Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa
File: 34352e3233342e36382e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier: for5AsUbiGNneKHbJz/aj+VZqEHfeoGdaiDhs1HVENs=
Subject key identifier: F7:56:D2:6C:44:8F:CE:CD:ED:66:54:C4:F1:A5:FD:4C:80:96:63:8F
Certificate issuer: /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial: 37B9ABEAF1F37378F65057AC183537E46F26E5ED
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa
Signing time: Wed 20 Mar 2024 19:26:20 +0000
ROA not before: Wed 20 Mar 2024 19:21:20 +0000
ROA not after: Wed 19 Mar 2025 19:26:20 +0000
asID: 267363
IP address blocks: 45.234.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b9:ab:ea:f1:f3:73:78:f6:50:57:ac:18:35:37:e4:6f:26:e5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Validity
Not Before: Mar 20 19:21:20 2024 GMT
Not After : Mar 19 19:26:20 2025 GMT
Subject: CN=F756D26C448FCECDED6654C4F1A5FD4C8096638F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:27:27:07:2d:c9:da:53:a8:02:2b:ff:ac:
dc:7d:3a:fe:38:51:12:21:7c:6a:d7:18:a8:d6:0a:
30:7f:67:99:78:23:dd:5a:21:78:dd:e8:52:8a:b2:
87:3b:92:bb:ba:21:1b:7a:70:04:91:99:8f:59:da:
78:bc:20:c0:b6:fe:b6:08:49:45:88:ee:45:cf:9e:
fe:94:1b:0f:f8:60:29:5d:8a:3c:2d:1e:89:74:97:
2d:3f:44:f5:5f:e8:d6:fe:2b:c0:e6:e5:d4:0b:ff:
f1:cb:e4:4d:7d:e2:b6:61:28:c5:fd:ac:66:cd:df:
0e:a4:21:9b:c6:8e:b2:68:ba:23:db:57:55:4c:51:
ef:43:5b:46:59:a4:ff:94:21:df:72:d3:4d:ad:de:
87:04:ba:e9:9e:b6:3a:ab:4e:cf:37:00:8a:75:80:
cc:38:b2:59:d3:17:dd:de:9c:2c:f7:be:73:e6:cd:
36:26:53:04:b0:5a:23:a3:32:24:5c:5b:17:83:c4:
88:8d:6e:16:27:82:ca:c4:55:ec:d5:de:fc:d3:fe:
83:a1:33:30:8b:1c:18:1e:f7:fd:3b:63:dc:f1:ec:
9f:a7:9f:4f:38:5d:6b:f5:3b:0f:a2:14:02:7f:1b:
b1:00:78:d9:74:c3:eb:fb:74:fa:3b:62:54:1c:00:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:56:D2:6C:44:8F:CE:CD:ED:66:54:C4:F1:A5:FD:4C:80:96:63:8F
X509v3 Authority Key Identifier:
keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36382e302f32342d3234203d3e20323637333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.68.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:aa:e6:16:08:66:23:42:15:c1:46:90:39:c6:87:07:6d:4e:
c4:1c:b4:e5:47:81:cb:72:4e:53:0f:60:e3:74:b5:24:c3:92:
c3:0d:4a:ef:02:cf:e1:da:81:8c:3f:e9:0b:ec:b3:74:bf:d8:
b2:77:f8:10:e3:fe:c8:7e:72:4c:84:ca:c9:9a:70:2c:5c:0c:
15:3e:48:48:45:f5:54:00:af:e1:d3:ef:6f:d5:bf:be:30:f3:
e3:4c:83:6e:6a:e4:1b:79:46:dd:c9:c8:ff:51:32:f2:e1:01:
15:c7:e8:c9:31:4a:ab:72:ca:b0:f2:59:e2:b0:c0:7a:5b:ec:
b9:47:a2:54:1c:10:ed:6b:17:0c:d1:9a:cc:ce:c1:12:79:d3:
d3:be:aa:0c:dc:de:73:c6:aa:40:f1:84:16:e0:9d:8d:8c:46:
7e:ba:39:bc:d8:6e:21:22:9a:31:fc:58:92:56:41:0a:e3:6f:
7b:fe:cf:6f:8e:89:9e:d7:21:66:60:82:3b:34:fa:26:93:ea:
71:c3:a1:b9:13:2f:41:75:bc:fe:f0:3c:d8:63:b6:91:3c:cd:
46:fe:ce:a5:47:4d:3c:35:b5:35:75:0f:7d:3e:c7:33:97:d3:
b8:8f:86:77:ca:9d:20:cd:92:65:27:eb:2c:7c:6c:a3:a8:46:
cd:67:58:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:58 2025 by rpki-client