Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa
File: 34352e37312e3132382e302f32322d3234203d3e20323637363038.roa (raw, json)
Hash identifier: CxiNjuDXGDeO4xOcDhi6ePlCH0j/B0zy+qZ0ArU8/VQ=
Subject key identifier: C9:07:04:96:DB:C4:FE:BF:1B:62:9F:F2:88:BD:EA:55:87:36:27:F4
Certificate issuer: /CN=E26E3E7776B89B74777CBD275007F950E7C388C1
Certificate serial: 6FB71ADEEFF3BD83B869FAFE48E252058F66DAEC
Authority key identifier: E2:6E:3E:77:76:B8:9B:74:77:7C:BD:27:50:07:F9:50:E7:C3:88:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa
Signing time: Sat 03 Feb 2024 14:07:17 +0000
ROA not before: Sat 03 Feb 2024 14:02:17 +0000
ROA not after: Sat 01 Feb 2025 14:07:17 +0000
asID: 267608
IP address blocks: 45.71.128.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b7:1a:de:ef:f3:bd:83:b8:69:fa:fe:48:e2:52:05:8f:66:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E26E3E7776B89B74777CBD275007F950E7C388C1
Validity
Not Before: Feb 3 14:02:17 2024 GMT
Not After : Feb 1 14:07:17 2025 GMT
Subject: CN=C9070496DBC4FEBF1B629FF288BDEA55873627F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:b9:66:fb:4f:75:ac:03:7f:fc:c7:70:2f:
d5:7f:0d:39:f9:ae:e1:bd:17:9c:12:32:66:de:ad:
73:34:67:49:d6:dc:5b:a5:06:7a:f9:23:57:88:68:
a8:03:67:fc:21:f8:ea:a2:52:dc:09:fb:dc:b1:81:
24:f4:4c:c3:14:92:39:01:2f:ea:a0:e7:43:c2:e1:
95:7e:36:06:1b:78:88:ed:e1:4f:50:54:df:6f:1f:
c5:70:9d:43:14:4b:c7:b8:fb:49:92:3f:79:a6:55:
66:92:b1:55:33:9d:31:c8:be:67:ad:d7:04:f2:c1:
92:a1:cb:33:09:6e:10:ce:fd:a1:ac:cf:2b:97:0f:
a4:cb:56:30:ca:b1:e1:5e:74:3a:64:89:7b:47:a4:
71:3e:13:63:66:80:05:03:07:ae:f0:a4:f9:b4:c7:
4b:c4:25:f9:77:ac:63:9a:f1:1a:96:ef:be:1d:67:
91:a7:fe:b8:26:25:b0:47:93:9d:5f:2d:7f:40:39:
b6:ed:52:78:c6:40:d3:e1:52:ec:ce:e2:b7:42:f5:
d8:0b:73:11:9a:39:4e:e8:ea:fe:23:69:75:7a:0a:
57:9e:0f:30:b1:54:fb:38:4b:5a:5f:c7:e3:eb:26:
4e:44:2a:b4:d8:6f:d5:1c:29:28:63:6b:fe:a8:87:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:07:04:96:DB:C4:FE:BF:1B:62:9F:F2:88:BD:EA:55:87:36:27:F4
X509v3 Authority Key Identifier:
keyid:E2:6E:3E:77:76:B8:9B:74:77:7C:BD:27:50:07:F9:50:E7:C3:88:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E26E3E7776B89B74777CBD275007F950E7C388C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Afzi3DnYwho28VDmKjRaUX53dmetK6yPwdVxDEUX9NLo/0/34352e37312e3132382e302f32322d3234203d3e20323637363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.71.128.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:59:97:8a:e1:77:d7:6a:99:f2:43:e2:bc:76:90:48:48:a3:
52:de:b8:43:ff:be:31:57:e1:75:a0:b2:6c:fc:34:6c:6d:ca:
c0:21:e5:82:4b:64:00:6c:7e:10:32:74:92:2e:b1:6a:b3:c1:
80:19:fb:60:47:40:70:81:48:04:b3:0a:61:13:c2:61:ff:09:
a2:34:2c:07:97:39:79:f1:c2:46:1c:04:fb:cc:49:73:b7:f0:
9f:cd:c0:81:40:5f:d0:a1:37:41:21:ce:cb:05:4a:9e:8c:4b:
98:3e:ca:a4:23:68:1c:9b:57:14:fe:6b:5c:ed:f0:0c:e7:a9:
ff:74:38:b8:50:0b:6c:e7:df:ae:42:82:ba:97:8e:95:ed:ef:
00:2c:1a:9a:c1:ef:29:03:4b:88:e6:a7:26:05:37:36:36:04:
26:60:59:c2:93:fe:1c:bd:4c:57:2b:b5:6d:ae:77:75:21:3f:
02:74:04:01:8e:1c:6e:7b:5a:d9:f6:e4:9c:a7:c9:fb:82:3e:
d3:94:b1:8c:27:37:02:0f:d8:22:ba:e2:f7:81:db:65:e1:bb:
fe:5a:f0:bd:df:f4:df:08:98:1f:fa:ea:c3:7d:3f:3e:1b:13:
ec:81:1a:7c:72:56:28:bd:cc:93:85:56:18:92:82:b5:db:59:
fe:1d:b0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:34 2025 by rpki-client