Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32382e302f32322d3232203d3e20323638323633.roa
File: 34352e3233372e32382e302f32322d3232203d3e20323638323633.roa (raw, json)
Hash identifier: SttVj3h0/HFpaFPw7Su1bfmTR8Ch7yIuwMN+rMOV+go=
Subject key identifier: A3:39:09:3A:53:E6:BB:25:EC:9A:A3:41:04:EB:55:12:6E:DD:1C:3F
Certificate issuer: /CN=E22818D8F42D1506482150955FA216049875C2A8
Certificate serial: 21E47E17AE914FA9C857B57DF4FE7A3344447585
Authority key identifier: E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32382e302f32322d3232203d3e20323638323633.roa
Signing time: Mon 05 Feb 2024 18:47:21 +0000
ROA not before: Mon 05 Feb 2024 18:42:21 +0000
ROA not after: Mon 03 Feb 2025 18:47:21 +0000
asID: 268263
IP address blocks: 45.237.28.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:e4:7e:17:ae:91:4f:a9:c8:57:b5:7d:f4:fe:7a:33:44:44:75:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E22818D8F42D1506482150955FA216049875C2A8
Validity
Not Before: Feb 5 18:42:21 2024 GMT
Not After : Feb 3 18:47:21 2025 GMT
Subject: CN=A339093A53E6BB25EC9AA34104EB55126EDD1C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:1d:d6:67:32:16:45:b7:34:4c:f0:bd:80:
bf:2a:9b:e8:54:78:b8:dd:f3:80:ba:5d:06:0b:ea:
d2:8b:7e:c5:d1:9a:07:88:58:dc:8f:ca:f5:f3:0b:
54:90:df:c1:28:16:54:e6:bd:5e:8e:84:02:95:f4:
8b:15:dc:5b:5a:e2:55:83:8e:1a:97:dd:0e:42:78:
1c:6c:6c:b7:25:96:bb:ff:2e:ac:2f:63:1b:ff:fd:
6b:0d:46:cd:cf:fd:bb:6b:b8:8d:89:31:59:e1:9e:
2d:a0:94:e5:21:4b:b3:0e:66:71:be:59:78:25:c6:
05:ae:f4:a7:30:33:d7:a6:da:30:54:a9:99:16:70:
10:b2:db:45:cf:6c:93:bd:01:44:22:74:65:15:e8:
02:3d:34:6f:8e:ab:39:0d:3e:db:51:49:3a:94:af:
32:4f:5f:ef:03:52:0f:f5:d7:ed:ad:aa:e2:d2:0d:
b2:b0:16:38:2e:08:4e:ac:00:2f:f9:e2:92:49:16:
2a:f6:44:a7:27:d7:f2:70:8d:09:57:9e:8c:13:a1:
4c:35:83:a1:28:5d:98:87:13:ef:ec:1b:98:12:64:
9a:03:c2:d3:ce:e5:c9:db:15:1b:b7:e9:9b:d9:8c:
84:2d:09:02:3b:22:29:e5:32:0d:f2:3f:7a:eb:1b:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:39:09:3A:53:E6:BB:25:EC:9A:A3:41:04:EB:55:12:6E:DD:1C:3F
X509v3 Authority Key Identifier:
keyid:E2:28:18:D8:F4:2D:15:06:48:21:50:95:5F:A2:16:04:98:75:C2:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/E22818D8F42D1506482150955FA216049875C2A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E22818D8F42D1506482150955FA216049875C2A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5pCLcYKxUQYj4StmBkGNPf1x9MAvwak5fyEoorN7ncQL/0/34352e3233372e32382e302f32322d3232203d3e20323638323633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.28.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:1c:70:a2:41:f6:3b:65:ce:c2:6b:e5:d6:56:1f:ea:7b:8b:
99:dc:05:0c:5b:ca:df:15:0a:c9:87:68:72:24:45:4d:93:a4:
06:d1:8a:a7:bf:24:8f:62:68:14:57:7b:bc:39:12:a6:58:11:
f1:b0:ad:04:64:7d:65:fb:32:33:7c:43:95:c5:46:df:6c:26:
a8:e1:88:fe:7a:f3:6f:82:b3:a1:d5:0d:84:80:a0:88:f2:b7:
e4:63:0b:76:74:1b:d8:5d:6b:47:ee:22:db:48:64:ed:39:63:
1c:84:86:10:0f:d7:a8:47:52:09:77:fb:1e:30:7c:11:89:a7:
5b:c7:47:55:53:b6:49:20:94:a9:71:1e:dc:02:93:03:74:52:
da:96:0a:bf:96:e9:5b:2d:e9:5b:57:5d:80:89:49:72:67:92:
14:6c:43:69:e8:6e:45:b5:c8:fe:7b:2c:0b:ca:54:64:cd:40:
b2:cd:71:bc:68:d6:ff:76:9a:e5:7f:13:80:9f:f7:ba:20:e3:
fe:4a:89:2e:7b:60:8d:0a:d6:9b:d9:f6:5a:7a:b6:f5:a8:b8:
85:22:f0:1b:ec:a5:03:db:f0:ff:39:b3:82:f5:fc:e1:72:36:
a8:b1:b1:ad:19:f8:0e:da:c8:c7:e5:e4:b5:0b:82:70:bd:7f:
b2:ef:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:32:37 2025 by rpki-client