Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32332d3233203d3e20323636303935.roa
File: 34352e352e3130302e302f32332d3233203d3e20323636303935.roa (raw, json)
Hash identifier: BvGvzsTedETc/wxjo+qqNeFDVjJAsXKnpEgB4bKSD1I=
Subject key identifier: 42:96:8D:03:C0:CF:0D:A5:33:41:C4:27:62:A5:D3:20:13:5F:AA:3E
Certificate issuer: /CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
Certificate serial: 6ADA8467B9F32CFAA57CD181F7837424395AFCDA
Authority key identifier: 2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32332d3233203d3e20323636303935.roa
Signing time: Wed 10 Jan 2024 14:17:58 +0000
ROA not before: Wed 10 Jan 2024 14:12:58 +0000
ROA not after: Wed 08 Jan 2025 14:17:58 +0000
asID: 266095
IP address blocks: 45.5.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:da:84:67:b9:f3:2c:fa:a5:7c:d1:81:f7:83:74:24:39:5a:fc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2CCBCE0F05A971B0171E887B25E46A3B94A0030F
Validity
Not Before: Jan 10 14:12:58 2024 GMT
Not After : Jan 8 14:17:58 2025 GMT
Subject: CN=42968D03C0CF0DA53341C42762A5D320135FAA3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:47:02:0c:d8:45:84:a4:19:3a:77:96:3b:0f:
37:c2:a5:6c:1c:db:b4:24:9b:3b:bc:83:c0:54:c9:
b7:b9:a5:04:28:51:45:c1:1f:d7:07:2b:12:7c:3e:
d1:c9:d0:82:c2:f7:9c:02:1e:3b:4c:66:f1:0a:db:
62:47:d1:74:0f:80:06:76:b3:b5:83:67:61:74:56:
c3:95:3b:1d:21:6b:45:8b:83:30:76:5b:f4:40:99:
aa:3e:e0:ad:80:31:a7:01:1c:54:58:95:5c:21:cf:
ce:98:7c:ef:5e:61:72:4f:bc:91:12:4c:c8:1f:5f:
8e:25:40:16:89:69:5f:00:02:f0:57:34:ee:51:a2:
8b:cf:f5:42:7e:bc:8e:e4:d0:3a:2f:07:1a:a9:82:
7e:c1:9d:fa:85:a2:c5:ab:5d:8e:1f:ea:20:ba:ae:
7a:cd:ea:34:68:1a:3e:36:85:be:d8:d6:3d:2e:ba:
db:65:c2:00:30:2d:db:f9:e8:79:98:56:09:b2:5b:
2a:96:b5:ef:1b:6d:7c:f3:4c:54:d2:bc:ff:e9:56:
a5:eb:f2:b2:82:bc:3a:fe:54:5f:67:5a:b4:16:21:
27:30:20:c7:c4:eb:73:3a:90:61:13:45:f4:0c:03:
d2:9d:45:39:14:2a:a5:81:3b:1c:13:69:cb:9f:e2:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:8D:03:C0:CF:0D:A5:33:41:C4:27:62:A5:D3:20:13:5F:AA:3E
X509v3 Authority Key Identifier:
keyid:2C:CB:CE:0F:05:A9:71:B0:17:1E:88:7B:25:E4:6A:3B:94:A0:03:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2CCBCE0F05A971B0171E887B25E46A3B94A0030F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/34352e352e3130302e302f32332d3233203d3e20323636303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.5.100.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:46:aa:e3:ad:81:ce:8c:fb:84:3f:09:46:76:91:ec:6b:cf:
14:a6:c6:b2:da:6d:9a:2c:2d:d8:77:71:bf:42:67:ea:a7:26:
1c:32:8b:dd:3e:16:f7:45:4f:52:41:20:19:ca:f8:58:82:1e:
9d:86:1b:da:08:f0:6b:2b:7e:43:89:d0:72:01:b1:60:a3:2f:
90:b6:29:13:eb:80:dd:7c:d9:cc:e0:ba:e2:14:c8:cb:8e:f0:
97:a1:2c:92:f6:21:ff:5b:89:da:f7:ce:cf:e8:47:f3:d6:f5:
22:23:c0:74:51:fc:f1:12:a2:b1:75:be:83:cd:78:b2:d0:97:
89:14:0f:1c:ae:67:22:da:33:47:00:62:ff:5e:29:fb:09:83:
23:00:5f:81:c4:37:c5:94:b1:0d:4f:06:9b:f6:81:1d:7a:1b:
92:44:82:12:ec:6e:b8:30:ff:ee:4f:13:5d:a0:14:2f:a1:5c:
11:ae:a0:b9:93:b5:bc:50:96:5f:a0:5c:52:cf:07:ae:3a:aa:
27:2b:58:1b:b3:50:a6:4f:fb:1c:37:6e:01:4d:61:78:d9:32:
b8:54:b1:35:36:b0:42:c0:ba:e9:61:e4:11:27:86:7c:15:a1:
d5:ec:f8:09:e6:ba:25:c1:8e:fd:79:96:c1:52:5f:56:6c:d0:
0b:1d:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:07 2025 by rpki-client