Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
File: 34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa (raw, json)
Hash identifier: iLlF1ninPEmkNcjwElnerdmDN5HhpAeMQXWSgLfB1xs=
Subject key identifier: 6A:1B:25:D6:15:DE:71:BB:F6:A6:01:A1:BB:4E:D9:E3:BC:1C:C4:BD
Certificate issuer: /CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Certificate serial: 3FA9C136374668EFF935D9E2F336C0EF8F54BF47
Authority key identifier: 21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
Signing time: Sat 31 Aug 2024 19:36:50 +0000
ROA not before: Sat 31 Aug 2024 19:31:50 +0000
ROA not after: Sat 30 Aug 2025 19:36:50 +0000
asID: 269626
IP address blocks: 45.190.108.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:a9:c1:36:37:46:68:ef:f9:35:d9:e2:f3:36:c0:ef:8f:54:bf:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC
Validity
Not Before: Aug 31 19:31:50 2024 GMT
Not After : Aug 30 19:36:50 2025 GMT
Subject: CN=6A1B25D615DE71BBF6A601A1BB4ED9E3BC1CC4BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:7d:d1:7b:dc:a1:d6:26:e6:54:a0:3b:44:
a8:ef:af:9c:04:53:6b:a3:4a:23:ca:5f:f9:08:12:
39:6d:22:0b:c9:18:f5:45:35:7e:ea:01:63:78:ba:
4a:cf:a1:cd:0b:18:1a:4e:f7:ce:da:1f:fc:8f:93:
cc:aa:c6:0d:68:09:1c:ea:2b:d8:cd:b0:82:10:14:
e4:ba:63:c0:c5:9b:75:8b:40:0c:96:a3:95:c6:62:
28:fb:41:34:f6:68:a2:f6:17:bf:1c:cd:24:02:c1:
28:e3:cf:e0:9d:84:81:b5:a9:b0:51:5d:fd:95:d1:
92:fd:fb:64:21:e9:c6:51:79:ef:ef:91:c9:fe:58:
4c:ef:ad:2f:c1:95:81:a7:ae:12:1c:d1:8c:f2:d3:
74:81:e7:90:bb:4f:90:88:c3:23:20:76:01:df:7f:
a5:7e:84:28:c4:85:c0:70:01:56:0f:7b:e8:29:a1:
5d:f0:a4:48:28:5d:12:6a:88:0e:91:e9:bd:c8:fd:
09:e7:cb:62:97:83:34:61:d7:a6:00:01:3c:fe:09:
98:ae:d1:b0:9f:42:c6:1c:ba:06:8f:47:83:65:f5:
58:63:55:d0:72:ce:84:15:8f:38:de:52:8e:c5:4e:
ee:db:19:df:8b:b9:d0:7c:52:4f:fc:96:1b:cf:c3:
e2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:1B:25:D6:15:DE:71:BB:F6:A6:01:A1:BB:4E:D9:E3:BC:1C:C4:BD
X509v3 Authority Key Identifier:
keyid:21:DD:DF:04:7A:54:2C:10:82:F6:DD:9D:17:54:EA:AE:E3:CD:0A:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21DDDF047A542C1082F6DD9D1754EAAEE3CD0ADC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AGZpxJ2Sy3vu3mb4j1oWhytG4hHFjNGGEb6QdoXpVLST/0/34352e3139302e3130382e302f32332d3233203d3e20323639363236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.190.108.0/23
Signature Algorithm: sha256WithRSAEncryption
31:76:86:55:8c:da:37:07:50:e5:9d:cb:98:d1:e8:43:be:ab:
44:4f:d1:63:70:2f:cd:44:2d:32:85:ca:cb:bb:0c:e6:f4:21:
cb:cd:7c:7c:52:3d:7e:92:8f:63:98:a5:b8:4c:fe:3c:5c:ea:
94:14:d8:6e:ff:f6:76:60:5b:c3:c3:a1:da:e8:0d:9c:a4:4e:
68:c0:bb:d5:2f:a5:b1:bc:ec:4d:f6:ef:48:b3:ab:a1:e9:e2:
66:3c:07:54:d6:cf:83:63:7a:05:da:4a:25:70:3b:12:e7:9c:
20:13:62:15:b5:7f:7a:82:15:b8:98:63:77:98:45:1e:7e:82:
a4:3b:da:b6:1a:b2:c2:e8:fd:39:b1:4c:aa:c8:40:0d:e1:24:
0e:5d:1c:69:72:95:b2:3c:26:91:89:6d:c3:c0:c7:c2:d6:29:
b6:59:88:b8:f0:82:2a:ed:8a:cb:7c:b7:ed:15:db:c3:cc:df:
b2:f3:14:71:97:b7:f4:24:61:16:16:d4:23:ae:a9:a6:59:3b:
ef:9e:be:7e:3d:2e:dd:66:0a:db:31:6a:6d:b3:fd:df:ba:e6:
aa:45:6d:a0:03:a5:b9:c6:2a:f7:b2:88:c5:00:8a:8d:5e:a2:
ca:a7:1d:4c:a7:58:3e:9f:3c:f9:d3:19:47:64:cd:e7:b4:6d:
cc:ec:9b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:27:05 2025 by rpki-client