Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/34352e3137372e33362e302f32322d3332203d3e20323638393634.roa
File: 34352e3137372e33362e302f32322d3332203d3e20323638393634.roa (raw, json)
Hash identifier: dGGKgQw0IX5LZAFSmxa5Ff9VkLnPnMmpQ4rJXVlrbp8=
Subject key identifier: F0:39:C9:8D:46:86:E6:89:B6:84:0A:FC:3E:C1:6F:85:20:F4:A7:FA
Certificate issuer: /CN=DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223
Certificate serial: 2FEFD141877C3C6E0FC0E54EF352C8C6E7EF6BE7
Authority key identifier: DD:E7:3F:9A:5B:A4:B8:CD:F6:BA:C6:B7:C0:60:5E:43:AF:9A:92:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/34352e3137372e33362e302f32322d3332203d3e20323638393634.roa
Signing time: Wed 05 Jun 2024 00:54:35 +0000
ROA not before: Wed 05 Jun 2024 00:49:35 +0000
ROA not after: Wed 04 Jun 2025 00:54:35 +0000
asID: 268964
IP address blocks: 45.177.36.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ef:d1:41:87:7c:3c:6e:0f:c0:e5:4e:f3:52:c8:c6:e7:ef:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223
Validity
Not Before: Jun 5 00:49:35 2024 GMT
Not After : Jun 4 00:54:35 2025 GMT
Subject: CN=F039C98D4686E689B6840AFC3EC16F8520F4A7FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:cd:b9:aa:19:15:91:4d:dc:6d:88:ec:54:
80:53:8a:c5:7e:07:1d:db:73:71:1e:ce:10:31:07:
a4:c6:f5:0a:8b:c2:9c:bf:25:10:ec:08:c2:4c:9e:
6c:02:b3:62:be:d0:68:93:5b:a4:89:0b:b0:71:b8:
1d:38:f6:2b:7f:b5:be:b8:e1:54:45:44:4d:39:69:
13:4f:d5:86:8e:ea:a9:43:34:bb:0c:83:2e:50:22:
11:e6:64:7e:a2:95:40:10:11:19:8f:fd:07:c4:9b:
a0:07:49:3d:e9:0a:45:71:66:0a:a5:b8:75:f8:01:
14:6a:76:a8:56:e6:a4:39:51:21:06:53:75:04:3a:
9b:cb:89:74:e8:eb:34:16:6d:c2:d2:bb:63:0f:47:
c2:1f:c6:af:e1:3e:f1:bd:ef:25:c4:8c:6f:2b:ef:
1d:6b:30:cd:ab:d9:0b:93:cc:ba:bc:51:fc:65:7e:
b1:bc:ad:5b:1e:e0:70:bc:1c:64:40:9f:a8:54:20:
0d:23:b2:d2:b6:c7:80:55:73:31:a1:cb:81:8a:51:
69:48:f8:71:90:d0:5f:9b:fc:c1:9a:c4:a4:60:62:
58:7d:7a:26:66:49:77:aa:19:fa:34:07:ed:08:a1:
5c:fd:8a:f5:7f:68:7e:45:a9:0d:9d:c8:3e:95:70:
c5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:C9:8D:46:86:E6:89:B6:84:0A:FC:3E:C1:6F:85:20:F4:A7:FA
X509v3 Authority Key Identifier:
keyid:DD:E7:3F:9A:5B:A4:B8:CD:F6:BA:C6:B7:C0:60:5E:43:AF:9A:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/34352e3137372e33362e302f32322d3332203d3e20323638393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.177.36.0/22
Signature Algorithm: sha256WithRSAEncryption
12:8a:5b:7c:19:3c:6b:4f:f5:84:8c:9c:81:5c:98:96:fd:a5:
54:04:2d:26:66:6b:02:4d:c0:31:2a:45:9a:df:11:6f:29:df:
ec:34:2e:68:22:65:66:3c:85:23:9a:35:7d:8f:a3:f7:82:69:
2d:2c:05:66:1a:e3:44:7f:16:85:ba:2f:06:c0:1c:56:35:41:
1a:b3:4b:27:13:65:00:18:85:e1:e7:dc:8a:5a:73:b5:3d:94:
f1:7c:aa:94:dc:c2:64:90:e1:80:78:81:fd:59:89:3f:ad:d5:
21:87:85:d9:05:b3:8d:6e:99:b1:34:ae:06:7c:66:10:dd:6f:
f5:4d:3f:0c:19:b4:4c:63:93:a9:78:2b:a2:9e:4d:0c:44:18:
5f:18:e8:cd:80:81:ac:3f:aa:1d:3f:22:ba:99:c0:f1:22:f1:
3a:54:55:b1:d4:54:aa:9d:19:64:b7:89:5b:5c:16:63:d0:0d:
22:94:cc:44:33:c0:54:41:53:89:93:36:d1:07:6e:81:bf:8c:
e4:10:39:31:47:22:b8:e2:f0:f4:8a:53:13:b0:14:29:da:ef:
55:20:85:3d:75:bc:66:cc:ee:34:88:29:32:b8:a4:b6:2d:ce:
fd:e6:62:0c:8c:68:14:67:20:0d:4f:d5:19:17:18:37:5e:fe:
d5:cd:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:59 2025 by rpki-client