Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133352e302f32342d3234203d3e20323637363634.roa
File: 34352e37312e3133352e302f32342d3234203d3e20323637363634.roa (raw, json)
Hash identifier: kpOpKyVoulV7OXCIxOPrNvLSRrNFSIOb9LKIDjfXx5w=
Subject key identifier: 7E:C5:1C:24:4D:13:CE:9F:60:00:87:48:00:F2:BC:A2:A2:9F:19:D0
Certificate issuer: /CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Certificate serial: 5065762C6E017983F3D311DADDC6285480CD82A9
Authority key identifier: 6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133352e302f32342d3234203d3e20323637363634.roa
Signing time: Tue 28 Mar 2023 14:38:27 +0000
ROA not before: Tue 28 Mar 2023 14:33:27 +0000
ROA not after: Tue 26 Mar 2024 14:38:27 +0000
asID: 267664
IP address blocks: 45.71.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:65:76:2c:6e:01:79:83:f3:d3:11:da:dd:c6:28:54:80:cd:82:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AAF6EB2C226FE34683894006E1F450B945A24DD
Validity
Not Before: Mar 28 14:33:27 2023 GMT
Not After : Mar 26 14:38:27 2024 GMT
Subject: CN=7EC51C244D13CE9F6000874800F2BCA2A29F19D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:de:d1:63:b0:77:ab:27:9a:4a:ca:7d:00:70:
73:a6:b6:e2:01:b7:8c:81:f5:b8:81:66:a5:c6:9a:
ef:f7:1f:35:64:90:87:f7:6f:9a:e7:d0:5e:f5:5a:
2b:e9:72:4d:45:37:9a:fe:ed:a8:bb:a1:98:45:10:
70:c4:ea:31:3f:dd:cf:20:c8:ff:78:61:79:bc:d6:
b4:ed:e0:d7:68:f3:bb:d2:c7:d6:3e:e7:14:6b:75:
1c:7e:99:f9:05:e6:32:af:6f:d1:1d:c0:0f:b1:f2:
10:cb:4a:fa:9c:b7:13:da:0d:b7:e5:53:5b:89:b4:
28:b7:51:2c:1a:90:2d:6c:3b:69:75:1c:d7:df:85:
d8:20:51:ca:05:d0:ba:67:26:80:47:18:0c:00:d8:
87:ed:1d:c0:e8:55:82:d8:e0:89:35:be:d5:4f:17:
fa:45:03:17:f7:2a:a6:39:88:6f:22:7f:35:22:79:
17:5e:14:80:db:83:b5:24:b4:4e:0b:b7:60:0f:88:
ab:bd:21:7a:98:1f:e8:a0:97:dd:16:74:14:09:55:
d1:6f:23:7a:a5:e2:b5:23:c2:e1:b4:ea:5c:d3:c6:
08:bd:84:9b:7d:a3:53:61:0a:50:0a:fb:37:0a:cd:
03:b7:46:cd:29:f8:c5:95:4d:ff:98:66:a7:c6:12:
01:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:C5:1C:24:4D:13:CE:9F:60:00:87:48:00:F2:BC:A2:A2:9F:19:D0
X509v3 Authority Key Identifier:
keyid:6A:AF:6E:B2:C2:26:FE:34:68:38:94:00:6E:1F:45:0B:94:5A:24:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6AAF6EB2C226FE34683894006E1F450B945A24DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6Q2Bfjz88P9WjZwRKxBz1hyjZsQ1wiqLMi1AaSsAD2jH/0/34352e37312e3133352e302f32342d3234203d3e20323637363634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.135.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a6:9c:da:6b:37:2a:29:cb:62:0a:f7:14:01:a0:b4:9c:8e:
1a:3e:87:58:46:e0:6a:6f:aa:f4:39:2b:ad:f7:5c:72:72:29:
77:7c:46:8e:33:ae:7c:c3:95:52:92:43:3f:3b:25:c6:d2:f4:
91:7f:13:6b:8b:1c:60:2a:d1:ff:6b:b5:56:0c:67:fc:b5:1b:
61:5e:ae:87:9b:6a:91:61:91:25:1a:8b:4d:b8:79:fb:cd:02:
fc:b7:d4:6d:f6:86:70:78:f0:e7:9c:b7:30:e3:23:da:18:39:
b5:69:3d:a5:46:5c:29:96:23:31:a3:e2:b2:26:aa:44:6b:ef:
e8:b2:37:1f:bc:48:56:b3:22:52:06:f3:61:47:fc:fc:70:8c:
9f:2c:6a:0b:82:f3:4a:e5:d4:4b:51:f6:0a:6e:73:1b:86:4e:
eb:db:4a:63:8e:11:56:c4:85:f3:96:4e:9d:f8:ae:e9:51:29:
41:a9:40:2f:85:86:b9:81:55:ff:9f:5b:e2:65:6e:24:6c:f6:
a6:d0:29:5b:42:b3:13:6b:31:33:a7:e7:f3:90:66:31:c5:cb:
df:52:c4:6a:5b:10:05:fe:34:52:33:97:32:a0:7c:48:42:52:
53:0e:99:1d:cf:54:d8:1d:10:fa:87:08:e1:f5:74:e0:c3:52:
a8:f8:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:34 2025 by rpki-client