Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa
File: 34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa (raw, json)
Hash identifier: r/aX/fvzQLsZBBNVleMTaUwisde+5r7xAMXEJ+00tj8=
Subject key identifier: 29:39:51:F3:44:8C:B1:E3:D7:5D:99:FE:6B:CE:DD:91:CC:91:56:CB
Certificate issuer: /CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Certificate serial: 0C0091C36DDB79254AA96BD836CFD3D0285C5DE3
Authority key identifier: CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa
Signing time: Fri 14 Jul 2023 18:58:04 +0000
ROA not before: Fri 14 Jul 2023 18:53:04 +0000
ROA not after: Fri 12 Jul 2024 18:58:04 +0000
asID: 268101
IP address blocks: 45.168.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:00:91:c3:6d:db:79:25:4a:a9:6b:d8:36:cf:d3:d0:28:5c:5d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA37E610F388A1DDD6B71B8ADD945F9605EA2472
Validity
Not Before: Jul 14 18:53:04 2023 GMT
Not After : Jul 12 18:58:04 2024 GMT
Subject: CN=293951F3448CB1E3D75D99FE6BCEDD91CC9156CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:0b:0c:1d:98:62:21:4c:a6:a8:33:cc:d3:
63:6a:fb:5a:3b:df:a3:e1:19:59:48:c6:b5:b1:10:
c2:ac:1e:98:56:95:d3:be:39:86:a1:d1:ba:44:d9:
be:e2:70:a1:83:10:e4:3d:a2:45:17:2b:17:22:a7:
36:42:89:ca:1b:98:35:c9:47:8b:7a:91:84:b2:8a:
52:22:e2:93:78:ce:38:5a:20:fb:58:a6:47:c4:5e:
0a:3a:22:da:3b:d3:9a:a6:9e:cd:2f:a4:f0:17:78:
9c:69:8d:fc:32:79:60:84:94:aa:7c:a3:d5:9d:4f:
5b:d2:ac:f3:f9:a4:6f:c6:c0:49:7f:51:bd:6b:39:
45:57:c3:eb:e9:82:b9:9b:59:53:a9:5b:c7:2f:15:
ed:46:ca:9f:90:02:47:20:3d:f5:18:98:5d:de:f0:
d0:45:5c:35:7e:86:f3:b6:a6:99:ac:ab:b5:f2:72:
06:e2:b6:40:9e:6b:74:54:d4:0d:c7:fb:c6:16:48:
73:fc:c8:c7:c1:02:8c:a8:66:f0:66:87:48:c3:0b:
b7:47:c6:f2:06:90:98:fe:54:37:4a:2f:4c:12:76:
28:11:0e:fb:c1:fb:e5:fa:d1:35:b6:e6:af:5e:56:
d6:51:2c:13:7c:0f:04:27:55:03:b9:29:8b:18:a6:
31:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:51:F3:44:8C:B1:E3:D7:5D:99:FE:6B:CE:DD:91:CC:91:56:CB
X509v3 Authority Key Identifier:
keyid:CA:37:E6:10:F3:88:A1:DD:D6:B7:1B:8A:DD:94:5F:96:05:EA:24:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA37E610F388A1DDD6B71B8ADD945F9605EA2472.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/0/34352e3136382e3135382e302f32342d3234203d3e20323638313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.158.0/24
Signature Algorithm: sha256WithRSAEncryption
80:35:3f:4f:04:29:2b:e3:b9:25:3b:c3:e0:6b:4c:88:2d:26:
0e:95:e9:17:6f:23:eb:a1:71:a0:f8:79:1c:28:0b:c9:97:8e:
aa:c1:cb:ab:7d:c7:c1:a6:9f:4f:65:23:2c:97:49:95:6b:1f:
93:3f:6b:1c:31:c1:8e:98:f1:2a:e4:0e:0c:64:30:d2:67:79:
e1:cb:96:ee:26:a4:44:36:d6:4e:92:15:4e:86:11:f1:11:68:
32:e2:44:26:4d:52:e3:fe:a3:65:0b:8b:62:ad:69:d0:eb:55:
6d:cf:75:3f:f5:f9:8a:aa:9c:82:03:03:25:eb:87:e4:64:30:
a0:e8:3b:62:69:a0:e0:74:74:6d:9c:1d:37:0d:4a:74:59:75:
48:f4:52:64:40:f1:3e:37:b6:8b:1f:23:7e:eb:d5:8a:da:6d:
83:f1:1c:34:f5:02:20:15:76:41:32:9d:03:b1:68:af:70:07:
bd:54:45:1e:b4:27:1c:25:e9:fa:61:8d:a5:5e:a5:13:fc:63:
6f:40:a6:ee:bf:c6:c9:a3:9b:81:a0:43:01:2f:f0:92:0f:af:
0a:cc:1d:13:51:03:70:3d:ed:75:c2:07:04:a9:ad:56:64:d9:
3e:fa:45:38:2e:ab:02:b4:85:20:47:23:fe:b0:72:f8:af:d3:
cf:de:57:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:34 2025 by rpki-client