Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa
File: 34352e3233342e36392e302f32342d3234203d3e20323637333633.roa (raw, json)
Hash identifier: mqSFsR69xiPDaazOszAWCsiDszvPFX5NVYF5t9zwhuI=
Subject key identifier: F8:47:B7:9A:35:E3:AE:5D:B7:6A:22:15:5C:71:39:2F:BE:26:6D:95
Certificate issuer: /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial: 368B245AFDB907FEC38435DB4644A8D15095E2E6
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa
Signing time: Wed 20 Mar 2024 19:26:17 +0000
ROA not before: Wed 20 Mar 2024 19:21:17 +0000
ROA not after: Wed 19 Mar 2025 19:26:17 +0000
asID: 267363
IP address blocks: 45.234.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:8b:24:5a:fd:b9:07:fe:c3:84:35:db:46:44:a8:d1:50:95:e2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Validity
Not Before: Mar 20 19:21:17 2024 GMT
Not After : Mar 19 19:26:17 2025 GMT
Subject: CN=F847B79A35E3AE5DB76A22155C71392FBE266D95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:97:00:3b:19:0b:13:b2:b7:ff:d9:d2:fe:5f:
6c:f3:ea:c5:a6:b9:18:9d:dd:0a:b5:b5:0a:b2:90:
81:96:97:34:8b:d4:19:eb:a6:8d:9b:bb:ab:50:c8:
3d:07:fc:cd:76:5a:c4:df:29:b2:19:39:23:89:e4:
b7:e7:63:15:e0:c2:f5:96:f1:89:16:26:80:ca:90:
96:23:49:e2:6a:30:63:03:40:e1:1b:2d:3b:19:70:
42:3c:5c:0e:6c:76:7a:8b:47:f9:fb:75:5f:ee:01:
80:25:9d:d2:16:bd:4b:67:85:33:ff:7b:34:cc:72:
c7:d0:86:57:88:71:93:a9:60:a0:35:55:9a:72:c8:
69:c8:d2:2f:6e:b1:a6:48:99:1d:16:e1:b9:2b:e5:
ed:20:32:c2:a1:55:3f:a3:30:72:51:72:f4:d2:f8:
ab:6f:53:4d:d9:eb:32:a2:69:c5:6a:e6:69:b3:d2:
3f:d0:c7:ed:70:ec:53:59:34:26:ee:74:2f:4a:e8:
53:04:77:09:7e:9c:1c:46:7f:a6:db:2f:8c:1c:b7:
ba:fb:37:83:3a:a0:44:a3:2d:0c:61:29:13:7e:bb:
a2:f0:12:4c:30:7e:df:bf:c3:be:e3:de:80:08:28:
05:1a:c7:53:4b:6d:45:1e:50:01:82:41:1f:12:1c:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:B7:9A:35:E3:AE:5D:B7:6A:22:15:5C:71:39:2F:BE:26:6D:95
X509v3 Authority Key Identifier:
keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/34352e3233342e36392e302f32342d3234203d3e20323637333633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.234.69.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:e5:33:bc:36:77:65:c1:db:f4:ae:c0:66:b7:16:ca:3d:f6:
dc:c1:26:9c:f6:b0:83:58:1b:d0:72:1d:e1:f7:ec:56:80:97:
c6:61:11:99:a3:56:5f:19:eb:fe:c1:77:43:58:fc:ae:57:e3:
93:c6:08:7b:41:3a:b3:9b:86:d8:ab:de:8a:4a:34:37:d8:77:
e3:e0:2e:ee:7b:03:72:49:66:39:ce:11:a9:cd:d4:28:68:95:
6b:56:5c:9e:b0:6b:15:5e:f9:2e:f7:6f:1c:1b:af:be:e3:68:
0a:33:3f:72:37:61:60:21:e7:9d:c6:40:a1:5a:34:fa:d0:b6:
5d:c3:76:9c:5b:1e:b1:50:0f:00:78:ae:d6:46:d8:5b:16:2d:
44:3b:d7:3e:8f:22:a8:c5:7c:8b:44:a0:91:2a:8f:51:2d:5a:
cc:59:81:4d:40:56:9e:fa:cd:8b:6a:a5:15:d0:83:7e:97:1d:
e7:e0:b8:5f:5d:94:33:58:55:50:8f:ce:13:1d:2c:b3:d1:54:
63:89:42:2c:0f:58:e8:30:89:b7:b6:49:32:be:f4:f4:ee:c6:
c9:9b:71:d5:ca:61:71:92:a4:5f:dd:d7:2d:3c:30:5e:4d:87:
81:94:1c:5d:fa:b8:fb:f1:8d:99:54:3a:f8:02:6d:50:ba:4a:
9e:6d:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:42:07 2025 by rpki-client