Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/34352e37302e342e302f32332d3332203d3e20323637353537.roa
File: 34352e37302e342e302f32332d3332203d3e20323637353537.roa (raw, json)
Hash identifier: hzk5pfVMKmSnXgCqrrAiLUBnOlh6sxuIzaAEK/dnhbc=
Subject key identifier: 59:19:74:4A:CC:4C:C7:7E:C0:85:1D:51:BC:78:D6:6A:0A:6A:80:34
Certificate issuer: /CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA
Certificate serial: 3DC9785F9EB9634443508F79F18A0C6C61EF59B9
Authority key identifier: 5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/34352e37302e342e302f32332d3332203d3e20323637353537.roa
Signing time: Fri 29 Nov 2024 14:45:07 +0000
ROA not before: Fri 29 Nov 2024 14:40:07 +0000
ROA not after: Fri 28 Nov 2025 14:45:07 +0000
asID: 267557
IP address blocks: 45.70.4.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:c9:78:5f:9e:b9:63:44:43:50:8f:79:f1:8a:0c:6c:61:ef:59:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA
Validity
Not Before: Nov 29 14:40:07 2024 GMT
Not After : Nov 28 14:45:07 2025 GMT
Subject: CN=5919744ACC4CC77EC0851D51BC78D66A0A6A8034
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a9:62:c5:16:8b:8f:e9:1b:31:91:9d:4f:48:
bf:a8:2e:1e:99:63:16:35:30:3c:77:75:26:08:87:
c4:d0:d4:f7:81:df:5f:ab:1a:36:92:92:13:c7:81:
1b:77:f7:7f:e5:9e:e1:78:5e:a7:b6:ca:6a:06:cc:
12:d2:a5:5d:f9:80:56:50:f5:bd:19:11:25:42:e7:
0f:18:79:8a:bb:98:bf:16:da:89:b4:be:8e:68:66:
3d:2e:8c:d6:b3:29:a9:8d:cd:4a:8a:73:a1:38:43:
4e:87:30:9d:1a:bd:01:d3:b9:1e:bd:11:c3:c3:43:
71:6f:df:80:c8:72:57:de:42:49:8e:17:f9:c9:86:
cc:5e:59:22:aa:43:83:f2:a2:4b:38:07:7a:8b:15:
dc:17:48:ac:fc:c9:fa:14:3a:8e:91:57:9a:eb:b2:
e3:be:f8:8f:2d:3b:b7:be:d5:05:68:5c:47:61:1f:
e3:29:4a:b3:16:dc:87:8b:95:53:c8:56:69:80:f7:
07:07:3b:93:90:a0:52:d6:c7:8d:01:25:36:e5:81:
a5:40:07:6e:8d:2c:da:70:fd:eb:27:2f:f6:be:b0:
80:8a:30:39:2e:04:70:7c:36:84:ba:25:19:82:c3:
71:33:3a:66:26:bb:d2:a1:3a:05:4e:9c:7f:c5:98:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:19:74:4A:CC:4C:C7:7E:C0:85:1D:51:BC:78:D6:6A:0A:6A:80:34
X509v3 Authority Key Identifier:
keyid:5F:ED:05:49:6A:CB:55:59:F3:DC:2D:3B:19:AD:4B:60:E4:B9:7F:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FED05496ACB5559F3DC2D3B19AD4B60E4B97FFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/88QJCxbCK4gcXwnPtW6uo6NPYackhixt7B5xshJiViMU/0/34352e37302e342e302f32332d3332203d3e20323637353537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.4.0/23
Signature Algorithm: sha256WithRSAEncryption
28:e8:b1:d4:0d:ff:fe:4e:06:79:92:de:b6:fe:86:51:39:14:
45:ae:97:8f:db:b7:d5:b9:46:c2:d8:05:ed:bb:95:58:08:b7:
96:fd:6d:46:f7:99:c8:12:cd:c0:a5:91:fa:fe:02:b9:94:70:
bd:f7:cd:02:2c:5c:cc:ac:cf:f5:03:0d:64:be:1f:1d:17:2d:
d2:37:4a:ba:49:cb:55:69:e4:0e:78:29:7e:e0:97:f3:ef:96:
a5:e4:de:62:76:5f:52:f2:0d:76:7b:72:af:8b:cf:b3:7e:be:
86:3e:2d:54:e9:9f:80:bc:e7:11:76:28:13:4f:d2:31:14:7b:
7e:e8:8e:ba:01:2f:49:a7:4e:ce:e3:ff:ee:aa:da:5b:00:1c:
66:a0:cb:ce:2f:e3:dd:ef:7d:14:58:a4:06:17:78:58:9d:64:
28:59:aa:1c:37:de:a1:7b:43:9b:e6:63:21:8b:ea:e6:f4:d0:
c9:38:cd:81:b7:ad:30:e9:af:47:51:94:eb:e4:02:08:a4:0f:
08:20:37:19:d9:ab:5f:be:01:cb:15:97:16:04:d6:16:31:cb:
e5:8b:b1:64:5c:f9:ac:c3:e1:e0:91:a0:7a:05:cb:0b:87:0e:
28:6e:b4:82:df:f6:d7:08:9d:93:9d:1d:2b:a8:ee:44:88:af:
f4:f1:77:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:14:22 2025 by rpki-client