Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32342d3234203d3e20323638383738.roa
File: 34352e3137342e31382e302f32342d3234203d3e20323638383738.roa (raw, json)
Hash identifier: SCr+PJKikRERkQvqCWamUdOnl7jf2P1oZSLA3vSWl98=
Subject key identifier: E3:1A:5D:20:D4:53:0C:B0:98:B1:16:43:9E:8E:D3:CE:31:05:20:5A
Certificate issuer: /CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Certificate serial: 64608003E60D1387FB15BC0F35324EFAB48480EF
Authority key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32342d3234203d3e20323638383738.roa
Signing time: Tue 12 Nov 2024 19:10:08 +0000
ROA not before: Tue 12 Nov 2024 19:05:08 +0000
ROA not after: Tue 11 Nov 2025 19:10:08 +0000
asID: 268878
IP address blocks: 45.174.18.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:60:80:03:e6:0d:13:87:fb:15:bc:0f:35:32:4e:fa:b4:84:80:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Validity
Not Before: Nov 12 19:05:08 2024 GMT
Not After : Nov 11 19:10:08 2025 GMT
Subject: CN=E31A5D20D4530CB098B116439E8ED3CE3105205A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:17:35:71:4e:31:88:fa:e0:78:9a:12:3a:7e:
6a:66:02:36:be:12:36:c0:de:86:04:40:1b:31:14:
ec:85:19:b0:d0:b9:27:52:70:06:c7:06:33:c2:db:
48:46:08:4a:e0:78:b2:34:34:0d:be:6d:14:5b:85:
42:70:36:0c:af:97:43:13:db:38:0e:5b:02:7a:43:
c0:f2:50:ad:02:b4:e1:57:31:6b:b2:03:55:2e:b9:
6c:f3:1a:de:40:39:a7:6c:49:e3:cd:64:6f:ca:34:
93:b7:3e:06:a2:53:fd:a4:14:62:7f:81:22:dc:23:
5d:b9:d4:12:a2:8a:fd:9d:fd:52:f5:d8:6d:7c:d8:
fb:16:4a:98:aa:00:d6:1e:e3:f4:71:30:9d:06:8f:
5e:59:ff:3c:6a:e5:82:ef:14:0e:67:47:98:55:d8:
fa:62:57:71:ea:71:9d:ad:43:65:78:a6:c8:74:8c:
52:7e:ff:b2:1d:36:ed:44:28:80:cd:bb:8b:60:0e:
fb:7b:ed:05:41:c4:7e:40:25:06:db:3d:e6:d2:9b:
ca:32:95:2c:60:67:6c:ec:b7:cc:df:e9:88:74:7b:
ad:3d:d4:2e:f5:41:1f:ad:4c:4b:d0:df:08:43:f0:
16:67:20:7e:ad:79:5c:09:b7:7f:82:d7:b5:d2:df:
51:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1A:5D:20:D4:53:0C:B0:98:B1:16:43:9E:8E:D3:CE:31:05:20:5A
X509v3 Authority Key Identifier:
keyid:DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/34352e3137342e31382e302f32342d3234203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.174.18.0/24
Signature Algorithm: sha256WithRSAEncryption
e5:45:e1:84:ec:6f:37:ac:9a:aa:f5:c3:58:49:fe:d2:3f:17:
8e:68:98:c2:6c:01:48:7d:dd:f6:4c:3f:52:2a:6a:cd:20:25:
b7:a2:fd:97:d1:23:45:7c:38:3a:f6:35:89:5c:4c:e5:71:aa:
75:50:69:45:d0:5c:2c:ee:2a:eb:07:e2:67:75:13:cf:d3:cc:
a4:cc:83:18:68:37:ff:34:71:a4:5c:e1:ab:ee:61:6c:b0:bb:
4e:b6:b2:ba:42:6a:c1:8a:61:91:59:bf:e8:b2:7f:7b:37:a1:
4a:76:8f:67:5f:be:2f:78:9d:5e:3c:c9:af:39:ec:7a:e8:a2:
9b:2b:73:c3:0c:f5:36:4d:27:44:16:c4:c5:6d:5d:18:b7:d0:
f7:c7:07:0b:74:db:e6:3a:88:d3:9d:a1:69:8c:b5:e8:b3:65:
03:06:b9:a7:fc:d1:35:72:10:23:d1:50:89:ae:07:cb:fd:d0:
c2:dc:6d:97:d6:06:9f:78:00:34:31:a1:54:96:e7:24:35:ed:
93:db:f2:a0:bb:bc:c7:cb:8c:14:93:ed:3d:e0:8a:97:99:45:
4e:10:05:9d:cd:8f:36:30:b0:59:d0:06:20:50:31:2c:ed:0e:
dd:4a:3b:42:96:43:4f:55:85:83:01:08:f5:bc:13:dc:3d:a7:
86:51:75:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:47:12 2025 by rpki-client