Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4VBKFKkcDzXzqKdAjrseoRNvn8uUXNFPPhYj2KCDEAAy/0/34352e3139312e3134342e302f32322d3232203d3e20323639363930.roa
File: 34352e3139312e3134342e302f32322d3232203d3e20323639363930.roa (raw, json)
Hash identifier: iWjFFRSYcCn3so94B9mKoCyX3r0vw4vJpAiYtTC/5TY=
Subject key identifier: D2:4A:8D:EC:E3:60:77:20:73:5F:3F:91:3C:B5:98:44:33:83:DA:A5
Certificate issuer: /CN=8B383B3261B26CE80816D64F95882AD7906A2A79
Certificate serial: 703D9140E291D15671CDE67A37B71B1F699EC5F1
Authority key identifier: 8B:38:3B:32:61:B2:6C:E8:08:16:D6:4F:95:88:2A:D7:90:6A:2A:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B383B3261B26CE80816D64F95882AD7906A2A79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VBKFKkcDzXzqKdAjrseoRNvn8uUXNFPPhYj2KCDEAAy/0/34352e3139312e3134342e302f32322d3232203d3e20323639363930.roa
Signing time: Tue 16 Jan 2024 12:43:50 +0000
ROA not before: Tue 16 Jan 2024 12:38:50 +0000
ROA not after: Tue 14 Jan 2025 12:43:50 +0000
asID: 269690
IP address blocks: 45.191.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:3d:91:40:e2:91:d1:56:71:cd:e6:7a:37:b7:1b:1f:69:9e:c5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B383B3261B26CE80816D64F95882AD7906A2A79
Validity
Not Before: Jan 16 12:38:50 2024 GMT
Not After : Jan 14 12:43:50 2025 GMT
Subject: CN=D24A8DECE3607720735F3F913CB598443383DAA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5d:62:27:28:97:dd:97:cf:4b:1c:ad:9e:12:
7a:9a:2f:d2:d4:9c:b2:e6:40:a9:02:bd:00:2d:b6:
6a:bc:19:90:2c:e8:d4:62:5a:0d:2e:a2:1c:c0:43:
d7:28:17:0d:6b:0a:9e:b2:af:21:06:d2:fd:60:36:
a7:c8:68:21:cc:a0:16:43:c3:4a:fc:39:3f:d4:70:
0c:7f:6c:8a:4e:75:30:df:1d:c4:f0:50:02:1d:66:
34:9f:14:8b:a5:de:94:5a:72:ac:87:dd:69:e5:2e:
20:db:f9:bd:b0:28:5f:95:fb:f3:7a:ea:c0:25:56:
f6:8e:7d:9e:4e:cd:10:2d:e5:55:be:5a:61:0e:f6:
bc:5b:c5:52:dc:b5:8b:b7:9d:cc:f0:76:62:f0:9d:
5e:4f:30:f9:31:fd:d3:a4:a5:f2:aa:b7:14:88:b6:
f5:90:e4:93:89:60:0e:64:c2:21:61:e6:ff:96:cb:
21:d3:dc:40:60:5c:b7:41:d1:69:db:48:11:5b:f7:
86:56:fc:7e:9a:f8:c1:22:65:5d:e0:1a:70:ae:57:
1a:b6:ec:b5:e9:5a:50:9b:a9:7c:29:e8:61:d6:7a:
de:ff:4f:c1:a0:ef:95:09:34:7d:e6:13:02:ae:a7:
5a:cb:b2:e4:0c:a4:cb:bb:16:0f:74:a2:94:c5:48:
76:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:4A:8D:EC:E3:60:77:20:73:5F:3F:91:3C:B5:98:44:33:83:DA:A5
X509v3 Authority Key Identifier:
keyid:8B:38:3B:32:61:B2:6C:E8:08:16:D6:4F:95:88:2A:D7:90:6A:2A:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VBKFKkcDzXzqKdAjrseoRNvn8uUXNFPPhYj2KCDEAAy/0/8B383B3261B26CE80816D64F95882AD7906A2A79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B383B3261B26CE80816D64F95882AD7906A2A79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VBKFKkcDzXzqKdAjrseoRNvn8uUXNFPPhYj2KCDEAAy/0/34352e3139312e3134342e302f32322d3232203d3e20323639363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.144.0/22
Signature Algorithm: sha256WithRSAEncryption
30:83:69:bc:33:e3:3c:5b:b3:bd:43:03:54:eb:16:0b:18:0a:
bd:a2:09:3e:17:82:c1:44:cd:14:7e:83:df:92:dc:10:5a:ea:
68:f3:61:28:34:aa:63:ec:d1:5f:d7:f8:10:b8:2d:b5:7a:d6:
d5:8e:24:73:34:fb:90:8f:e8:71:db:7d:03:65:87:6f:8e:76:
5b:05:8d:f4:ea:d1:4d:ab:9d:b9:bf:35:ac:bb:2c:9f:ef:93:
31:6e:0a:e3:7c:11:bf:83:12:41:5a:94:c9:97:7e:a3:fe:b8:
dd:33:38:1c:fa:3c:60:2d:5f:41:af:81:f2:d2:5d:e8:40:37:
bb:82:5e:ba:c8:09:1c:3c:f2:7c:b9:f0:99:35:9e:eb:d0:ce:
be:78:73:dd:86:75:df:9c:ff:ff:b4:2c:ad:d4:dc:a4:3f:43:
62:0b:61:b7:c6:bf:f7:78:c0:6b:81:ee:74:c1:e2:b5:50:4e:
97:93:dd:2e:65:48:88:0b:90:22:89:80:87:94:e2:7b:b8:61:
14:ab:5a:23:2d:7a:06:1d:c7:47:4b:49:92:92:d0:ac:e8:7a:
37:f8:fd:4f:35:ea:5f:f7:d0:c8:67:c9:29:29:a4:c8:19:92:
75:de:a2:ea:8a:ed:71:a3:68:0a:3c:d9:68:87:a1:a6:47:08:
86:7b:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:30 2025 by rpki-client