Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36382e302f32332d3233203d3e20323637333633.roa
File: 34352e3233342e36382e302f32332d3233203d3e20323637333633.roa (raw, json)
Hash identifier: y4PfaFlxpw3IIZCLDISMUBr6/XNGNQUDmSE018xrSgo=
Subject key identifier: 23:96:9B:3D:51:41:07:F9:4C:F1:9E:F7:4B:86:88:AF:D5:AA:D5:01
Certificate issuer: /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial: 7A128DD24F286463B93F6EBCA7B045B23CD1D012
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36382e302f32332d3233203d3e20323637333633.roa
Signing time: Wed 20 Mar 2024 19:26:19 +0000
ROA not before: Wed 20 Mar 2024 19:21:19 +0000
ROA not after: Wed 19 Mar 2025 19:26:19 +0000
asID: 267363
IP address blocks: 45.234.68.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:12:8d:d2:4f:28:64:63:b9:3f:6e:bc:a7:b0:45:b2:3c:d1:d0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Validity
Not Before: Mar 20 19:21:19 2024 GMT
Not After : Mar 19 19:26:19 2025 GMT
Subject: CN=23969B3D514107F94CF19EF74B8688AFD5AAD501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:02:d1:ae:86:cc:a7:3d:57:e4:be:36:f1:04:
5b:2e:cf:3f:42:c1:1a:76:b4:1a:9b:e2:5a:d6:79:
b1:a7:47:82:a9:7a:a1:39:93:28:5d:57:d1:82:46:
eb:1b:b0:08:06:1e:6d:00:99:41:7f:d1:3c:22:37:
bb:fc:02:26:83:9a:10:5a:f7:aa:61:e0:ec:fc:66:
72:87:2e:cd:2e:fe:a4:26:fd:b0:3d:51:cf:cf:97:
a1:09:1a:a5:69:a6:6f:17:66:30:b2:42:fd:8e:c0:
d8:92:ba:46:1c:26:32:a3:fc:27:09:7a:8a:18:51:
73:0c:be:ab:1c:16:a5:90:22:4c:98:1e:35:58:dd:
e7:d2:e7:55:1b:57:6e:62:3b:bb:6c:81:af:ec:d2:
9c:c6:dd:e5:67:fe:34:9b:ca:d9:ef:1b:5c:0a:3e:
80:62:3c:4f:57:49:4d:ac:e5:8b:67:b4:e3:9a:42:
1c:ba:e2:52:11:7d:d4:b2:65:45:19:07:32:b9:87:
07:bd:4b:a2:17:44:dc:ee:35:45:fe:d1:46:72:78:
bf:51:36:7a:f2:ab:a5:3e:ec:e9:81:af:97:1a:c2:
b4:69:a7:56:8e:3a:9d:e0:39:86:f4:4d:ed:91:fc:
a0:fe:0c:53:f2:8a:42:1f:f5:63:bc:0c:21:1b:42:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:96:9B:3D:51:41:07:F9:4C:F1:9E:F7:4B:86:88:AF:D5:AA:D5:01
X509v3 Authority Key Identifier:
keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36382e302f32332d3233203d3e20323637333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.68.0/23
Signature Algorithm: sha256WithRSAEncryption
15:e8:7f:c7:35:85:70:fe:2a:d6:84:2a:3c:07:fd:ed:33:4c:
64:3b:d9:42:86:0e:cf:23:4f:02:29:0a:90:25:34:81:19:2e:
d3:8b:88:76:2f:fb:e2:f1:a5:f0:64:9d:72:f4:6f:4c:2c:2b:
71:f7:d0:39:3f:0b:a7:33:b5:07:be:b2:38:b1:4d:2f:28:71:
ee:64:cc:8a:06:4a:b8:39:80:2d:df:58:46:dd:9b:30:35:01:
71:42:5f:03:cd:a3:64:2f:34:78:61:c2:12:da:3e:24:ef:b8:
81:c2:77:88:41:be:d2:40:4b:e6:8b:a7:0e:10:83:65:85:dd:
13:9b:93:4b:f9:a0:47:1d:8c:c4:6b:7a:35:d1:e3:20:77:2c:
e2:65:c8:7a:90:3e:ca:55:f7:fc:c7:0b:0a:68:2c:18:9f:de:
e4:7b:2d:f9:d7:e3:21:22:6f:5f:e6:3d:59:ab:d8:1b:4a:aa:
64:2e:72:4f:a1:8d:67:f0:c7:67:a8:ed:81:42:1a:64:cb:76:
b4:5c:bb:e7:c9:ad:65:d0:94:25:37:00:83:ce:81:47:dc:63:
fa:bd:b9:c9:6e:b8:9c:66:80:5f:87:d0:48:10:73:cc:ad:73:
18:da:88:a7:e2:2c:61:58:17:ab:6c:6f:92:37:87:73:ce:11:
7c:e5:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:00 2025 by rpki-client