Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3232382e302f32322d3232203d3e20323632363137.roa
File: 34352e36352e3232382e302f32322d3232203d3e20323632363137.roa (raw, json)
Hash identifier: IN87ikQIASueJIUTsvm6KfwmbLEo7G8EbTMfyUtA82w=
Subject key identifier: 5C:3E:67:8C:64:F4:FA:04:83:FA:B2:94:72:23:92:01:88:AC:74:02
Certificate issuer: /CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
Certificate serial: 40EF2C948A42248F0761BB26EC40FED1B6CDC884
Authority key identifier: 03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3232382e302f32322d3232203d3e20323632363137.roa
Signing time: Tue 13 Feb 2024 11:55:50 +0000
ROA not before: Tue 13 Feb 2024 11:50:50 +0000
ROA not after: Tue 11 Feb 2025 11:55:50 +0000
asID: 262617
IP address blocks: 45.65.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ef:2c:94:8a:42:24:8f:07:61:bb:26:ec:40:fe:d1:b6:cd:c8:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0305A54375BDB3F5E631FB8274B561AB2511B90A
Validity
Not Before: Feb 13 11:50:50 2024 GMT
Not After : Feb 11 11:55:50 2025 GMT
Subject: CN=5C3E678C64F4FA0483FAB2947223920188AC7402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:9a:b0:4b:0c:74:eb:73:f3:7b:c8:ed:f8:23:
66:d6:13:45:68:93:e0:3f:5e:51:74:a4:3c:ae:f0:
12:f1:45:1d:46:c9:d1:7e:5c:8b:be:6f:d1:51:49:
db:39:28:c8:c8:22:b2:96:c8:1b:62:f5:07:28:e0:
81:e5:6b:be:14:a3:43:74:aa:89:bc:49:24:9b:e4:
39:be:c9:58:49:fc:92:ec:03:c4:2f:f5:6c:1b:3c:
87:09:8e:48:3a:36:5d:69:dd:ff:cf:1b:dc:52:b3:
98:6f:67:ea:96:72:ad:d4:fd:0a:dc:97:24:ce:09:
72:f3:de:f2:bc:7b:ec:55:51:e9:01:0e:5f:f7:94:
76:c4:65:bb:25:ba:36:ef:2b:99:16:03:6f:37:80:
8e:dd:64:8a:74:8c:b8:f9:aa:88:fa:8a:38:8f:10:
2b:90:37:f2:ab:71:9e:20:c8:70:7f:92:e5:1c:e9:
58:59:f8:dc:52:70:2e:d1:d8:d9:d3:97:e3:52:2a:
0b:e3:8d:0a:ab:a1:30:3c:33:8d:d7:5a:5c:0d:53:
45:f0:c2:88:46:44:e7:a7:2d:0c:4e:a8:05:eb:b4:
91:35:7d:74:76:52:d7:12:cf:9d:9b:0a:c5:aa:06:
1a:52:3a:f9:67:75:4e:ba:0d:bf:46:c6:fd:76:56:
81:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3E:67:8C:64:F4:FA:04:83:FA:B2:94:72:23:92:01:88:AC:74:02
X509v3 Authority Key Identifier:
keyid:03:05:A5:43:75:BD:B3:F5:E6:31:FB:82:74:B5:61:AB:25:11:B9:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0305A54375BDB3F5E631FB8274B561AB2511B90A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/0/34352e36352e3232382e302f32322d3232203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.228.0/22
Signature Algorithm: sha256WithRSAEncryption
53:10:bf:a2:9e:6e:83:13:6c:0b:09:dc:d7:07:79:48:d1:30:
0c:d3:0b:59:98:02:73:22:e8:92:a8:28:9e:c1:b2:f5:c2:9a:
77:e9:bf:34:43:47:3f:62:17:30:c7:dd:fc:f1:6a:90:77:a7:
c7:3c:2c:56:6a:78:c4:6d:66:d9:ea:40:bd:f3:91:59:9c:24:
69:01:d7:41:70:79:be:8a:91:93:81:7d:79:be:2f:de:5d:4c:
7a:51:d8:db:8d:f4:41:af:a2:20:fa:30:71:68:81:47:ab:19:
d3:33:87:0a:15:86:8e:dd:8f:d5:a4:7f:ff:c7:74:b7:97:d2:
02:f4:7c:bb:49:f3:68:75:d4:4c:43:93:4e:7f:4c:b1:3d:c7:
24:be:e3:66:4a:83:c0:62:19:73:aa:54:ff:b1:3a:59:71:0b:
4f:df:d7:7c:06:a8:a4:14:be:6d:ad:9a:92:6d:6e:e1:db:fa:
ca:2a:a5:79:19:b8:b3:e1:be:03:37:52:bc:5f:de:c9:15:73:
3f:ec:7b:79:34:1a:20:8b:22:a7:60:6e:f2:37:6c:9f:1a:39:
e0:bc:2a:34:69:84:70:70:93:96:53:0d:be:23:04:eb:8b:d9:
5e:62:59:34:dd:d6:82:51:d1:12:f8:38:4a:58:f8:3d:78:a2:
cc:ec:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 21:20:55 2025 by rpki-client