Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32332d3233203d3e20323638303438.roa
File: 34352e3136382e33322e302f32332d3233203d3e20323638303438.roa (raw, json)
Hash identifier: ThlVOTGMW3DzXCXC5qi+EDxhi5VbQdDMY4y4HA2GY8M=
Subject key identifier: B6:D5:4A:95:7A:4C:8B:07:FF:74:67:28:2A:4A:71:3E:0F:E9:EF:4E
Certificate issuer: /CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Certificate serial: 3D1BAAC8DD74EFD6E42AF66E006040E521300A2F
Authority key identifier: 31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32332d3233203d3e20323638303438.roa
Signing time: Sat 25 Mar 2023 20:20:19 +0000
ROA not before: Sat 25 Mar 2023 20:15:19 +0000
ROA not after: Sat 23 Mar 2024 20:20:19 +0000
asID: 268048
IP address blocks: 45.168.32.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:1b:aa:c8:dd:74:ef:d6:e4:2a:f6:6e:00:60:40:e5:21:30:0a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31BD896B83D9A77612C2B074951DFE7C3E5F85F1
Validity
Not Before: Mar 25 20:15:19 2023 GMT
Not After : Mar 23 20:20:19 2024 GMT
Subject: CN=B6D54A957A4C8B07FF7467282A4A713E0FE9EF4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:49:8e:92:23:2e:47:aa:e4:d4:12:47:e2:60:
5e:9c:76:47:cc:a9:af:f1:ba:8c:9c:b8:7a:61:36:
aa:76:0e:92:36:df:1c:45:2a:30:8c:cd:d6:87:56:
b5:e7:e6:43:d6:95:78:6a:05:9c:6d:fc:cb:ba:79:
02:71:22:6a:49:1c:a9:cc:a8:da:85:53:3e:d0:2c:
88:fc:b9:a5:eb:e0:d1:3c:5e:9c:ca:aa:0b:9a:88:
cb:02:1f:c7:22:57:d2:b6:95:c7:a7:ad:88:9f:2a:
10:55:a5:d3:88:49:99:75:af:d6:ed:07:57:49:2e:
ca:9b:5b:cc:a0:f5:9d:2f:a2:c9:bb:9d:36:48:31:
1a:18:1d:53:e5:8a:2f:4f:75:00:2b:c8:7b:1e:57:
67:7a:21:4a:69:1d:6b:16:f9:52:cb:af:03:1d:d5:
f9:f5:70:90:ef:b5:55:d6:44:9f:ed:f8:99:69:ab:
c1:d1:79:0d:6e:69:11:76:73:b1:ab:c3:e9:63:77:
bc:84:ed:b9:0a:7c:05:fb:d0:ac:3f:71:4f:a8:ff:
7c:90:04:3c:b0:46:f8:ba:84:90:b7:3e:54:cf:bc:
5e:15:97:67:87:4c:0a:61:3f:19:a6:54:ff:bc:c5:
ab:39:13:e9:d4:71:07:65:a0:15:76:4f:04:89:ce:
48:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D5:4A:95:7A:4C:8B:07:FF:74:67:28:2A:4A:71:3E:0F:E9:EF:4E
X509v3 Authority Key Identifier:
keyid:31:BD:89:6B:83:D9:A7:76:12:C2:B0:74:95:1D:FE:7C:3E:5F:85:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/31BD896B83D9A77612C2B074951DFE7C3E5F85F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8jDT5UyaNHdTVZeyGyJcQMNkDoLFvpQY9RrS7GYhVz1n/0/34352e3136382e33322e302f32332d3233203d3e20323638303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.168.32.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:20:a9:90:80:b9:87:62:2d:94:70:54:6e:d7:42:02:03:a3:
f4:27:92:f8:1b:07:a8:9b:f2:2d:0b:59:d5:1a:fa:55:25:fc:
3e:ee:4c:1e:1c:d7:df:95:7a:23:f8:84:17:99:3d:2d:59:83:
c6:fb:a7:96:04:81:7f:90:37:1e:de:91:24:d1:8e:4c:4c:d1:
d5:c3:d7:76:ab:1e:38:c1:22:65:74:0d:00:2d:f0:4a:f0:29:
76:d0:5f:44:c6:a5:02:5c:f1:49:52:65:16:da:c2:7a:9d:8c:
86:71:3a:bd:59:74:b5:14:24:c4:6e:3b:c6:6e:04:c8:4e:45:
79:ea:0c:c6:0f:f5:44:0a:24:ba:65:e5:e9:ba:fc:29:8a:3f:
57:5b:cd:b5:c9:55:2f:f7:76:0e:cb:03:d9:c3:4c:ea:55:2c:
e5:d8:8d:90:d8:b1:3c:db:5f:a7:17:03:c1:08:1a:bf:0a:58:
5d:cf:ab:41:5e:f9:08:84:5f:a3:62:6c:23:11:81:ae:df:c8:
c1:33:b8:e0:4e:7b:47:c5:b7:dc:95:79:53:4b:3e:c3:2d:cd:
51:a3:36:ea:6a:20:dc:6c:1a:29:18:89:b4:1c:56:e1:56:78:
6d:d9:14:29:30:f9:0b:18:b6:dd:78:cb:19:88:40:10:e9:f6:
39:25:7b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 01:24:38 2025 by rpki-client