Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3234203d3e20323633343237.roa
File: 34352e3136322e3234302e302f32322d3234203d3e20323633343237.roa (raw, json)
Hash identifier: QtrPHoYau+XLVQ2f0/Iy8wBhDssBR0BHl+JPcczm5ik=
Subject key identifier: BB:08:9E:E1:73:47:7E:AC:FF:51:76:BF:B7:29:68:E2:C2:05:FA:94
Certificate issuer: /CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Certificate serial: 3D543E5D84DE44E41CE43278C5E9F9FEC32716C6
Authority key identifier: BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3234203d3e20323633343237.roa
Signing time: Sat 13 May 2023 14:29:38 +0000
ROA not before: Sat 13 May 2023 14:24:38 +0000
ROA not after: Sat 11 May 2024 14:29:38 +0000
asID: 263427
IP address blocks: 45.162.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:54:3e:5d:84:de:44:e4:1c:e4:32:78:c5:e9:f9:fe:c3:27:16:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF405C0C9997841C8F9C68801DE0518E5AC4C209
Validity
Not Before: May 13 14:24:38 2023 GMT
Not After : May 11 14:29:38 2024 GMT
Subject: CN=BB089EE173477EACFF5176BFB72968E2C205FA94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:72:0c:a4:f3:d9:f2:5f:64:9b:68:86:fe:db:
6d:94:c1:ff:de:3f:94:04:c1:ee:66:f3:81:01:ee:
3f:ad:1e:7a:64:32:45:65:2f:d4:77:a7:d0:fc:bf:
39:f7:35:8e:8e:2c:ff:bf:9b:2e:66:c5:4b:31:1e:
4e:c4:9c:56:e7:27:2a:1c:35:76:a9:85:05:63:7c:
3a:6b:80:9a:21:f4:af:4d:ba:1f:a4:4f:ae:48:55:
01:40:38:19:07:a2:a9:0d:58:d1:1a:8f:07:d5:0b:
94:1f:b3:25:59:2b:6e:2f:ff:f0:47:02:7b:b7:7d:
f4:5f:ff:00:72:6e:fe:1b:ad:a9:b7:70:7a:bd:89:
53:05:60:fd:04:21:5a:58:9d:7f:d3:ee:5b:bc:33:
da:7c:74:aa:5c:e7:d5:a8:18:0d:48:17:63:14:59:
80:97:f9:e6:95:df:a1:28:8a:7a:78:ef:e8:2e:5a:
3e:5d:19:ae:e6:a4:55:94:a3:4d:c2:ff:b8:52:c2:
e9:70:5a:98:9e:88:15:17:87:3d:b0:b8:c4:30:9c:
1d:83:26:e1:d6:10:d3:94:7a:a8:0b:df:ec:88:39:
08:7b:11:0c:94:b4:de:d0:83:fc:10:35:12:44:9f:
96:c3:25:a3:84:32:b9:90:03:03:9d:95:dc:43:2d:
f3:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:08:9E:E1:73:47:7E:AC:FF:51:76:BF:B7:29:68:E2:C2:05:FA:94
X509v3 Authority Key Identifier:
keyid:BF:40:5C:0C:99:97:84:1C:8F:9C:68:80:1D:E0:51:8E:5A:C4:C2:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF405C0C9997841C8F9C68801DE0518E5AC4C209.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wGxsi2TWxs6qais3M26V86GrVAsSPNuJCk8UHVhmzM4/0/34352e3136322e3234302e302f32322d3234203d3e20323633343237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:f0:28:cf:ae:dc:9c:2e:bd:dc:2e:48:f5:9e:2c:fc:bf:37:
ce:69:d3:b9:e6:3c:f1:b8:a4:10:6a:c7:63:16:3d:f0:6a:e6:
5b:cd:3b:35:2e:8d:fa:2d:9f:db:35:a7:48:2e:37:2c:48:4e:
50:77:ac:48:f6:a4:3b:e3:58:24:a4:ef:2f:4e:e1:0c:95:1e:
c1:e3:11:b3:cc:f5:ea:5e:70:4b:ad:5e:fc:88:07:7d:d3:4a:
59:dc:b6:11:07:ab:65:91:78:7e:69:f2:0d:c7:b3:43:d4:9e:
34:02:01:aa:8b:d3:6b:75:99:0a:39:51:38:9c:dc:66:8f:67:
70:14:7a:40:fc:aa:60:77:d3:e4:be:1f:b5:25:b1:74:9f:b4:
8c:7c:34:c6:61:7f:3d:24:7e:5e:04:3c:df:ee:35:4b:be:65:
4e:c8:9e:a6:a7:5a:81:04:a4:69:b5:92:c9:b6:e2:1a:e9:13:
96:f3:46:0c:c9:09:76:31:12:cc:46:a2:84:40:1f:f7:82:35:
5e:05:4e:a7:5a:d6:85:bf:72:5d:31:fd:6e:2f:f5:78:98:81:
94:6e:25:ff:3c:4f:fb:8e:e4:04:66:ba:8d:c9:43:9f:3c:87:
e1:b7:65:ab:8c:33:aa:1c:72:b6:2e:6f:be:3b:33:a0:fb:15:
77:43:ae:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:18 2025 by rpki-client