Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3234203d3e20323638373836.roa
File: 34352e3137322e3137312e302f32342d3234203d3e20323638373836.roa (raw, json)
Hash identifier: PAXU43CSEmahyEjxNgcrCPrFbNCatF0lZN7nfLv2Hc4=
Subject key identifier: EF:58:0B:01:2B:19:B8:11:0D:F5:CA:47:01:86:BE:48:52:E4:66:FD
Certificate issuer: /CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Certificate serial: 46A474A45354A356F683897E236F3E2A0CA7B06C
Authority key identifier: 5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3234203d3e20323638373836.roa
Signing time: Fri 05 Jan 2024 20:10:33 +0000
ROA not before: Fri 05 Jan 2024 20:05:33 +0000
ROA not after: Fri 03 Jan 2025 20:10:33 +0000
asID: 268786
IP address blocks: 45.172.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:a4:74:a4:53:54:a3:56:f6:83:89:7e:23:6f:3e:2a:0c:a7:b0:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B0E34B275C876C4B43F01DC71D28BE4396AE47A
Validity
Not Before: Jan 5 20:05:33 2024 GMT
Not After : Jan 3 20:10:33 2025 GMT
Subject: CN=EF580B012B19B8110DF5CA470186BE4852E466FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4d:8f:22:b1:0b:af:b7:6d:c8:05:4d:d8:b6:
b5:14:5f:16:3e:f0:5a:80:00:93:a5:5c:22:42:33:
1a:a8:7e:ea:7e:d7:98:71:63:56:f3:08:d3:a5:75:
d5:25:a1:eb:95:c5:d7:da:10:f5:3f:9a:29:ca:c1:
1d:04:e1:f1:e7:73:ab:33:4b:a5:9a:80:b3:9f:54:
bd:44:0e:e1:b9:06:eb:9d:b6:86:90:3a:2e:ca:af:
28:ab:8f:05:23:10:0d:86:8a:63:d4:50:6c:8c:c7:
da:0d:24:5b:19:39:34:3f:b6:0f:d3:83:ff:74:e0:
0a:41:c8:44:ba:97:25:c2:82:7f:29:f5:0e:81:ca:
8a:66:af:47:5f:fb:6e:16:c0:8d:16:95:0e:10:57:
a9:43:2f:88:d9:df:d4:8e:8b:d6:2f:0e:fe:86:88:
48:4f:8c:f6:46:5e:51:bc:ec:7e:f8:1a:f6:e9:ce:
c4:f8:4c:d9:6f:fc:6b:48:7a:c7:8d:6d:45:ef:9f:
e3:18:f5:2d:c9:0a:91:79:eb:fa:83:8d:99:05:08:
86:5c:c3:95:3e:54:c6:22:93:79:74:2b:90:fb:6a:
29:aa:f9:34:7f:a6:d1:65:a9:27:9b:72:72:b4:73:
94:67:82:f7:50:50:e7:ae:95:56:21:1e:6f:5c:0b:
4f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:58:0B:01:2B:19:B8:11:0D:F5:CA:47:01:86:BE:48:52:E4:66:FD
X509v3 Authority Key Identifier:
keyid:5B:0E:34:B2:75:C8:76:C4:B4:3F:01:DC:71:D2:8B:E4:39:6A:E4:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5B0E34B275C876C4B43F01DC71D28BE4396AE47A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8x3qxw7ChRrepDE7XETKSwW1kQRdYfMvUrJxVfxSVwh1/0/34352e3137322e3137312e302f32342d3234203d3e20323638373836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.171.0/24
Signature Algorithm: sha256WithRSAEncryption
12:38:82:f1:07:81:9a:5b:13:4f:b6:7f:54:54:54:e1:7d:32:
2f:ac:82:73:c5:12:25:1c:5d:48:3f:f1:ba:57:d1:f7:14:fc:
13:c4:c1:99:4e:41:66:d9:ef:ec:79:f9:58:71:06:c2:0f:15:
ce:97:3c:23:f1:28:9b:c4:96:37:d0:59:33:38:bd:bc:31:c8:
04:e5:39:61:b8:6b:fe:b7:eb:75:f6:ad:c2:de:66:25:7b:41:
60:bc:d6:ee:e9:8e:40:e4:91:80:e3:12:1f:6a:b0:52:38:c7:
63:a1:e6:ab:73:1f:40:9e:51:f0:9e:83:ea:66:8a:27:a7:3d:
d8:88:21:a0:74:82:71:5c:d8:59:08:3c:0b:70:3f:c8:dd:de:
6e:08:c7:77:3b:e6:f9:c9:04:e5:93:27:9e:f4:18:f9:0d:b3:
37:3f:0b:fd:36:ce:d3:2c:2b:12:69:ab:4b:e8:bb:07:c1:d1:
5c:10:99:01:03:5d:b4:24:77:47:34:4a:7b:6a:fd:de:b6:c9:
1e:fb:34:9c:4b:bb:5f:a2:52:07:96:bf:22:4c:28:e0:dc:42:
85:50:2f:5c:1d:f7:29:aa:86:ad:11:7a:01:1e:30:b9:cb:72:
5c:92:12:58:28:0c:f4:ad:07:31:ad:1c:90:c0:ad:e2:4b:dc:
ee:d4:c3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:06 2025 by rpki-client