Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32342d3234203d3e20323637363634.roa
File: 34352e37312e3133342e302f32342d3234203d3e20323637363634.roa (raw, json)
Hash identifier: mtCzCKXTc7hcRDnthn+TWEZF4pcAnWNa3uDoV2rw0Aw=
Subject key identifier: 2F:3C:DB:99:7A:DD:C9:A8:BF:9A:FA:4F:C8:C3:34:43:E2:03:7D:6F
Certificate issuer: /CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Certificate serial: 5B73BD337B8D540A464724D74D9D6E908E4A3F0A
Authority key identifier: 6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32342d3234203d3e20323637363634.roa
Signing time: Tue 28 Mar 2023 14:38:23 +0000
ROA not before: Tue 28 Mar 2023 14:33:23 +0000
ROA not after: Tue 26 Mar 2024 14:38:23 +0000
asID: 267664
IP address blocks: 45.71.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:73:bd:33:7b:8d:54:0a:46:47:24:d7:4d:9d:6e:90:8e:4a:3f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Validity
Not Before: Mar 28 14:33:23 2023 GMT
Not After : Mar 26 14:38:23 2024 GMT
Subject: CN=2F3CDB997ADDC9A8BF9AFA4FC8C33443E2037D6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f7:19:11:cb:c2:79:8b:0d:a2:9e:14:6a:b8:
0b:c1:d9:ee:c4:71:87:5e:48:39:f5:01:30:84:66:
da:10:d5:d3:af:cb:65:81:47:6c:91:f0:65:b3:84:
24:a9:1d:84:7a:72:ac:6c:ac:f5:cf:4b:03:f9:1c:
3c:34:3d:e2:2f:3d:1a:ce:f1:8f:5c:3d:25:1d:2e:
8f:87:c7:e4:f1:89:31:2a:6e:d4:1b:4a:4a:15:4a:
42:46:92:ef:81:56:f3:1f:f0:9b:f0:09:87:0b:c4:
55:2a:a5:6b:45:6f:67:5e:35:95:e0:2d:e5:35:ff:
39:3e:95:01:e3:3f:b4:a2:82:92:4e:f8:ad:5c:5f:
87:93:11:2b:0d:bb:0c:01:06:c1:a2:4d:94:43:40:
fe:01:05:a9:25:23:de:a8:fc:2d:09:c1:22:ad:ab:
b0:a3:a9:a2:d2:ba:cc:1e:c9:de:f5:ae:4e:ae:e7:
c5:40:94:78:6d:04:19:3c:40:32:1a:8e:e7:53:4f:
a7:ba:13:ac:0d:62:7a:d8:f9:94:56:d5:46:0a:cb:
ee:0c:ca:9b:1d:c0:ea:4a:ae:34:cb:e6:c8:87:b8:
a5:c7:4b:f1:69:63:4e:d4:5d:e6:45:ab:54:1d:2f:
fd:6f:f6:15:ec:db:f9:44:76:30:17:de:56:7f:a2:
e6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:DB:99:7A:DD:C9:A8:BF:9A:FA:4F:C8:C3:34:43:E2:03:7D:6F
X509v3 Authority Key Identifier:
keyid:6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133342e302f32342d3234203d3e20323637363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.134.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:9e:3d:12:eb:91:aa:12:0a:58:89:41:50:58:8d:7e:dc:33:
75:1a:ea:b4:a1:c3:c2:ea:4b:1e:e6:89:f9:f5:87:cb:fd:13:
24:a7:57:7e:a2:39:ec:dd:f9:0f:41:4a:6d:47:2b:56:a6:be:
77:79:8f:5e:08:1c:5f:32:e9:38:89:ae:14:d3:64:e8:f7:a1:
73:c2:b9:0e:16:c5:4c:da:c3:fc:fb:07:64:b5:27:3c:c7:5f:
a4:c1:db:f6:f5:29:28:38:f1:f6:3b:a4:77:6e:04:fd:55:41:
f5:b5:44:0e:21:3c:b7:e9:22:ba:6c:1e:d5:59:c5:da:9c:34:
4a:e0:b2:5d:85:5a:83:68:98:96:d2:f8:d7:d9:e2:a3:3c:af:
51:ea:d0:bd:20:64:0f:60:e5:6d:3a:3f:fa:83:57:4c:e6:79:
83:8e:aa:92:7b:97:ff:4c:75:ae:93:9e:46:79:d9:89:86:ab:
27:d8:45:e7:20:60:3f:47:ae:c1:e4:0e:7d:da:c3:67:e5:a7:
4d:67:0c:85:d3:a6:cc:3f:ba:f2:7e:84:83:c9:05:c2:d6:d6:
79:ea:0c:b4:40:86:98:90:63:d5:25:0c:0b:2e:5c:0b:b0:76:
69:69:10:8c:b7:2c:2c:e6:b7:14:19:ce:98:ec:b4:29:5e:08:
60:1f:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:10 2025 by rpki-client