Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e38382e302f32342d3234203d3e20323639353237.roa
File: 34352e3138382e38382e302f32342d3234203d3e20323639353237.roa (raw, json)
Hash identifier: apgEwuuv63SzZh8FSgVqpift5jCbvUw/EH+eeLW6K8A=
Subject key identifier: 33:5E:69:C8:B8:27:9B:70:40:27:43:60:FB:7A:A1:FF:F6:B9:93:F6
Certificate issuer: /CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
Certificate serial: 47CA16933EF0D4A1F288455EED1A3BA9F9F6F67F
Authority key identifier: 7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e38382e302f32342d3234203d3e20323639353237.roa
Signing time: Tue 09 Jan 2024 19:02:49 +0000
ROA not before: Tue 09 Jan 2024 18:57:49 +0000
ROA not after: Tue 07 Jan 2025 19:02:49 +0000
asID: 269527
IP address blocks: 45.188.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:ca:16:93:3e:f0:d4:a1:f2:88:45:5e:ed:1a:3b:a9:f9:f6:f6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE
Validity
Not Before: Jan 9 18:57:49 2024 GMT
Not After : Jan 7 19:02:49 2025 GMT
Subject: CN=335E69C8B8279B7040274360FB7AA1FFF6B993F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:77:e7:28:4b:f2:bb:cd:85:07:41:51:5b:08:
a2:e8:06:c9:55:59:f2:ac:b6:b4:8b:b5:5e:2e:6e:
cd:25:47:b5:3b:d3:05:60:ee:b3:eb:e6:b7:29:70:
76:de:25:23:df:35:e6:13:00:b0:5a:17:97:81:1b:
15:8b:47:a9:cd:2c:16:7e:1b:b0:56:92:72:13:9f:
a9:78:0e:76:e7:29:6b:0c:f8:44:b4:cf:c4:5b:04:
35:da:76:4e:61:16:1f:5c:5e:ca:7a:f3:f9:c8:d9:
e4:91:a2:b2:6a:2d:11:ec:89:c9:b9:6c:76:fe:0b:
9e:f1:c4:94:2e:4f:87:f5:ed:03:dc:86:db:28:86:
ae:51:07:cf:33:b5:41:d2:e8:2b:9d:bc:c1:6a:c8:
ba:d4:a6:a6:3e:53:70:32:b6:14:6f:3c:21:b3:a1:
c2:11:8a:8f:a1:c8:39:82:bd:36:8f:98:2f:26:86:
dc:3f:30:b0:f1:25:7f:95:40:b6:9f:f1:33:22:cd:
8b:81:f0:8d:96:0e:57:a0:94:d8:45:1a:13:10:79:
a9:ad:05:0b:b6:1f:f1:bc:ee:10:17:2a:3c:22:51:
6b:92:53:2f:3f:4e:93:9c:b4:1e:b4:2b:4e:7c:e0:
df:67:f6:41:e6:f2:e6:56:dd:b4:e4:42:8d:a0:4a:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5E:69:C8:B8:27:9B:70:40:27:43:60:FB:7A:A1:FF:F6:B9:93:F6
X509v3 Authority Key Identifier:
keyid:7D:24:FD:2D:59:F7:DC:84:36:8B:4E:D4:F1:53:DC:37:47:A7:6D:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D24FD2D59F7DC84368B4ED4F153DC3747A76DCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B8qcsaJVHfBteNZKt3heV7iK9oLLgdHM8zJrA7VnqruF/0/34352e3138382e38382e302f32342d3234203d3e20323639353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.88.0/24
Signature Algorithm: sha256WithRSAEncryption
48:66:5d:f5:0e:c0:8c:22:a7:0c:af:c9:7e:7f:3b:70:68:35:
49:c2:28:1c:b6:0a:51:6d:9f:6f:69:b2:63:14:6e:c8:7a:23:
2d:53:c4:7c:f7:1d:1a:79:23:b5:9b:20:7a:f0:46:05:29:f6:
ba:dc:fc:78:cf:46:1d:b8:e5:02:2d:31:76:88:6c:ef:e3:c4:
09:b5:f8:e1:ed:da:3c:af:3c:cd:18:de:47:e3:99:f4:d9:d1:
60:4f:84:29:52:fd:c0:4f:98:72:b9:8f:bc:5f:5a:f1:a0:a2:
e0:d7:7d:45:01:63:a4:66:05:d8:c8:7d:2c:83:7d:36:fe:71:
5a:fb:04:62:17:58:93:02:39:06:ce:f5:ee:f7:84:fc:40:6d:
53:77:2f:c7:0d:01:b5:be:fd:e2:38:3e:4f:5d:7f:ff:d7:0e:
73:bf:14:98:76:74:9d:5a:ba:f7:89:9a:40:10:c9:cc:0d:31:
64:e3:a3:31:87:b6:77:f8:7e:65:22:c4:15:58:b1:c6:98:44:
98:42:01:50:05:c3:aa:5c:35:d2:34:2f:89:19:fe:f9:2e:dd:
17:db:27:3d:8c:60:9a:1e:05:eb:da:50:05:ab:23:5c:04:69:
6e:33:19:71:e8:00:6c:5c:5e:64:19:92:b9:1f:fa:ef:a3:49:
17:52:8e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:42 2025 by rpki-client