Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa
File: 34352e3233382e33322e302f32322d3332203d3e20323633313535.roa (raw, json)
Hash identifier: xBBnzRvyzKCbeGiAOE8Jprm1q10QijizKHuMtBX7mvg=
Subject key identifier: D5:F7:79:77:B0:15:FB:F2:74:E2:6C:86:D3:B6:EF:F0:18:BE:05:23
Certificate issuer: /CN=6414A22202CC9C361CCD163D34053C6A06E0EB55
Certificate serial: 1B56E67DFD79C789156C8063BE3C43EB6A782256
Authority key identifier: 64:14:A2:22:02:CC:9C:36:1C:CD:16:3D:34:05:3C:6A:06:E0:EB:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa
Signing time: Wed 27 Dec 2023 19:09:48 +0000
ROA not before: Wed 27 Dec 2023 19:04:48 +0000
ROA not after: Wed 25 Dec 2024 19:09:48 +0000
asID: 263155
IP address blocks: 45.238.32.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:56:e6:7d:fd:79:c7:89:15:6c:80:63:be:3c:43:eb:6a:78:22:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6414A22202CC9C361CCD163D34053C6A06E0EB55
Validity
Not Before: Dec 27 19:04:48 2023 GMT
Not After : Dec 25 19:09:48 2024 GMT
Subject: CN=D5F77977B015FBF274E26C86D3B6EFF018BE0523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:be:02:b7:04:57:3c:97:5c:09:e6:97:a4:
01:bf:af:99:4b:be:fb:4f:70:20:ad:10:45:43:3c:
e1:b5:3b:41:ba:c6:74:be:90:cb:a9:41:87:22:aa:
1d:b8:d0:4d:61:8c:ac:ac:5d:6e:d7:4f:1a:6d:42:
11:2b:e8:6d:7a:0e:ef:47:fa:ca:7e:e4:41:3f:2b:
37:3c:fd:38:9d:c6:81:f1:52:29:25:ee:83:46:e1:
b3:16:c7:30:83:39:02:8f:51:45:21:f1:ac:71:03:
bf:77:ac:46:33:57:da:65:9d:0a:8b:b3:e3:e9:3b:
59:18:04:b3:6c:88:74:fa:7b:7e:79:52:34:fb:87:
f3:52:f1:a6:c5:f3:c0:57:ec:eb:11:6b:31:87:d8:
84:c3:7a:dc:a8:a7:ab:ed:2c:45:c5:ce:41:b1:d6:
3f:95:bd:5e:d0:7a:0e:58:a1:7c:19:d7:6d:a9:1a:
4f:eb:50:e9:97:5a:65:e1:61:08:cd:82:f1:4f:0e:
92:c2:f8:f1:fa:04:ed:14:bd:29:ec:ef:f3:1f:86:
47:c5:6b:47:25:9a:0c:96:55:7d:70:a2:d2:9d:eb:
6a:94:40:f3:55:6f:78:f0:cc:bd:c1:52:f7:23:ca:
af:6e:b8:1d:c0:2f:0e:ca:a2:c7:79:97:9c:2b:07:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F7:79:77:B0:15:FB:F2:74:E2:6C:86:D3:B6:EF:F0:18:BE:05:23
X509v3 Authority Key Identifier:
keyid:64:14:A2:22:02:CC:9C:36:1C:CD:16:3D:34:05:3C:6A:06:E0:EB:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6414A22202CC9C361CCD163D34053C6A06E0EB55.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7vSJxH95ahqMLU24jc8syjDiT1u6mWBdBRrFw7va8Gcz/0/34352e3233382e33322e302f32322d3332203d3e20323633313535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.32.0/22
Signature Algorithm: sha256WithRSAEncryption
51:f0:2f:99:43:cf:1e:ad:b7:8e:a4:5a:ae:8c:18:c8:bd:2d:
69:c4:02:f7:cf:fa:c5:20:ce:d1:60:46:4a:ae:2d:ce:be:6a:
cc:d7:83:e7:15:83:ac:41:de:9b:96:15:fa:57:f1:1f:11:5a:
54:a9:c2:20:90:d4:6e:40:d5:bc:76:60:c9:1b:01:ee:70:7d:
78:db:52:2a:18:19:ee:ad:bc:13:17:c4:93:20:1c:14:30:98:
c0:17:6f:dc:ad:2e:50:6a:28:98:b9:53:09:ed:13:a6:5f:f7:
17:7c:0e:2a:76:4a:da:94:46:0d:fa:ff:f4:21:57:5c:ac:df:
b4:8b:1e:70:15:9c:1b:6c:8b:bc:fe:97:54:e9:b9:06:aa:49:
19:13:01:42:ad:92:1e:b5:c0:52:e5:96:5c:54:54:27:ab:2f:
a0:4d:20:22:86:88:1c:ec:6b:18:44:be:40:5f:3e:95:eb:01:
87:ed:f8:6b:53:ed:cd:c5:5a:a7:9e:6f:5d:da:84:3e:7d:5f:
d6:33:20:a6:8b:6b:f6:13:8d:70:71:ff:19:ac:15:71:63:8b:
3c:47:74:63:5d:cf:7b:86:46:af:20:3b:d3:3f:88:20:c1:a9:
44:9c:49:bd:c0:4d:97:d8:89:8d:82:b1:b2:98:23:da:1b:97:
f9:83:9d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:58:03 2025 by rpki-client