Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35332e302f32342d3234203d3e20323638373038.roa
File: 34352e3137312e35332e302f32342d3234203d3e20323638373038.roa (raw, json)
Hash identifier: aPcU5SCM+PMIygpewUA96FVu7UXjh1wB2f3n0ijgUng=
Subject key identifier: D3:B9:73:4C:06:17:F5:3A:66:1A:BA:BF:57:E8:04:3B:A9:DD:E3:57
Certificate issuer: /CN=0F2CCFC527502386B95CBF037663832D454D8363
Certificate serial: 7A03F2C72B1EB31480BC7D2F686365D7D14D8D6F
Authority key identifier: 0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35332e302f32342d3234203d3e20323638373038.roa
Signing time: Mon 04 Dec 2023 18:03:03 +0000
ROA not before: Mon 04 Dec 2023 17:58:03 +0000
ROA not after: Mon 02 Dec 2024 18:03:03 +0000
asID: 268708
IP address blocks: 45.171.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:03:f2:c7:2b:1e:b3:14:80:bc:7d:2f:68:63:65:d7:d1:4d:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F2CCFC527502386B95CBF037663832D454D8363
Validity
Not Before: Dec 4 17:58:03 2023 GMT
Not After : Dec 2 18:03:03 2024 GMT
Subject: CN=D3B9734C0617F53A661ABABF57E8043BA9DDE357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:df:ed:b3:fe:3b:16:be:b1:71:bf:7d:7e:23:
72:00:24:45:43:90:94:8e:5d:e2:78:7e:e6:ca:32:
a7:c0:23:46:ba:dc:36:88:8f:25:ae:37:f2:a1:4b:
e8:14:4f:a0:6e:95:76:56:54:13:3e:fb:7b:82:95:
fb:40:c3:3b:55:f8:5a:25:8c:7e:41:02:69:70:e7:
29:48:eb:82:60:01:c9:07:55:3a:94:4d:be:71:ea:
a3:a0:fe:40:04:a2:f0:f6:fa:a6:f7:04:81:d8:5c:
ca:39:b6:ff:f5:02:19:0d:14:05:98:6c:87:d7:44:
14:05:96:1a:3a:89:83:f0:ca:22:a3:b3:f4:c8:a4:
ca:d1:4b:ca:0b:8f:46:e0:b1:ae:1f:12:19:53:6b:
a6:26:12:c1:b5:eb:99:5a:73:c6:95:75:40:35:de:
cd:3a:05:1d:78:f8:98:1d:49:52:f6:62:68:58:f5:
ed:0f:d2:40:a8:06:f6:6a:a4:c1:8d:8c:0b:a5:f8:
86:54:12:54:d4:a7:eb:dc:e4:8b:cd:e5:60:6b:5a:
05:3e:dd:fd:b8:49:aa:f2:b8:22:1b:58:ef:44:ca:
0d:22:e8:37:a4:a9:11:0a:04:1b:dc:54:e3:fa:2f:
e4:10:f0:79:be:a7:59:4f:ec:c8:aa:9f:ec:47:b4:
4d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B9:73:4C:06:17:F5:3A:66:1A:BA:BF:57:E8:04:3B:A9:DD:E3:57
X509v3 Authority Key Identifier:
keyid:0F:2C:CF:C5:27:50:23:86:B9:5C:BF:03:76:63:83:2D:45:4D:83:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/0F2CCFC527502386B95CBF037663832D454D8363.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F2CCFC527502386B95CBF037663832D454D8363.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91CM1MD61QwDqJUxxMDBVymEQYvzVLeR6RwMJWvXM5Mt/0/34352e3137312e35332e302f32342d3234203d3e20323638373038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:2c:58:19:58:5d:f2:fc:f9:cf:83:f6:3f:6b:30:35:eb:f4:
d1:3c:2f:ce:cc:9b:f8:0b:5c:62:81:0a:0a:d0:86:aa:d4:2e:
d5:a9:1d:bb:b5:98:e6:cd:16:e1:e7:01:e0:3d:51:fb:25:fe:
3f:c0:c5:8f:95:50:d0:35:9c:8e:cf:3a:e6:29:7f:5b:b0:39:
17:fa:4b:ac:de:a4:0c:f5:ea:f2:db:98:42:02:bf:4d:f1:40:
5d:e3:c3:f2:1b:72:ba:b1:10:cc:ff:23:b8:5f:1f:7e:ae:42:
94:a8:fe:b2:5d:e3:7a:bc:e7:67:b6:5b:ae:71:f3:f5:ae:5b:
2b:f4:90:aa:6c:d8:18:86:0b:37:f1:34:51:d5:be:ea:c1:48:
55:92:68:e4:0a:f2:53:43:b9:f4:1f:82:5f:f3:c3:6a:36:2b:
98:ad:f2:e0:ed:e4:fd:ba:3d:61:42:f4:64:aa:90:02:dd:f5:
1f:c3:5b:3d:7e:89:fa:0b:30:2b:c4:5e:5a:ec:bd:37:5b:40:
75:a7:f7:4e:08:2f:bb:ba:2f:36:f5:d2:e5:48:08:87:18:b5:
3a:c0:5c:cd:80:b0:c1:cb:5d:93:b6:5d:31:b4:90:3f:d7:be:
2e:68:0d:4f:fa:4c:f5:ec:e3:83:f1:1b:00:d0:2b:87:78:9e:
f8:77:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:51 2025 by rpki-client