Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/1/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa
File: 34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa (raw, json)
Hash identifier: GH0YqRSNAxzEQuVqRItqsfXwco2NzPU2PVyhgkaKD0I=
Subject key identifier: 9F:0F:FC:C5:2E:1D:E3:65:09:F6:58:71:86:91:40:DF:B8:5C:4F:DB
Certificate issuer: /CN=34509F4658E750ACFA191221A9FF58D143364376
Certificate serial: 2048AE29C358ECE60EB5A737C6CAF3044F4747BD
Authority key identifier: 34:50:9F:46:58:E7:50:AC:FA:19:12:21:A9:FF:58:D1:43:36:43:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34509F4658E750ACFA191221A9FF58D143364376.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/1/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa
Signing time: Thu 04 Apr 2024 12:13:26 +0000
ROA not before: Thu 04 Apr 2024 12:08:26 +0000
ROA not after: Thu 03 Apr 2025 12:13:26 +0000
asID: 268782
IP address blocks: 45.172.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:48:ae:29:c3:58:ec:e6:0e:b5:a7:37:c6:ca:f3:04:4f:47:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34509F4658E750ACFA191221A9FF58D143364376
Validity
Not Before: Apr 4 12:08:26 2024 GMT
Not After : Apr 3 12:13:26 2025 GMT
Subject: CN=9F0FFCC52E1DE36509F65871869140DFB85C4FDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f6:af:3c:e4:78:ef:80:4c:45:ee:16:16:f8:
75:2a:07:3f:de:57:7c:b3:b4:05:f1:71:c6:1a:c2:
25:d2:a9:57:06:f9:c4:a4:93:06:e9:16:db:90:bb:
33:4f:bc:e3:3b:ea:44:a9:94:fd:85:81:8f:72:42:
68:49:81:1c:58:38:56:76:88:eb:35:7a:58:b9:72:
7d:5a:84:45:af:51:4e:90:be:32:33:c9:6d:05:a5:
52:4a:96:c9:32:17:50:96:e4:3e:04:59:0b:10:77:
b2:c0:ca:0e:de:71:87:d3:7a:7c:42:f8:b3:f0:77:
53:65:6d:be:12:96:8b:60:8a:05:1c:a5:97:ac:b7:
e6:0b:c6:80:8f:1e:a1:b9:55:76:a8:27:8a:77:76:
69:9e:5d:cb:2b:fa:54:88:6f:c3:97:d2:96:ff:e4:
62:a8:05:55:ad:ea:4e:b0:0e:56:c2:8e:80:3b:27:
20:9e:42:06:ef:0a:cf:65:dd:35:1f:80:a6:12:ed:
89:fe:b5:3f:5c:c1:25:32:27:58:c6:ec:c2:84:58:
65:4f:9d:08:b5:1d:b2:a7:5d:af:00:f3:84:8d:c4:
c0:47:aa:22:2d:42:1b:5a:69:77:77:5d:db:22:05:
63:64:00:f0:67:c9:77:ae:56:16:df:bb:ec:44:d1:
7f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0F:FC:C5:2E:1D:E3:65:09:F6:58:71:86:91:40:DF:B8:5C:4F:DB
X509v3 Authority Key Identifier:
keyid:34:50:9F:46:58:E7:50:AC:FA:19:12:21:A9:FF:58:D1:43:36:43:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/1/34509F4658E750ACFA191221A9FF58D143364376.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/34509F4658E750ACFA191221A9FF58D143364376.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yRNaSTCKZ9bkoaFweFLjTsrGG6yKbAfydd6jR6miJZn/1/34352e3137322e3234302e302f32322d3234203d3e20323638373832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.172.240.0/22
Signature Algorithm: sha256WithRSAEncryption
44:61:32:c6:dc:b7:6a:0b:2d:32:20:e8:f9:c9:b8:b1:7c:70:
4d:d3:e3:a1:a3:b6:51:85:e0:47:f5:67:bf:bb:ec:52:6b:71:
21:ca:e3:04:7a:a7:de:9e:9f:58:fc:0f:57:ac:97:5f:fe:9e:
57:fe:fb:c8:cf:d8:00:8a:ff:73:10:d6:62:2a:5b:0d:f8:eb:
33:4b:35:16:a3:2c:84:93:b3:d1:e0:45:09:65:32:67:db:bb:
ce:84:21:08:d9:83:25:43:d7:a0:6f:dd:d3:b8:4f:70:c9:d9:
82:e4:1e:de:d3:18:59:84:bd:ac:e2:58:86:ee:b4:49:bb:8d:
73:5c:e2:24:31:ec:19:cb:be:9c:60:9d:65:e8:f3:26:b5:36:
32:92:03:78:ea:00:86:47:38:b6:b8:a2:26:d0:84:64:eb:8c:
1b:1b:09:ba:32:5c:fe:11:cd:ce:62:ff:e4:90:81:c6:1a:b8:
31:93:37:32:8d:d4:91:3b:27:9e:cf:7d:e0:c6:41:2e:b8:bf:
9d:41:47:ee:46:ba:d1:ec:d8:33:99:5c:87:84:e8:83:da:bf:
48:d5:36:8b:02:22:db:a1:ae:1b:3b:9d:f0:f7:fa:f5:0c:0b:
81:51:bd:39:ae:cb:4b:53:fc:17:3e:f7:7e:e1:77:2b:ce:5d:
1a:42:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:24:24 2025 by rpki-client