Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230382e302f32342d3234203d3e20323638323134.roa
File: 34352e3233352e3230382e302f32342d3234203d3e20323638323134.roa (raw, json)
Hash identifier: EQPObW1OTUUxryy+KmJ76gXZ3O75TtVgqPk47awO1sc=
Subject key identifier: C9:E2:00:F5:09:DA:34:2B:F1:E9:A0:95:F8:4F:E6:66:7F:CC:3E:37
Certificate issuer: /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial: 27FBD8AD88CA7083629D3B3B25016B01DC5FA9A0
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230382e302f32342d3234203d3e20323638323134.roa
Signing time: Wed 22 May 2024 20:30:33 +0000
ROA not before: Wed 22 May 2024 20:25:33 +0000
ROA not after: Wed 21 May 2025 20:30:33 +0000
asID: 268214
IP address blocks: 45.235.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:fb:d8:ad:88:ca:70:83:62:9d:3b:3b:25:01:6b:01:dc:5f:a9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Validity
Not Before: May 22 20:25:33 2024 GMT
Not After : May 21 20:30:33 2025 GMT
Subject: CN=C9E200F509DA342BF1E9A095F84FE6667FCC3E37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3c:35:8e:72:fe:fe:52:b8:be:55:19:17:75:
64:93:00:ac:dc:be:1c:7f:a8:de:6d:a9:4a:38:bb:
bb:29:56:cd:2b:c5:59:c0:81:36:db:91:0a:2c:f0:
0e:df:24:df:f7:be:91:bd:70:4d:18:ab:45:9a:5b:
55:fe:34:e4:99:90:fa:4a:ae:d1:4a:9e:11:a1:9f:
44:64:43:e0:71:da:6c:f8:11:eb:54:9f:66:1d:ac:
8d:53:14:91:cd:ee:78:89:1d:51:20:6e:c5:db:3c:
76:8f:92:f7:11:b2:04:4c:ce:c3:11:7a:f9:d3:54:
8b:a2:3a:1b:c8:fa:2c:dc:eb:78:52:ce:ee:65:e7:
35:fd:3f:27:b1:99:79:4f:b5:16:37:07:f8:77:2e:
06:a2:48:c4:eb:6f:ad:9f:d3:27:96:13:67:a5:8d:
2a:5b:48:f3:8d:02:0d:df:54:f4:5c:a8:9a:e4:51:
9f:f2:3b:c2:b6:81:84:48:66:7f:d9:8b:d5:5d:b1:
f5:73:dd:8c:30:ac:ae:91:ff:2e:61:6b:5a:eb:bc:
a2:8e:54:63:0f:f4:56:94:a5:9a:58:bb:8f:2d:91:
f6:1a:a9:c0:84:e2:2f:d8:d7:ab:a3:34:49:70:13:
1e:99:a3:24:75:a6:33:cb:b5:b4:4e:2d:d1:fc:ff:
47:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E2:00:F5:09:DA:34:2B:F1:E9:A0:95:F8:4F:E6:66:7F:CC:3E:37
X509v3 Authority Key Identifier:
keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/34352e3233352e3230382e302f32342d3234203d3e20323638323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.208.0/24
Signature Algorithm: sha256WithRSAEncryption
40:cb:02:a3:cf:13:62:e4:2b:f5:9c:0a:48:46:18:f4:8b:9f:
3c:96:83:b6:5c:6f:15:a4:c3:48:6a:99:cc:83:2a:a2:02:2f:
ae:ef:86:44:c3:42:91:92:c4:37:35:cd:3d:8b:7c:df:0b:68:
1b:62:66:68:ce:3a:a4:ac:43:05:09:42:6f:10:14:b7:d0:6e:
15:0a:92:3e:47:22:14:cc:01:66:a6:d3:75:5e:82:b0:22:c5:
43:0c:58:1c:09:1d:ad:f6:42:62:2f:59:c1:54:be:c3:a3:19:
76:7b:b1:2b:87:cc:d7:18:67:3c:84:17:cb:b8:47:74:a1:08:
2a:53:01:02:89:ab:79:cc:7e:fc:c5:d1:af:3e:44:aa:b6:23:
04:b9:b0:3f:9f:b8:11:e6:c5:a7:23:5f:ff:c6:87:42:0a:ab:
f0:3f:70:48:c2:1f:2c:c0:1c:84:81:39:96:7d:fb:bb:8e:83:
ca:9b:22:39:0f:a8:4e:be:2d:dd:3c:af:26:34:10:3a:5f:9b:
a0:fe:f0:d2:72:51:c9:ae:18:88:ce:96:74:cb:2c:1b:96:34:
c0:ef:bc:a6:7a:56:f2:b5:0e:4d:bf:7a:03:9c:da:d5:ef:65:
cc:3e:23:23:9a:b9:c6:00:b9:26:00:17:1d:c7:cd:b3:46:b3:
64:4e:a7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:18 2025 by rpki-client