Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32342e302f32322d3234203d3e20323638313833.roa
File: 34352e3137312e32342e302f32322d3234203d3e20323638313833.roa (raw, json)
Hash identifier: NIimK3UfJvMJc3ikMu2zCHwmX1547V+1vagAWLQ13dA=
Subject key identifier: 8F:B9:3A:A3:CD:35:8C:4E:3E:1A:0B:7B:5D:7C:57:6C:CC:9F:34:1D
Certificate issuer: /CN=86806D9BD12A677347ED32D286F9803B86B05A33
Certificate serial: 34D82B842C517F226729E18FAA844DDFCC0BD298
Authority key identifier: 86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32342e302f32322d3234203d3e20323638313833.roa
Signing time: Thu 07 Mar 2024 16:47:36 +0000
ROA not before: Thu 07 Mar 2024 16:42:36 +0000
ROA not after: Thu 06 Mar 2025 16:47:36 +0000
asID: 268183
IP address blocks: 45.171.24.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:d8:2b:84:2c:51:7f:22:67:29:e1:8f:aa:84:4d:df:cc:0b:d2:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86806D9BD12A677347ED32D286F9803B86B05A33
Validity
Not Before: Mar 7 16:42:36 2024 GMT
Not After : Mar 6 16:47:36 2025 GMT
Subject: CN=8FB93AA3CD358C4E3E1A0B7B5D7C576CCC9F341D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:23:86:cc:6b:a2:23:90:4a:40:40:91:92:
90:71:be:56:0b:5c:67:22:88:5e:e2:5a:f1:d9:10:
4c:d0:73:ca:97:dd:38:24:7f:4a:f7:ae:5d:4c:f1:
1d:dd:34:63:c0:d2:98:79:25:bf:54:f0:a6:36:ff:
5d:56:5a:ae:92:1e:3b:88:87:33:5d:62:c2:6d:6a:
60:11:61:32:cf:8d:09:18:4a:91:b7:67:e4:f2:0b:
92:52:ea:6b:89:39:46:95:2a:b9:83:17:e2:e0:45:
0f:45:d7:02:de:8c:b7:18:35:53:c1:20:98:ee:2a:
98:21:86:28:9c:47:08:67:c8:4e:0a:af:00:67:a0:
85:6c:1f:06:11:05:29:71:aa:e1:d4:f8:c3:4b:c3:
4d:76:8a:c9:c5:b2:b3:51:e0:c0:c2:31:71:be:ef:
9e:2a:f6:d0:d4:ca:d7:89:b4:4e:69:67:e2:20:d3:
2d:4f:ae:56:66:21:72:bf:15:16:35:72:d1:ac:ca:
a2:db:19:88:dc:44:21:d0:9c:d9:bc:87:3e:31:40:
05:5c:82:d5:fc:17:d3:97:3a:00:91:e6:7d:66:a3:
75:88:5f:fd:7b:9e:fa:d9:d2:9c:91:8d:1d:ad:cf:
dc:9d:67:cc:1b:e5:23:af:7a:e8:80:d4:67:f3:97:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B9:3A:A3:CD:35:8C:4E:3E:1A:0B:7B:5D:7C:57:6C:CC:9F:34:1D
X509v3 Authority Key Identifier:
keyid:86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/34352e3137312e32342e302f32322d3234203d3e20323638313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.171.24.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:e0:b3:34:06:d7:37:9d:c9:77:9f:d7:91:13:77:0c:a2:b6:
70:01:73:08:bb:dd:cc:0b:0a:c0:17:a3:b7:f0:49:af:6b:cc:
5f:80:12:3a:fe:f2:06:52:e4:8b:6e:cb:20:9b:84:f9:86:5d:
bd:68:a8:d6:38:0d:1a:70:0d:ba:dc:17:49:c3:9a:57:63:6b:
c8:91:3b:21:93:1a:f3:b2:de:90:0a:5c:2e:68:42:57:2f:7d:
39:62:50:4d:89:86:be:fa:59:ea:50:15:07:96:73:6f:6e:b7:
0d:0c:8d:1a:d4:9e:90:d4:ae:61:00:38:2c:c7:1d:16:36:61:
3a:f9:12:ae:c4:26:00:2d:e9:0c:ad:d6:cc:34:18:a4:d3:e3:
ef:78:01:af:c1:c6:9a:a6:44:bf:60:5a:88:29:f0:6b:20:fc:
64:4d:9d:83:81:47:4a:fd:69:b5:19:6a:e3:16:11:a9:98:b4:
6f:96:68:11:be:2f:a1:4b:de:fe:59:0e:3a:fb:bb:1c:b7:3e:
83:98:0f:84:6c:73:a3:d7:aa:ad:19:4e:fe:1c:7e:27:72:18:
1c:5c:00:fa:8d:80:88:8b:f4:78:95:1c:49:f8:54:60:41:4b:
9c:97:16:7d:9a:b4:b3:0d:76:2c:d3:43:32:a2:0d:38:05:c0:
ca:48:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:26 2025 by rpki-client