Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3134382e302f32332d3234203d3e20323637353839.roa
File: 34352e37302e3134382e302f32332d3234203d3e20323637353839.roa (raw, json)
Hash identifier: ENRbARJZO1OaFKlp1ZY1Mdd6/bltSjPZdsEx2J0/NMI=
Subject key identifier: A0:77:B2:A6:C9:B5:ED:0A:40:D7:AB:A8:1B:7A:B2:5B:E4:EF:EE:07
Certificate issuer: /CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
Certificate serial: 68DCB4F002F7A8F6A63814819F256C2902623451
Authority key identifier: BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3134382e302f32332d3234203d3e20323637353839.roa
Signing time: Thu 28 Dec 2023 11:44:25 +0000
ROA not before: Thu 28 Dec 2023 11:39:25 +0000
ROA not after: Thu 26 Dec 2024 11:44:25 +0000
asID: 267589
IP address blocks: 45.70.148.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:dc:b4:f0:02:f7:a8:f6:a6:38:14:81:9f:25:6c:29:02:62:34:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF3DB965EC536F25CA8D7D783C2670C7C4744C2F
Validity
Not Before: Dec 28 11:39:25 2023 GMT
Not After : Dec 26 11:44:25 2024 GMT
Subject: CN=A077B2A6C9B5ED0A40D7ABA81B7AB25BE4EFEE07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:84:1a:90:32:d6:52:26:19:9c:0c:e2:6c:
c9:d4:2b:cb:99:83:00:45:db:7e:fa:a5:a8:94:35:
29:fc:05:eb:24:49:82:49:ae:85:af:19:d4:8f:31:
38:2f:67:2a:ec:64:2f:31:b1:84:77:94:00:34:72:
e0:b0:c8:29:17:c0:6e:00:b1:9e:15:4d:5b:08:2e:
0d:5e:de:ae:a2:1f:b6:53:15:32:10:74:c0:95:62:
e7:c2:f5:ab:05:f3:2d:45:3a:8a:83:c0:50:4d:d7:
6a:c4:49:81:62:bb:3e:b6:e1:3e:f7:05:50:49:cd:
1f:02:66:53:73:ec:08:f6:94:4f:ae:4a:e1:7e:ff:
e8:d5:5a:73:57:94:5b:20:bb:cb:86:fe:4e:c4:d7:
3c:d2:e4:29:40:6c:41:97:6b:5a:c8:77:e7:71:00:
00:61:b6:e5:04:97:24:06:71:ce:f2:09:8c:93:3d:
9a:08:b4:9f:42:98:bf:d9:ef:b2:45:f3:25:6f:80:
35:b9:3b:ad:ce:e7:d0:0b:9a:7e:2c:d1:01:49:e2:
36:af:a8:aa:24:f2:c3:e9:f6:f3:46:15:0d:7b:00:
93:33:78:08:29:68:cd:fc:7a:77:8c:cd:8e:7c:84:
a7:7f:89:e1:b6:75:52:d9:a7:f7:ed:83:6d:1e:bf:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:77:B2:A6:C9:B5:ED:0A:40:D7:AB:A8:1B:7A:B2:5B:E4:EF:EE:07
X509v3 Authority Key Identifier:
keyid:BF:3D:B9:65:EC:53:6F:25:CA:8D:7D:78:3C:26:70:C7:C4:74:4C:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF3DB965EC536F25CA8D7D783C2670C7C4744C2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/0/34352e37302e3134382e302f32332d3234203d3e20323637353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.148.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:a1:5c:97:24:ac:ee:4d:f2:59:e2:5c:3f:4d:6d:19:ce:4c:
20:d0:b0:20:27:57:80:fd:8c:7d:9a:e9:db:ff:fc:65:b7:c4:
d3:94:84:4c:30:3e:69:96:7a:50:ce:a7:03:c3:9c:2e:99:51:
a1:0e:98:73:30:bd:0b:d2:6b:b4:02:dd:fd:d0:32:fb:17:ee:
0c:cc:ce:9c:ee:ec:67:ee:36:fe:4a:91:49:16:dd:20:fd:43:
03:97:bc:20:1b:5a:d1:46:36:bd:61:2e:cc:03:54:e5:d7:da:
63:6e:e6:fa:57:45:78:ec:11:31:5e:47:22:04:c3:06:06:eb:
94:67:41:ab:03:94:42:92:66:fc:22:f8:42:ad:ca:85:58:b0:
bf:aa:c1:8e:dd:0d:52:d8:ec:25:7c:0c:f6:cd:f3:2e:1c:64:
18:09:8e:57:c0:68:7b:cc:c3:69:09:7a:9b:61:50:90:87:f4:
fc:3c:96:e6:f7:07:d5:3b:2d:cd:ce:51:82:ce:9e:20:43:b8:
86:8c:76:84:74:3a:cf:3e:32:bf:9c:27:de:0f:6d:97:55:a2:
a2:54:9d:9d:53:ec:53:97:be:3e:a7:e0:db:4f:bc:61:2d:f9:
80:6b:77:44:e7:aa:9d:c3:1e:77:12:2f:98:2f:15:6f:ad:e6:
af:99:68:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org