Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa
File: 34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa (raw, json)
Hash identifier: GIpW0RpQTntkGpyCZEvlY9IxQQTOS6+JYYh73v8VjNk=
Subject key identifier: F2:7A:12:82:D9:D3:49:37:FC:E1:9A:DD:C1:E8:C6:0E:BA:D5:8F:32
Certificate issuer: /CN=AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF
Certificate serial: 30467208DE130D4A4A43FF4394908F05C7DC9DFA
Authority key identifier: AB:8E:82:1D:6B:CE:52:5A:F5:AF:6C:1E:FD:73:0A:56:9B:1D:D9:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa
Signing time: Fri 22 Mar 2024 20:57:25 +0000
ROA not before: Fri 22 Mar 2024 20:52:25 +0000
ROA not after: Fri 21 Mar 2025 20:57:25 +0000
asID: 268944
IP address blocks: 45.176.140.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:46:72:08:de:13:0d:4a:4a:43:ff:43:94:90:8f:05:c7:dc:9d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF
Validity
Not Before: Mar 22 20:52:25 2024 GMT
Not After : Mar 21 20:57:25 2025 GMT
Subject: CN=F27A1282D9D34937FCE19ADDC1E8C60EBAD58F32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:11:86:2e:d8:95:de:a8:5d:e6:0c:c9:21:a2:
6b:e7:cf:18:4c:9e:a1:08:ce:ea:13:44:a2:8b:4a:
06:fa:15:a7:46:56:7c:a2:8c:f4:01:17:c5:fc:f1:
ef:49:c1:d3:f1:f1:0c:99:84:e2:3f:5f:a4:67:13:
a1:d6:06:85:33:11:9f:a9:4b:c2:e4:0b:7a:5e:c3:
85:21:e8:67:79:fb:73:83:b5:62:4c:74:11:5a:f5:
50:6e:19:ed:5a:e7:4e:c6:28:97:d8:13:d2:25:94:
8e:23:36:54:01:35:fb:de:12:99:4a:90:eb:fc:40:
15:78:cd:c9:93:46:d4:0b:18:a6:c5:31:40:2f:5c:
c4:4e:75:18:8e:fe:65:7b:55:33:d2:13:70:11:19:
4e:a7:10:79:47:d2:5f:8d:fb:69:a0:cf:e6:9f:ef:
97:e1:d5:bf:4a:e3:8c:ba:49:64:c1:96:92:d5:4e:
ec:50:52:5b:84:06:6b:d1:c5:d3:9b:d2:41:e8:df:
22:1c:97:d6:18:dd:ba:3e:9f:b5:b5:1e:11:c0:d4:
5a:31:d3:59:9c:dc:8c:be:1b:12:e7:3d:a9:9a:0d:
32:5a:15:1a:ca:8d:56:91:b8:9f:92:05:93:49:c9:
16:7d:99:a0:78:e9:9d:f0:69:e2:3f:77:86:e8:34:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7A:12:82:D9:D3:49:37:FC:E1:9A:DD:C1:E8:C6:0E:BA:D5:8F:32
X509v3 Authority Key Identifier:
keyid:AB:8E:82:1D:6B:CE:52:5A:F5:AF:6C:1E:FD:73:0A:56:9B:1D:D9:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/34352e3137362e3134302e302f32322d3234203d3e20323638393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.176.140.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:bb:92:43:36:a0:4e:6d:48:70:e1:bf:af:e7:62:80:8b:d6:
c5:49:a7:b1:05:a3:5f:e2:08:95:8a:b1:24:b3:e7:49:f8:dc:
86:23:42:22:0e:3c:f8:1c:dc:41:cb:04:47:5b:ca:bc:f2:e7:
50:c2:7a:68:da:92:b1:06:8d:86:a1:1b:66:8e:ba:ba:f7:9a:
e8:ae:4d:12:74:d3:9d:fd:d1:da:00:66:28:22:fa:bd:5d:e8:
b6:fc:c3:43:b1:87:2e:68:6e:c6:a5:a9:f8:c0:4c:5d:4a:3b:
95:00:2c:1c:ca:2c:2f:be:2d:11:72:bf:3c:f6:62:0f:78:c6:
76:c5:78:0e:7d:fe:52:63:d8:80:9f:11:f9:4d:92:1f:71:f1:
9a:87:e0:74:85:24:89:fe:92:25:8f:72:bc:7c:f7:36:42:9b:
1c:45:79:c6:4b:77:0a:ba:f3:de:4f:e4:a4:44:c8:b1:44:1f:
a8:98:0e:34:99:11:31:56:6e:e2:af:43:c4:27:cf:d0:21:a9:
66:63:7f:45:43:15:47:04:7e:51:8f:0e:61:11:8d:14:1e:f2:
24:f2:98:9f:b1:ad:22:dd:9f:e8:24:f7:1f:74:6d:20:19:70:
6d:3b:c3:45:bf:73:f3:90:87:52:7d:20:63:9b:a8:31:56:6b:
e8:62:e3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:06 2025 by rpki-client