Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa
File: 34352e3137342e31312e302f32342d3234203d3e20323638393338.roa (raw, json)
Hash identifier: Ax5mOOdB3+bwHuVf6TyikkRy64U/v+l20/kN/VCMvJo=
Subject key identifier: 4A:94:9C:5F:15:6D:98:6C:23:11:87:F6:C0:BC:AD:50:3F:E0:CB:69
Certificate issuer: /CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
Certificate serial: 1420BEDC8C2A878558351BFFF0ED817B32DA3E0C
Authority key identifier: 12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa
Signing time: Thu 01 Feb 2024 20:29:50 +0000
ROA not before: Thu 01 Feb 2024 20:24:50 +0000
ROA not after: Thu 30 Jan 2025 20:29:50 +0000
asID: 268938
IP address blocks: 45.174.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:20:be:dc:8c:2a:87:85:58:35:1b:ff:f0:ed:81:7b:32:da:3e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=128E6FAF19CE8C823CD70DA58CEF1F1B54332142
Validity
Not Before: Feb 1 20:24:50 2024 GMT
Not After : Jan 30 20:29:50 2025 GMT
Subject: CN=4A949C5F156D986C231187F6C0BCAD503FE0CB69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b4:60:ac:17:f4:24:ad:ff:35:f2:e8:a2:96:
b6:e7:cc:75:5f:d9:62:c3:c4:d4:fd:99:bf:88:9c:
08:88:42:be:af:79:46:15:b6:f5:a7:9e:34:48:bc:
fa:8c:e5:ed:35:76:03:ac:f3:89:0e:de:97:3c:f4:
ca:b8:35:2e:c2:53:f6:96:e3:74:1a:db:c6:68:bb:
51:a5:b9:83:80:02:e3:dd:9f:97:f1:87:63:aa:87:
0b:f9:66:e7:82:a1:98:ee:88:ef:4b:53:6b:8b:e6:
20:14:31:af:9a:2f:d9:91:1f:eb:a0:b0:20:56:24:
0e:58:1b:cb:ac:31:70:0c:9f:cc:be:7f:c0:e6:2c:
a1:eb:c3:49:2e:7a:8c:67:af:38:14:d6:e0:fe:c6:
fe:44:8a:56:d6:e7:82:7c:f2:83:3a:c9:a2:36:ba:
b8:cf:74:b6:d1:19:8e:a5:f0:ea:15:56:14:aa:48:
77:6f:7d:2d:95:02:81:70:b6:7e:07:9c:fc:37:0e:
e8:25:a2:88:7f:69:a3:d4:85:44:33:65:b4:98:13:
04:1b:96:17:fe:74:7a:09:2f:4f:2a:a8:55:79:b2:
5f:32:81:98:63:38:98:b3:82:b9:30:55:18:44:bd:
58:e1:2e:84:c1:a5:22:43:18:41:50:c2:c9:4d:c0:
6e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:94:9C:5F:15:6D:98:6C:23:11:87:F6:C0:BC:AD:50:3F:E0:CB:69
X509v3 Authority Key Identifier:
keyid:12:8E:6F:AF:19:CE:8C:82:3C:D7:0D:A5:8C:EF:1F:1B:54:33:21:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/128E6FAF19CE8C823CD70DA58CEF1F1B54332142.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uQ4EVLdDhJwXbfK5WEa8Lc1RnsqRDVcjUNyfUS7JRLp/0/34352e3137342e31312e302f32342d3234203d3e20323638393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.11.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:46:4f:c8:00:94:4f:14:7c:83:f0:db:75:5d:1d:0b:6a:24:
2d:1d:86:83:49:a7:66:dc:30:9d:78:a8:78:b3:41:9b:38:99:
ec:a2:61:ce:0a:62:e9:fb:fc:a5:b6:d5:62:17:02:49:3d:53:
a0:ef:2d:b7:5e:ff:4b:d4:10:b2:fc:60:7f:69:40:df:7a:c3:
18:75:3f:88:70:5e:2e:20:7d:09:b5:db:c3:db:54:bf:80:25:
7a:50:6a:5b:84:07:45:1b:42:87:4c:f1:42:a6:bd:4d:bd:7b:
d4:5a:94:66:d9:c7:21:40:13:52:c5:7f:02:cd:df:15:33:7b:
2c:e0:d5:48:6f:a2:3c:40:a2:06:50:28:72:32:f8:d4:4f:12:
e7:14:b4:66:78:28:e5:45:65:1d:63:f9:24:fd:72:b4:17:00:
f9:13:8c:48:42:af:af:ad:31:51:ba:cc:72:f2:8d:33:12:92:
c6:07:c6:e8:e7:5d:c9:8a:be:12:27:85:d3:63:84:a3:c2:75:
fa:0e:7b:92:a2:7b:cb:32:04:b7:be:bc:50:9e:86:5f:6c:ae:
92:fc:b5:ad:45:36:cc:4c:3d:61:c0:7f:25:5e:68:0a:0a:c1:
a3:9c:87:d1:1d:3d:c8:32:76:4c:36:b4:9b:0e:89:e7:e7:e4:
60:c8:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:08 2025 by rpki-client