Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa
File: 34352e3136372e36302e302f32322d3232203d3e20323638303533.roa (raw, json)
Hash identifier: j7DhAiWBFIbj/WyfNuDnQg8x1puRjkcm5EyVsAggq4I=
Subject key identifier: D4:1C:B5:2C:FF:A4:C6:EE:A2:51:43:2E:EC:5D:4D:DA:76:26:A8:FE
Certificate issuer: /CN=60573234304A14834036D2BAAADE23EE1832BF5E
Certificate serial: 431C77770813201C8AAFCA08F72AC01862F6BB97
Authority key identifier: 60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa
Signing time: Sat 30 Mar 2024 01:18:30 +0000
ROA not before: Sat 30 Mar 2024 01:13:30 +0000
ROA not after: Sat 29 Mar 2025 01:18:30 +0000
asID: 268053
IP address blocks: 45.167.60.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:1c:77:77:08:13:20:1c:8a:af:ca:08:f7:2a:c0:18:62:f6:bb:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60573234304A14834036D2BAAADE23EE1832BF5E
Validity
Not Before: Mar 30 01:13:30 2024 GMT
Not After : Mar 29 01:18:30 2025 GMT
Subject: CN=D41CB52CFFA4C6EEA251432EEC5D4DDA7626A8FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:94:71:02:b2:f5:19:91:ef:67:22:b3:bb:
2d:e5:28:c0:ec:69:d2:53:2b:94:1c:e3:64:86:fb:
64:fd:a9:cb:f1:02:c3:29:46:9d:d1:7c:0c:9e:14:
86:8d:2a:f6:14:60:89:9e:6a:45:64:4b:f6:1e:50:
b5:e6:74:dc:f5:e5:67:f0:82:1c:62:1a:dd:c7:09:
01:81:67:9c:44:b5:91:ad:9c:61:b1:21:d4:43:0f:
0b:b0:4d:b7:d0:32:d6:17:0d:8a:89:42:51:26:b1:
46:c0:3e:bb:82:87:d1:32:6e:ad:50:2b:71:b1:44:
d2:23:c9:0f:b2:1c:e1:73:f2:76:ab:48:07:50:21:
ac:46:bb:63:24:9c:db:3e:23:0f:52:fe:5d:69:2b:
a7:70:bc:05:ff:e5:ec:e7:64:81:07:14:44:ca:d0:
5a:9d:04:a6:4b:d0:98:20:5f:17:43:3a:1c:37:a3:
fd:5f:90:ba:d3:40:56:73:f7:c1:e2:87:df:e0:df:
f6:8d:bd:ab:a7:23:e3:12:60:18:c1:4d:3c:ff:90:
f3:17:89:84:93:e8:05:60:c5:7e:a9:46:85:87:c1:
09:fc:01:0e:76:76:65:ee:23:27:76:33:e6:e7:51:
f8:83:60:67:50:87:6d:7a:2b:62:5a:b5:e1:19:3a:
f3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1C:B5:2C:FF:A4:C6:EE:A2:51:43:2E:EC:5D:4D:DA:76:26:A8:FE
X509v3 Authority Key Identifier:
keyid:60:57:32:34:30:4A:14:83:40:36:D2:BA:AA:DE:23:EE:18:32:BF:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/60573234304A14834036D2BAAADE23EE1832BF5E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60573234304A14834036D2BAAADE23EE1832BF5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ccA98cm8JTANz6cBkpUzmdR35k796kiBWr6g3eKCvs3/0/34352e3136372e36302e302f32322d3232203d3e20323638303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.60.0/22
Signature Algorithm: sha256WithRSAEncryption
35:c3:9f:ec:87:b5:90:78:66:b5:c2:48:a8:81:1a:2c:e5:b4:
c5:b8:b8:25:0a:56:cb:d6:81:27:ac:80:d4:57:89:6a:99:33:
e2:0c:22:fa:85:dc:b9:cb:11:12:2a:98:1f:b2:06:2b:ac:0b:
c1:ee:59:17:5b:fc:5c:bd:ce:40:c6:dc:81:35:14:b1:50:d0:
13:26:12:10:fe:db:a9:d0:ae:8a:e6:c9:d3:88:35:29:70:9f:
1a:0d:42:d2:af:8e:cd:c1:fb:4b:3c:34:92:b8:50:d7:67:ca:
d5:d7:6c:37:cd:8c:f9:dd:f6:4b:1e:6b:29:62:fb:fc:2e:38:
98:ed:13:97:e8:f8:4d:65:f2:32:19:3a:97:90:ad:76:7e:2e:
3b:5b:b1:7f:81:8b:c9:6b:25:09:88:c0:b5:a7:ce:df:94:fe:
41:98:ea:16:f1:97:4f:fe:d2:b4:ff:f3:6a:e0:52:77:bc:88:
25:57:bb:4c:ad:0e:f9:68:ab:18:e9:71:a2:c0:05:78:e9:3f:
dd:a0:ed:a3:e4:bb:cd:4d:c0:04:08:b7:07:55:b7:28:08:b7:
38:90:40:5f:40:e4:c0:8c:7d:9d:0a:d9:9e:78:c6:32:96:45:
72:cf:61:18:1b:64:9c:f3:03:bd:c7:49:c9:05:72:16:31:6e:
20:e6:09:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:06 2025 by rpki-client