Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
File: 34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa (raw, json)
Hash identifier: F6TZolrcmYPuVX484aSYosY2l38oeSlVepKVZj+C6Y0=
Subject key identifier: CA:25:7D:2E:6A:AC:33:C2:50:1E:B2:B1:5E:A3:6F:31:B7:E8:D9:DA
Certificate issuer: /CN=D3AE6A7BDDA4E543251721F57BC891CFA1E85391
Certificate serial: 5E80CB336CDB82DD1FB7EEDEB935945C7F501EB0
Authority key identifier: D3:AE:6A:7B:DD:A4:E5:43:25:17:21:F5:7B:C8:91:CF:A1:E8:53:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.cer
Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
Signing time: Wed 02 Oct 2024 15:09:25 +0000
ROA not before: Wed 02 Oct 2024 15:04:25 +0000
ROA not after: Wed 01 Oct 2025 15:09:25 +0000
asID: 268063
IP address blocks: 45.168.125.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:80:cb:33:6c:db:82:dd:1f:b7:ee:de:b9:35:94:5c:7f:50:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3AE6A7BDDA4E543251721F57BC891CFA1E85391
Validity
Not Before: Oct 2 15:04:25 2024 GMT
Not After : Oct 1 15:09:25 2025 GMT
Subject: CN=CA257D2E6AAC33C2501EB2B15EA36F31B7E8D9DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fd:e2:54:c1:66:4d:af:3f:0d:71:6c:c3:94:
11:05:c2:7b:cc:af:b3:83:67:65:24:a9:dc:10:99:
0f:40:6a:19:93:71:c4:16:e4:5e:84:97:32:d5:3a:
b6:e2:c8:7b:0f:db:81:c9:f7:2b:61:98:3a:57:74:
08:ee:d2:cd:0c:ae:52:46:75:e6:ef:01:a1:ab:11:
22:e3:94:4d:a4:93:e8:95:1d:55:32:72:43:21:b3:
b6:3a:2d:b0:21:38:d0:58:ee:b4:84:04:a4:d3:bb:
a4:d4:12:59:1a:be:22:e7:17:15:88:9e:b4:ce:48:
bb:a6:f2:9d:05:35:f4:c7:8b:7a:29:59:d5:3a:2e:
db:d8:80:68:60:59:72:26:06:6b:d5:5f:24:c7:92:
6c:a5:de:b5:dd:fa:51:24:0e:8e:6c:2c:87:48:26:
a9:8d:a8:c2:1c:e1:08:b8:7c:0c:28:0f:53:b7:f3:
ea:72:17:8c:d0:4f:be:b5:62:1f:63:c6:ec:bb:00:
c7:c0:6f:00:6c:6f:45:9c:42:97:81:90:03:c6:6d:
6f:23:21:38:c0:9d:8c:42:1a:4c:c0:d2:cc:97:e3:
ab:4a:77:af:ed:c6:b7:de:c5:56:24:0e:2c:26:92:
fa:0a:f6:16:0d:25:d8:a0:66:61:9b:4c:ea:be:9d:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:7D:2E:6A:AC:33:C2:50:1E:B2:B1:5E:A3:6F:31:B7:E8:D9:DA
X509v3 Authority Key Identifier:
keyid:D3:AE:6A:7B:DD:A4:E5:43:25:17:21:F5:7B:C8:91:CF:A1:E8:53:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3AE6A7BDDA4E543251721F57BC891CFA1E85391.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/34352e3136382e3132352e302f32342d3234203d3e20323638303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:7e:9b:eb:21:5b:2c:9d:b7:f3:34:59:75:13:c4:e8:21:df:
8a:72:58:8c:0c:28:f1:72:0b:74:e9:31:e1:d0:50:82:46:a9:
20:9a:3b:38:89:cf:d1:4d:78:b9:0d:4f:73:8e:91:7a:57:1b:
75:49:91:85:a4:e7:ab:9e:a7:81:75:20:5b:e0:9d:d4:61:26:
42:53:79:95:2b:05:45:d3:a8:c3:6d:33:26:40:62:39:8b:17:
e6:b8:55:2b:26:96:33:93:bd:dd:f1:09:99:04:bb:ab:85:d4:
fa:8b:e9:5b:dd:77:9a:dc:95:01:23:9b:98:5f:fa:6c:6f:24:
cd:ae:27:8c:82:0e:55:5a:60:00:87:fb:25:45:66:e4:f3:5d:
ed:0d:1b:11:be:cf:61:b8:98:f3:de:25:dd:c6:25:33:cf:c2:
1c:c2:a2:02:62:d0:39:e2:f6:72:52:f4:74:0a:d5:62:20:77:
a4:a6:de:cb:7e:9b:c6:34:4d:40:85:56:ff:7e:a9:de:13:68:
36:55:23:60:a3:f7:58:24:94:37:6f:73:3b:01:91:b7:58:93:
99:c5:f9:ed:f9:94:f7:de:c0:92:cb:7d:0e:0e:bd:ba:ac:4d:
88:0f:6a:09:c5:7f:98:f3:8f:e4:83:89:3c:0b:94:68:f4:8e:
a3:94:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:41 2025 by rpki-client