Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32322d3234203d3e20323637353933.roa
File: 34352e37302e38342e302f32322d3234203d3e20323637353933.roa (raw, json)
Hash identifier: xKdaoycTqe9RpUozMF8KC8KV0Ygdat0178zo+Iggbbg=
Subject key identifier: 32:41:ED:40:1F:9D:F5:32:68:2A:86:EE:2C:A4:C2:08:3A:DF:F4:4F
Certificate issuer: /CN=3F175E66F2E0A76812C6FE5AFEDA9159214458CB
Certificate serial: 6DC46364A12F35C0AEEBA53A35D849C2D82096DB
Authority key identifier: 3F:17:5E:66:F2:E0:A7:68:12:C6:FE:5A:FE:DA:91:59:21:44:58:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32322d3234203d3e20323637353933.roa
Signing time: Fri 23 Aug 2024 17:45:00 +0000
ROA not before: Fri 23 Aug 2024 17:40:00 +0000
ROA not after: Fri 22 Aug 2025 17:45:00 +0000
asID: 267593
IP address blocks: 45.70.84.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c4:63:64:a1:2f:35:c0:ae:eb:a5:3a:35:d8:49:c2:d8:20:96:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F175E66F2E0A76812C6FE5AFEDA9159214458CB
Validity
Not Before: Aug 23 17:40:00 2024 GMT
Not After : Aug 22 17:45:00 2025 GMT
Subject: CN=3241ED401F9DF532682A86EE2CA4C2083ADFF44F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:5f:2d:e4:aa:b6:50:fb:1f:77:4e:68:89:55:
63:77:9b:55:37:3a:7d:2d:98:c6:a5:d5:1f:18:68:
80:94:f4:10:43:8c:89:4d:53:c5:ee:8e:ac:ce:3e:
d9:de:d9:10:69:a4:67:74:bd:c3:d1:a7:f7:b9:3d:
38:02:e2:e8:9c:0b:17:c6:7d:0c:87:4f:a7:4f:c8:
59:a8:86:d5:0a:a1:87:c0:87:33:3c:1b:b6:5b:7b:
b3:6f:5d:8c:14:5e:ba:a2:4f:d7:a3:2f:df:83:75:
9d:2b:da:dd:5d:4c:f3:ac:f4:91:81:8e:af:53:ac:
c8:10:a8:93:29:30:52:2e:79:2f:7c:1b:42:ac:0f:
22:74:2e:3d:85:da:d1:ad:89:72:74:af:f4:1a:92:
e3:fd:b0:d8:9c:e5:03:b2:4b:f6:00:80:0e:4c:01:
0d:85:a9:b3:0b:1d:77:c2:64:ff:f4:50:62:c4:26:
07:48:c2:0f:6b:1a:8d:f4:f3:00:91:de:3f:ce:a8:
86:08:77:5a:34:97:ec:14:5e:2e:b4:a1:ad:c4:d7:
2b:ea:dd:51:41:cb:97:0d:3e:ff:51:25:13:1c:1d:
c1:40:69:66:7b:d7:c4:df:03:a9:f5:79:7e:4f:e9:
29:ef:e0:65:30:fa:a8:5e:95:3c:a2:4e:60:29:1b:
8f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:41:ED:40:1F:9D:F5:32:68:2A:86:EE:2C:A4:C2:08:3A:DF:F4:4F
X509v3 Authority Key Identifier:
keyid:3F:17:5E:66:F2:E0:A7:68:12:C6:FE:5A:FE:DA:91:59:21:44:58:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F175E66F2E0A76812C6FE5AFEDA9159214458CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38342e302f32322d3234203d3e20323637353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.84.0/22
Signature Algorithm: sha256WithRSAEncryption
98:09:da:f5:4b:a3:c1:6a:92:19:b9:cf:d3:6b:b0:ea:44:f5:
23:f3:1a:f9:53:38:99:ad:c0:2a:b4:f0:be:bb:6f:90:cc:e2:
7b:5c:2a:48:68:fe:93:e3:fc:b9:6b:d2:4f:5d:7a:05:3e:c1:
aa:f3:c6:7d:9f:9b:fd:e1:44:01:1e:e6:f3:fa:a3:18:55:72:
b1:f6:1c:b1:05:f9:65:61:c6:9e:20:3f:7b:08:2a:d9:7a:ac:
fa:3b:82:ab:56:f7:39:59:10:b8:5e:fa:a4:5b:32:1b:7e:02:
51:c0:4e:7d:dd:ea:25:c3:e8:d8:56:b7:7e:c6:b2:20:84:7b:
e1:9b:b8:1b:89:e6:7b:bd:dc:52:a3:a6:05:a6:a5:41:4b:3c:
ca:64:e7:02:9c:54:1f:e3:d0:73:7d:de:20:d6:bb:5b:a8:ed:
a7:69:9f:f6:8a:aa:55:05:f1:6c:73:f4:31:6f:0e:a9:76:75:
06:9b:e8:ae:25:7f:76:25:99:89:1c:64:ff:2a:6d:2c:81:d6:
04:57:2b:75:97:61:57:d5:d9:0b:44:48:cd:02:1f:1e:69:7c:
4b:b1:d9:a9:dd:fd:b0:16:a0:9f:c5:bc:7e:4f:65:14:7a:e1:
30:28:30:e6:07:1e:13:37:37:20:e4:b2:51:f5:be:b1:1e:9c:
80:23:c1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:40 2025 by rpki-client