:1a:
98:f8:dc:ea:dc:e0:21:25:c5:b9:dc:75:14:cb:9b:
f8:f2:00:9e:88:63:ea:7c:4a:4c:cf:e6:3a:2b:7b:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:71:FC:68:33:AB:CE:47:D7:91:3A:5C:DF:A1:35:32:71:3B:15:B7
X509v3 Authority Key Identifier:
keyid:95:20:7D:3A:A3:22:29:8A:09:BE:47:FE:56:BE:6B:84:7C:BD:59:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95207D3AA322298A09BE47FE56BE6B847CBD596E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/0/34352e3136392e35392e302f32342d3234203d3e20323638313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.59.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:87:32:e7:07:45:f9:de:2a:9e:e6:fb:e2:e9:2b:82:00:8d:
0e:e2:a5:2a:3e:cb:9b:79:37:ef:82:b0:7a:06:6a:18:2e:35:
f5:07:6b:64:57:90:ef:2a:e4:a4:5d:7c:8a:87:4f:c4:01:b7:
e3:e1:f0:b8:67:95:8e:c0:08:8d:2e:b4:9e:ad:75:18:5b:83:
29:5b:63:58:01:26:81:8c:d3:96:e2:74:8a:65:7c:eb:43:41:
a3:0b:0f:41:8f:7e:42:13:2e:61:3a:34:39:83:e7:56:49:65:
bf:2b:da:6d:96:f2:a3:80:cf:6b:67:6e:5a:1c:3c:62:c3:87:
16:ae:6a:57:cc:f3:50:63:5d:7e:f9:17:4f:6b:df:53:0f:d9:
4b:6f:36:29:59:74:6f:de:db:0f:e5:90:98:a2:0a:65:6a:a4:
0b:19:0f:b5:00:ce:51:28:02:fd:f0:48:b4:ea:c8:5d:7e:0c:
97:fa:d8:7f:29:d2:4e:30:83:2a:a8:33:4c:09:db:c5:da:87:
9f:90:9d:1e:d8:59:14:d5:ef:fe:3d:a2:8e:0a:e6:b0:a1:02:
32:57:8d:62:e3:0b:ef:b6:1b:30:03:37:77:9f:39:4e:d5:2a:
a0:29:64:cb:4f:9c:33:62:ba:39:d2:ca:13:ed:ef:5f:13:83:
ea:ba:6d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org