Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
File: 34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa (raw, json)
Hash identifier: KIurSywyZhV6+DoXN8NzK9TS1c1zzXwPijEqnwe1swM=
Subject key identifier: AA:31:BA:6B:54:FD:94:25:E7:8F:1E:A5:77:DB:97:0D:CA:AD:89:1A
Certificate issuer: /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial: 31C4F7DBA62B306997AC8070FE4BC1E6D5BCDCA4
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
Signing time: Wed 27 Mar 2024 18:45:42 +0000
ROA not before: Wed 27 Mar 2024 18:40:42 +0000
ROA not after: Wed 26 Mar 2025 18:45:42 +0000
asID: 268101
IP address blocks: 45.168.158.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c4:f7:db:a6:2b:30:69:97:ac:80:70:fe:4b:c1:e6:d5:bc:dc:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Validity
Not Before: Mar 27 18:40:42 2024 GMT
Not After : Mar 26 18:45:42 2025 GMT
Subject: CN=AA31BA6B54FD9425E78F1EA577DB970DCAAD891A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:04:60:69:5e:6e:5b:21:a7:b1:9d:86:8a:
02:ce:37:bb:26:8c:80:0d:98:34:90:5a:4d:f3:f7:
bc:d2:cc:42:99:13:5b:ea:cb:5f:98:0f:0e:35:0a:
8a:50:ab:a0:87:e6:af:73:88:cc:c9:fb:69:dd:15:
d0:0a:cf:e9:00:2a:c4:96:65:a1:e1:71:e0:21:e8:
83:d7:3f:18:1b:f9:4c:79:23:76:b8:e6:fc:45:57:
31:9b:ce:67:05:57:77:1e:2d:3f:13:0d:35:f8:51:
57:2a:f2:9a:9f:1e:8c:e1:c1:5b:ce:83:49:b6:fb:
53:34:30:f2:7c:ea:03:cc:c3:a2:d1:6a:ca:83:33:
84:d4:93:c3:93:3f:6b:d9:55:a3:f0:57:25:94:48:
9c:a0:00:a8:c5:95:eb:33:6a:a2:0a:9c:4f:fc:b5:
20:fb:b7:a0:5c:1c:d3:cd:85:db:7b:59:4f:27:e0:
fc:6e:98:85:b3:ae:0b:45:c6:2f:d5:b6:a8:31:b0:
94:1c:0f:c6:86:54:1d:e4:ec:7e:ca:a2:f8:fa:e9:
0d:d7:a2:c4:d4:47:07:e0:9e:4f:34:ac:21:44:f6:
3e:b0:20:c4:8c:85:78:67:b1:0d:0b:2c:82:e5:80:
35:0a:1e:63:ef:cb:aa:8d:1b:2e:22:dc:94:b5:4a:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:BA:6B:54:FD:94:25:E7:8F:1E:A5:77:DB:97:0D:CA:AD:89:1A
X509v3 Authority Key Identifier:
keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32332d3233203d3e20323638313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.158.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:71:19:41:96:8c:eb:a2:fa:4e:35:6e:2b:1b:66:90:78:ca:
85:20:46:d8:40:52:fb:06:84:32:fb:e1:bf:9c:43:4d:f7:1b:
86:9a:2a:6c:30:c8:d4:70:72:d6:80:14:43:06:bf:3b:60:98:
fd:54:b4:55:7f:35:1d:6b:a9:e9:80:b0:09:35:6a:b4:25:4f:
0a:e4:c0:4c:de:d4:20:2f:9d:bb:a6:6c:96:8e:84:19:2e:a2:
e1:57:45:c2:23:4a:01:9e:5d:fc:bc:46:14:3d:41:cb:55:b9:
cd:01:e7:f5:35:f0:c2:a9:5b:5b:62:e8:7b:bb:10:75:4a:60:
28:ab:12:3e:d2:f9:89:c6:e0:ac:56:3e:fb:a8:70:7b:1f:27:
22:48:40:23:36:00:b4:e7:1f:77:91:94:42:09:2f:e8:f8:24:
71:09:83:e9:2c:81:35:f0:59:0a:f6:47:67:e1:e3:fc:fa:d5:
0a:62:db:76:48:28:e3:65:7f:79:5d:f3:51:a0:8c:e1:2d:bc:
75:d6:8b:27:41:b9:56:a8:c6:81:51:77:f0:c2:7f:30:f5:ce:
8b:5a:b0:38:19:37:0f:a2:bb:7b:66:81:94:1b:c6:f8:d9:bd:
fd:6b:92:69:29:9e:95:6e:03:b1:06:a3:51:cb:ca:a6:d7:0d:
43:b3:5e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org