Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38362e302f32342d3234203d3e20323637353933.roa
File: 34352e37302e38362e302f32342d3234203d3e20323637353933.roa (raw, json)
Hash identifier: ueMSbrH6KuYa9m7t0TCXIqbsNYfeyDGIcmIcvbqAdBU=
Subject key identifier: CE:14:0E:A8:30:1B:80:1A:CB:14:2D:38:3C:30:F9:28:0A:2A:9D:EC
Certificate issuer: /CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Certificate serial: 0BFF2B9C60EBF04D9D5853BBC8C1A7EE0F61A3ED
Authority key identifier: 2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38362e302f32342d3234203d3e20323637353933.roa
Signing time: Mon 09 Jan 2023 17:13:50 +0000
ROA not before: Mon 09 Jan 2023 17:08:50 +0000
ROA not after: Mon 08 Jan 2024 17:13:50 +0000
asID: 267593
IP address blocks: 45.70.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:ff:2b:9c:60:eb:f0:4d:9d:58:53:bb:c8:c1:a7:ee:0f:61:a3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Validity
Not Before: Jan 9 17:08:50 2023 GMT
Not After : Jan 8 17:13:50 2024 GMT
Subject: CN=CE140EA8301B801ACB142D383C30F9280A2A9DEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:1b:43:bb:9d:a6:b7:ab:c8:05:26:61:a7:
7f:93:c5:c7:c7:07:56:16:d4:81:db:51:9c:fc:8d:
f5:b2:d7:60:31:2c:a9:9d:ff:cd:e2:db:c1:40:be:
30:bb:16:81:46:60:2e:ba:ce:7d:c4:6b:b6:6d:69:
0b:48:63:a1:8e:49:25:34:99:80:92:04:b0:6d:f5:
d3:f8:72:bf:c5:d5:cd:74:1f:39:46:67:74:82:f4:
1e:87:70:db:e5:d9:dd:97:46:8d:35:55:39:a0:88:
73:47:2d:29:8b:03:3b:a4:a1:3b:9e:ee:25:23:48:
ca:01:e1:28:dc:f9:d9:f7:1f:27:95:b8:ae:09:aa:
5a:ac:c4:47:e3:b6:8f:88:b3:c4:8f:58:a7:fc:36:
21:fa:ce:31:bc:9c:61:db:4b:6c:08:16:f8:06:0f:
7b:a8:5b:49:50:11:0f:52:ab:b6:bf:37:1c:46:c7:
ae:73:88:c3:87:0b:5a:56:dc:f3:17:91:57:b1:4c:
9b:a1:db:92:d6:87:a4:ed:d3:ea:5a:de:87:b5:01:
33:01:e0:d5:c1:45:1a:1e:83:c3:6b:35:4d:72:e6:
18:26:67:02:c2:2e:29:85:fa:fe:a8:39:87:2b:32:
30:94:7e:c3:81:91:c2:00:36:a7:d8:9e:b3:b7:07:
0a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:14:0E:A8:30:1B:80:1A:CB:14:2D:38:3C:30:F9:28:0A:2A:9D:EC
X509v3 Authority Key Identifier:
keyid:2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/34352e37302e38362e302f32342d3234203d3e20323637353933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.86.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:97:7a:7d:9d:cf:d4:dd:cb:e7:a6:70:82:09:da:74:48:48:
b0:f0:1e:cb:b2:a4:56:6e:96:c1:a9:43:9b:1f:f0:ec:5e:24:
ff:0f:71:66:f9:72:73:04:92:5e:f3:d9:2e:89:1c:0a:b1:26:
16:5f:b4:04:a1:22:16:a5:a1:de:8d:0b:28:9f:b6:f6:48:da:
59:0f:74:46:d7:eb:e6:75:60:bc:c0:b1:dd:b0:25:8a:a9:b4:
71:b2:d2:54:c8:84:f9:cb:55:d9:d4:d4:b2:66:d9:6f:19:91:
3c:cd:4a:20:9b:b0:0f:21:1a:8b:5f:b5:05:60:ca:c8:be:59:
26:52:38:cc:b1:5b:fc:9b:52:76:57:f0:6e:6a:ce:ac:bb:1d:
07:f3:3b:49:39:0a:18:76:7e:4c:ee:98:ad:8a:b7:60:ec:fe:
a1:42:d7:72:67:97:54:e1:21:ba:d9:86:8b:63:b7:dc:40:de:
ff:e9:6c:ef:d3:8b:d0:64:90:00:d6:b6:2b:24:a5:79:36:d2:
1a:f8:1f:c2:61:8a:9c:3b:36:1b:11:1c:45:b3:78:0d:31:44:
3d:38:1e:a8:03:b2:a6:8b:62:87:09:f7:77:45:29:9e:4f:a8:
23:45:64:6a:bb:5b:7a:38:ab:b5:d2:b5:fb:63:f9:cf:8d:85:
8b:35:13:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:47 2025 by rpki-client