Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32342d3234203d3e20323638353633.roa
File: 34352e3136332e3136382e302f32342d3234203d3e20323638353633.roa (raw, json)
Hash identifier: gojF+5xHNOnEKpKjqvWAAmbT8xExpEX8NFqpgwp0um4=
Subject key identifier: 28:5F:C8:7E:F7:20:D9:01:8D:16:FE:2F:55:AF:43:02:75:83:71:AF
Certificate issuer: /CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
Certificate serial: 7DEA3AB252F15C8D86B974355FAD7FDDB27313EC
Authority key identifier: 34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32342d3234203d3e20323638353633.roa
Signing time: Thu 11 Jul 2024 13:15:55 +0000
ROA not before: Thu 11 Jul 2024 13:10:55 +0000
ROA not after: Thu 10 Jul 2025 13:15:55 +0000
asID: 268563
IP address blocks: 45.163.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:ea:3a:b2:52:f1:5c:8d:86:b9:74:35:5f:ad:7f:dd:b2:73:13:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347666AA407C3FDDD24E9F81A8D0AD40D4EB540C
Validity
Not Before: Jul 11 13:10:55 2024 GMT
Not After : Jul 10 13:15:55 2025 GMT
Subject: CN=285FC87EF720D9018D16FE2F55AF4302758371AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:cb:c5:1d:42:11:a9:0a:72:14:b3:aa:ab:
90:a6:17:8a:0c:2f:93:16:de:e6:c3:54:87:59:ba:
8d:8e:f1:df:f9:cd:04:ab:e2:96:21:d7:84:57:3a:
2d:03:14:5c:00:52:ff:9e:81:db:6b:80:81:7d:84:
a1:8f:2e:10:5a:5a:c4:fd:5e:db:ad:e2:50:1b:ca:
67:68:07:5a:9b:d1:02:cb:49:c0:8b:83:29:bc:2f:
b2:e4:cc:4d:e7:9b:93:18:38:e8:a8:d7:19:32:77:
8c:d0:a5:65:d7:99:48:99:0c:6b:97:56:38:f6:17:
a2:31:16:5f:c5:8d:1c:c1:11:77:7a:0c:b4:c2:f0:
aa:69:37:89:e9:59:f0:d0:5f:3b:24:72:fd:46:09:
36:ad:ef:35:b2:9e:16:e2:af:69:05:3c:b7:6e:8a:
1a:69:c7:13:23:8b:e0:29:ee:b4:c4:1f:aa:e1:93:
6b:6f:bf:2f:34:33:38:61:52:c4:4a:c2:39:14:56:
b1:6a:00:d8:c2:36:b4:2b:dd:de:8d:19:f1:3c:9c:
e5:ba:c8:80:43:c6:ac:25:88:5d:94:a6:8d:54:b7:
c2:c9:0b:1b:b7:7f:ae:e5:77:ec:eb:9b:49:dd:66:
81:54:5f:06:18:6a:2d:eb:dd:ae:08:bb:22:30:69:
79:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:C8:7E:F7:20:D9:01:8D:16:FE:2F:55:AF:43:02:75:83:71:AF
X509v3 Authority Key Identifier:
keyid:34:76:66:AA:40:7C:3F:DD:D2:4E:9F:81:A8:D0:AD:40:D4:EB:54:0C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/347666AA407C3FDDD24E9F81A8D0AD40D4EB540C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fnADvJuByrnFb3VdGiV4aJG5DmvV5M3RpLeLiQTWkuo/0/34352e3136332e3136382e302f32342d3234203d3e20323638353633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.163.168.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:48:a6:8b:3c:0b:29:1b:9c:23:07:f8:21:82:7f:2d:e4:ba:
ee:fd:89:0b:1b:22:8a:8f:a2:72:87:a9:3a:03:71:52:83:d3:
07:21:c0:b2:7c:09:9d:21:c5:67:ec:b2:69:4f:99:ea:7e:f1:
c1:a2:77:de:ad:dd:fc:33:16:d7:64:00:d6:dc:87:72:66:0e:
32:4c:65:46:92:4b:1b:6a:87:18:51:a7:30:64:de:5a:72:6a:
5c:8c:42:6a:e8:55:b9:68:fe:1b:19:9e:31:96:93:07:bd:1e:
57:80:b0:cf:fb:aa:8d:a4:c7:36:ac:b1:c8:c0:6e:c5:00:bb:
8b:18:fa:db:aa:39:b6:56:7e:aa:d6:a4:58:ad:e2:d4:de:0c:
d9:6c:b3:26:d7:b7:4c:44:de:aa:c8:ac:aa:a2:34:49:34:87:
0c:55:53:27:66:7e:55:a0:5b:c1:d3:d6:a7:15:32:b5:8f:89:
e9:00:42:ff:fa:3b:d1:7f:ba:f1:33:fe:30:c6:17:92:0c:0d:
e8:f4:d4:00:7f:9a:68:e8:d0:52:03:c6:3c:b5:6a:f8:fa:57:
c8:93:75:fa:1a:da:18:f8:d0:1e:e6:09:39:43:22:ce:3d:57:
c1:27:94:eb:dd:0c:e1:c5:39:8e:73:0f:03:12:e5:d8:37:dc:
85:cb:b4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:58 2025 by rpki-client