Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa
File: 34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa (raw, json)
Hash identifier: gTHZWtdV9KN0jZNsrviksqETrbn2T5AdzLgqiJkwMg0=
Subject key identifier: B8:77:7E:44:7D:18:B7:B9:23:78:B7:72:87:35:54:D8:18:08:DF:88
Certificate issuer: /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial: 4249CB94B88FD41576651D0D140944FF40753980
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa
Signing time: Fri 14 Jul 2023 18:57:58 +0000
ROA not before: Fri 14 Jul 2023 18:52:58 +0000
ROA not after: Fri 12 Jul 2024 18:57:58 +0000
asID: 268101
IP address blocks: 45.168.156.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:49:cb:94:b8:8f:d4:15:76:65:1d:0d:14:09:44:ff:40:75:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Validity
Not Before: Jul 14 18:52:58 2023 GMT
Not After : Jul 12 18:57:58 2024 GMT
Subject: CN=B8777E447D18B7B92378B772873554D81808DF88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e5:d8:06:b6:8e:8b:8b:aa:8d:28:cf:92:1a:
82:e5:c7:6b:5f:c0:86:1e:f2:9b:b6:dc:a3:88:d7:
64:4f:91:2c:3d:e4:a7:b1:b7:a2:d0:d1:bf:5c:57:
54:cd:b9:db:75:79:8f:bb:14:00:ee:22:aa:23:42:
32:6f:ec:50:d8:33:7d:b6:a2:95:f9:bb:28:4e:d1:
39:80:01:30:81:92:44:5e:59:c7:23:fe:fa:68:0d:
8c:f9:e8:0b:89:7f:c5:6c:43:5d:df:95:ce:23:3e:
67:69:1d:c3:a9:c8:34:0a:22:0e:6f:0b:71:a6:be:
8e:17:75:52:79:f9:08:e3:b4:7f:b8:e4:04:c8:69:
74:4c:7d:4c:a1:a7:84:b2:b3:77:18:3a:38:ef:03:
d9:d2:67:c0:b6:fa:87:d2:f8:50:f1:f5:34:84:e4:
70:99:b8:14:5d:04:1e:49:0f:f3:3b:97:af:62:49:
e1:ef:c2:c6:b4:f8:ef:36:2c:d5:31:08:c4:af:14:
dc:53:47:f4:24:59:d3:23:00:e5:10:be:cc:07:96:
7e:11:9f:d4:8a:55:71:63:c1:21:98:af:e9:4d:83:
57:a5:68:de:d1:5e:eb:fa:7b:a0:fe:77:96:dc:d4:
4a:d0:24:8b:ba:77:cc:59:59:18:00:16:89:79:96:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:77:7E:44:7D:18:B7:B9:23:78:B7:72:87:35:54:D8:18:08:DF:88
X509v3 Authority Key Identifier:
keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135362e302f32322d3232203d3e20323638313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.156.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:be:a6:e2:2f:92:52:93:5d:62:b7:ce:25:03:01:41:90:31:
63:08:0b:5f:d4:54:c7:43:bb:34:9e:f3:24:b5:6b:79:c2:9a:
0e:ea:82:2d:4e:9f:bf:8d:6d:c5:2e:c7:65:a9:ff:c1:4c:33:
e7:41:f2:61:7a:60:3c:08:c8:70:32:8e:95:5f:a0:f3:8c:4b:
98:26:04:df:7d:e3:13:38:48:28:54:b3:0e:63:80:69:10:c4:
f1:1d:25:aa:e4:24:11:6d:cd:a6:55:2f:cd:c3:e3:67:a9:c5:
cd:fb:67:3d:c1:9b:4b:fb:c6:13:47:65:1f:c0:6e:75:f7:4c:
f2:03:93:58:9b:3a:ad:98:d8:37:af:d2:c4:fc:79:d5:e7:48:
0f:66:14:04:47:5a:d5:8f:25:c1:f7:87:4e:96:68:aa:ff:3c:
31:75:44:19:20:61:ef:6a:e3:6d:68:b5:a7:00:cc:06:fe:78:
e8:3a:e0:ed:6b:69:50:9b:70:4b:fb:43:38:df:d4:e4:8b:13:
ae:d3:6d:bb:6d:30:da:ee:5c:0a:18:5d:db:7c:da:53:88:97:
c3:25:7f:db:d7:12:fe:41:5f:0d:08:bc:45:22:e4:7c:b2:d3:
c2:5f:12:d8:10:c9:50:ca:cd:e1:a3:63:32:c2:0e:23:52:b5:
0a:12:f0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:09 2025 by rpki-client