Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3233372e38302e302f32322d3234203d3e20323632393037.roa
File: 34352e3233372e38302e302f32322d3234203d3e20323632393037.roa (raw, json)
Hash identifier: heA/2VHAX80Ix/OhAirFI4gW9LbH6sguNjoRipAoKhw=
Subject key identifier: 1D:A6:05:B3:34:E7:A0:41:70:8B:93:3E:9A:24:E6:48:EF:14:1F:DF
Certificate issuer: /CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Certificate serial: 78C9CEFCD05919EC3715DD7D5569A5E565E25520
Authority key identifier: C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject info access: rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3233372e38302e302f32322d3234203d3e20323632393037.roa
Signing time: Sat 03 Feb 2024 12:53:18 +0000
ROA not before: Sat 03 Feb 2024 12:48:18 +0000
ROA not after: Sat 01 Feb 2025 12:53:18 +0000
asID: 262907
IP address blocks: 45.237.80.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c9:ce:fc:d0:59:19:ec:37:15:dd:7d:55:69:a5:e5:65:e2:55:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C68E4855E8AF4680CC3827C5F548D11AFEEC9178
Validity
Not Before: Feb 3 12:48:18 2024 GMT
Not After : Feb 1 12:53:18 2025 GMT
Subject: CN=1DA605B334E7A041708B933E9A24E648EF141FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ec:65:73:7e:55:53:d4:8f:2a:71:2b:b2:a3:
d4:ce:7e:10:a8:e3:23:a2:2a:66:3c:7e:17:9b:1c:
41:23:05:80:30:76:a4:54:f8:2a:41:9c:62:b5:a5:
ec:3e:f4:7b:31:1f:79:05:a3:e3:7c:3c:aa:7b:a7:
c4:eb:dd:84:26:75:65:0c:c9:c3:83:63:72:59:c6:
6d:ac:53:9f:2c:cf:d6:13:91:e4:6d:c6:98:24:5c:
a1:c1:f3:ea:de:71:e6:de:26:3e:cf:da:ba:59:56:
e9:4c:67:af:e7:98:18:f3:20:dc:97:13:7c:31:56:
9a:66:88:f1:df:4e:56:42:d5:91:a5:85:0a:82:01:
06:84:98:e5:a8:96:da:5e:14:52:80:7b:d9:2d:88:
39:06:a1:11:f4:71:5b:b4:e6:e4:09:e6:cb:26:a5:
0b:9f:54:12:c7:38:6b:37:99:d7:13:99:e8:3e:bc:
3c:0d:74:eb:a8:e5:25:e9:08:fb:d3:b8:60:b5:62:
66:93:3c:6b:19:5c:4a:64:25:0f:6d:29:63:49:43:
2d:c7:92:06:7a:e5:35:7b:6c:ef:87:97:c4:14:f6:
53:46:ca:18:39:3d:b6:fd:bc:c9:75:ff:25:04:50:
af:f9:e9:97:58:ea:a1:b2:4f:e9:a4:e1:9e:a7:1f:
1b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A6:05:B3:34:E7:A0:41:70:8B:93:3E:9A:24:E6:48:EF:14:1F:DF
X509v3 Authority Key Identifier:
keyid:C6:8E:48:55:E8:AF:46:80:CC:38:27:C5:F5:48:D1:1A:FE:EC:91:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C68E4855E8AF4680CC3827C5F548D11AFEEC9178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/673qYPSK2DWWjCBamWhNC7rgrqhCQPAjdGHSdCZn9V6o/0/34352e3233372e38302e302f32322d3234203d3e20323632393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
19:34:a2:ce:0c:a3:78:32:6b:4b:83:5f:de:3d:02:fc:a1:26:
ae:aa:13:bc:f4:a0:e3:d5:72:94:00:65:fd:7e:47:dd:ae:fe:
7b:47:ad:fb:81:56:77:73:b3:ee:ea:0e:f0:d6:52:7f:e9:53:
15:8d:28:06:1f:43:b4:f4:8b:7f:cf:3c:fb:a6:b2:fb:6d:60:
30:6d:f4:d2:0a:fc:cc:ce:ba:0d:63:da:30:4f:6f:85:7e:57:
78:9b:67:b4:a4:00:ee:16:1a:92:21:74:0b:52:c4:e3:8d:6e:
cc:1e:9a:2d:86:69:18:49:68:29:8e:10:1a:b6:50:ea:e9:3b:
6a:79:ae:21:eb:ec:f5:a0:1c:08:e7:37:87:c3:07:c2:77:1d:
b8:f0:ae:4d:51:9c:c4:78:f3:7a:d8:ae:b6:b8:5b:e5:bd:a1:
44:30:28:e8:7c:02:30:8c:f2:89:48:e9:74:1e:a0:fc:44:42:
1d:47:b4:b6:81:5d:62:b7:c7:c4:08:d1:fd:81:55:bf:1b:41:
f5:c3:bb:7a:99:96:62:17:1c:94:52:85:b9:89:f2:90:be:17:
cf:18:ad:b1:0a:d3:07:7c:e6:8a:f4:e3:87:8f:5b:68:15:03:
fc:b9:42:e6:16:16:4b:76:b4:44:ad:48:e2:76:b4:5a:65:ec:
89:a9:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:05 2025 by rpki-client