Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa
File: 34352e3137372e31322e302f32322d3234203d3e20323638393738.roa (raw, json)
Hash identifier: MkUGBKHmk1+hAREoDPyS9FaBgez6xIj6Obd4KPgZW3s=
Subject key identifier: 4F:E4:07:51:1D:64:C7:D8:0D:03:F6:BA:FE:6A:C4:2F:BE:07:6F:E4
Certificate issuer: /CN=3069BE596AE6FD99F15867B76663D73952007F4C
Certificate serial: 622E0EC3F599D228D16E0CCE75990FACC6E2C844
Authority key identifier: 30:69:BE:59:6A:E6:FD:99:F1:58:67:B7:66:63:D7:39:52:00:7F:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3069BE596AE6FD99F15867B76663D73952007F4C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa
Signing time: Thu 22 Feb 2024 11:26:39 +0000
ROA not before: Thu 22 Feb 2024 11:21:39 +0000
ROA not after: Thu 20 Feb 2025 11:26:39 +0000
asID: 268978
IP address blocks: 45.177.12.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:2e:0e:c3:f5:99:d2:28:d1:6e:0c:ce:75:99:0f:ac:c6:e2:c8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3069BE596AE6FD99F15867B76663D73952007F4C
Validity
Not Before: Feb 22 11:21:39 2024 GMT
Not After : Feb 20 11:26:39 2025 GMT
Subject: CN=4FE407511D64C7D80D03F6BAFE6AC42FBE076FE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:6f:73:eb:30:1a:3f:9c:d4:7b:41:26:6b:
e6:4c:ee:ad:12:0b:a2:b1:81:b0:2b:e4:00:dd:d8:
2a:a8:a6:62:f8:49:73:6a:9d:df:b4:87:b4:df:c6:
eb:a3:c0:a5:0b:72:78:84:94:66:1b:26:39:04:4c:
cc:9b:60:9a:6b:c4:8e:ad:a7:40:ae:0a:f0:cc:e8:
bf:d8:c2:07:8c:33:ef:ef:d5:61:bc:b5:a9:49:5a:
47:fa:eb:8d:ea:a9:42:fd:a8:a4:e4:81:56:47:4a:
c3:ea:16:05:d6:8d:c7:5e:2b:24:52:bc:0d:46:b9:
bd:9e:9f:b0:2c:5c:ca:98:c0:59:46:db:be:31:b9:
51:ca:7e:4b:28:6b:a7:29:41:27:9a:87:2b:bf:18:
a3:29:f2:75:ad:85:04:14:00:e6:e0:ed:79:3b:24:
b2:49:24:6c:de:b7:f8:fd:26:b1:47:37:9d:cd:1a:
f5:01:1b:0c:1c:c6:45:1f:80:ef:a6:4a:9d:2a:6c:
93:2e:ef:0b:05:c9:a8:df:dd:7b:d2:2e:ea:09:fc:
f0:c5:0b:a4:cb:1e:e6:2f:d3:0f:6e:1a:0e:1b:cc:
e2:1d:e8:04:79:29:f1:f3:e3:27:7e:c1:24:48:00:
f2:59:c1:db:e3:de:54:e5:8a:35:59:f4:f8:1c:76:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E4:07:51:1D:64:C7:D8:0D:03:F6:BA:FE:6A:C4:2F:BE:07:6F:E4
X509v3 Authority Key Identifier:
keyid:30:69:BE:59:6A:E6:FD:99:F1:58:67:B7:66:63:D7:39:52:00:7F:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/3069BE596AE6FD99F15867B76663D73952007F4C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3069BE596AE6FD99F15867B76663D73952007F4C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/34352e3137372e31322e302f32322d3234203d3e20323638393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.12.0/22
Signature Algorithm: sha256WithRSAEncryption
07:30:6b:a6:01:87:bb:c4:da:3f:6c:98:66:ea:18:65:e2:a5:
ff:f6:8d:ed:d5:06:8d:60:db:ef:e4:64:a3:86:93:83:63:13:
9a:05:3c:87:69:72:db:9f:a6:f0:da:c7:6c:b3:47:cf:1d:7f:
b1:e3:d1:83:f1:6e:3e:cf:ac:08:9b:de:9e:d0:2a:cb:98:1f:
a5:d5:32:92:25:a5:eb:e8:4f:87:c6:89:2b:d1:da:07:b8:7c:
38:2d:38:9b:b6:11:68:28:e7:1f:9c:6e:31:fb:d6:46:61:b3:
bb:34:fc:ee:71:e8:59:66:59:71:ab:74:97:74:e9:b2:1a:26:
23:45:47:18:53:30:39:ca:7b:40:9d:e4:f4:87:21:71:7f:95:
29:02:db:34:53:a2:e5:18:91:09:6a:0f:09:af:3a:11:4b:36:
00:f6:51:f9:bf:02:70:1b:6d:19:bf:46:ef:70:c2:ce:f8:38:
01:a8:8c:56:f0:c1:31:be:9e:69:4c:fb:04:92:f7:9b:d3:f3:
19:a7:d0:d8:72:fd:b9:bb:42:aa:c4:70:96:1b:22:d0:5a:82:
8b:24:0a:4d:92:cf:96:da:c1:09:4a:23:9b:3b:73:92:d6:07:
0d:78:30:1c:f5:6a:45:73:6f:20:54:32:37:e2:9e:01:02:83:
f7:60:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:16 2025 by rpki-client