Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
File: 34352e3136392e34342e302f32322d3234203d3e20323638303937.roa (raw, json)
Hash identifier: dZMCCKRzAfWlFRR1PciqqyQ4IuSRSkNjTQXbTHBJ7lc=
Subject key identifier: 9E:64:68:3B:C4:B6:A8:8B:31:63:ED:89:E2:C9:56:83:82:07:E0:70
Certificate issuer: /CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
Certificate serial: 66A8A7BC40DFA2AB90E9777957A0B60A905AC194
Authority key identifier: B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
Signing time: Mon 29 Jan 2024 14:35:45 +0000
ROA not before: Mon 29 Jan 2024 14:30:45 +0000
ROA not after: Mon 27 Jan 2025 14:35:45 +0000
asID: 268097
IP address blocks: 45.169.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a8:a7:bc:40:df:a2:ab:90:e9:77:79:57:a0:b6:0a:90:5a:c1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8A77988EAC7E76375143BCCA6FA803A833D4C0F
Validity
Not Before: Jan 29 14:30:45 2024 GMT
Not After : Jan 27 14:35:45 2025 GMT
Subject: CN=9E64683BC4B6A88B3163ED89E2C956838207E070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3f:b5:2f:aa:62:c4:93:9f:79:27:cb:e5:98:
78:85:fc:f5:ba:b3:09:db:51:9c:ea:0b:ed:82:41:
88:be:70:b7:23:7b:33:c6:51:8b:4f:1a:af:44:59:
ce:cf:87:aa:18:9d:dd:74:6a:9f:91:30:c8:10:49:
53:b3:b6:bb:a7:8b:e3:6e:a4:ea:3b:03:cf:ab:f5:
0c:2e:c0:b9:a9:27:47:0f:8e:15:6f:82:de:d7:86:
4e:1b:a5:3b:fa:a1:bb:ff:c7:63:aa:d9:03:9f:d3:
af:be:8e:b2:de:ce:eb:78:23:d8:e1:7d:e9:07:f9:
c3:1a:0f:6a:bd:f8:ee:40:28:88:72:38:b6:61:01:
88:c1:67:65:b3:f6:31:ee:70:50:ee:3e:e1:8b:f3:
17:1e:a0:52:d0:ea:98:5f:72:0f:9f:c3:02:f2:2b:
d6:99:ed:29:8f:ca:7f:22:d7:bf:95:69:57:c4:77:
8f:30:88:d6:b2:71:ab:26:52:a7:13:85:21:60:9c:
c1:5c:be:98:bd:c5:fe:7a:11:8d:a7:a3:87:1a:cf:
eb:9d:5b:c8:da:1b:38:73:c2:cd:14:5e:d2:7a:81:
93:f6:e5:31:53:6b:93:bf:ee:c7:4b:59:09:05:1f:
2e:0d:99:0f:8d:48:50:b9:91:40:c1:32:90:53:05:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:64:68:3B:C4:B6:A8:8B:31:63:ED:89:E2:C9:56:83:82:07:E0:70
X509v3 Authority Key Identifier:
keyid:B8:A7:79:88:EA:C7:E7:63:75:14:3B:CC:A6:FA:80:3A:83:3D:4C:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8A77988EAC7E76375143BCCA6FA803A833D4C0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uSakgaBNuMLo3BdnVgDepu49YLtWtjFGcJ3uQhjjA1h/0/34352e3136392e34342e302f32322d3234203d3e20323638303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.169.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:b7:4f:64:72:55:11:2f:d8:42:cc:c8:74:29:09:ac:c6:4f:
27:3e:b5:6e:3a:10:08:5f:92:68:23:fe:29:15:20:13:bb:dd:
01:72:c0:f3:d1:d0:35:f3:8f:3b:2b:9a:d4:93:0f:43:25:1f:
66:c6:51:10:b7:02:f2:4d:bc:f6:20:10:b5:92:1d:fe:a5:c8:
ad:3f:89:76:06:84:31:59:ad:2b:16:8d:a4:c1:ad:78:b5:13:
a4:80:21:01:67:b6:32:d3:cf:38:d7:d6:d5:eb:2d:bd:c3:32:
f2:3e:23:fa:e5:bb:12:7c:52:9e:49:0f:6e:e8:5a:bb:6f:3f:
f6:72:6f:7e:56:d0:e6:dc:9b:e8:40:65:52:ca:f6:c4:cd:11:
cc:10:b2:62:d4:06:f0:c9:5e:f3:fc:75:74:90:3d:fb:2e:36:
14:51:5a:69:d2:7d:45:a1:5c:44:b0:ba:25:e2:77:f8:25:74:
b6:54:0e:15:f5:80:c9:df:fa:ff:23:d5:b3:98:7d:b9:3d:7c:
52:0d:35:b6:3a:7e:b3:e9:42:14:41:d5:67:6a:5a:d3:89:da:
22:e6:90:54:59:f2:91:e6:80:99:7f:91:00:57:ec:fc:0b:0b:
42:7e:56:5e:5c:fe:97:dc:27:61:80:1b:9e:8e:f3:95:5f:a7:
e6:d5:26:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:19 2025 by rpki-client