Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
File: 3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa (raw, json)
Hash identifier: 8m9hnHqhQnOOFn5ld+ZlxKta1CXv2GR6Xhy9vyrFgTw=
Subject key identifier: 2D:00:D5:38:07:F4:3A:1B:2E:F3:E0:A0:DE:A6:8A:E4:D4:80:B7:89
Certificate issuer: /CN=34CE853537D20533D457CD0EA7BD47D01344C870
Certificate serial: 03BA9963284B0DBE9A6E974A9D51D8D8B99F56C9
Authority key identifier: 34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
Signing time: Mon 23 Jan 2023 21:50:26 +0000
ROA not before: Mon 23 Jan 2023 21:45:26 +0000
ROA not after: Mon 22 Jan 2024 21:50:26 +0000
asID: 262509
IP address blocks: 168.121.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ba:99:63:28:4b:0d:be:9a:6e:97:4a:9d:51:d8:d8:b9:9f:56:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34CE853537D20533D457CD0EA7BD47D01344C870
Validity
Not Before: Jan 23 21:45:26 2023 GMT
Not After : Jan 22 21:50:26 2024 GMT
Subject: CN=2D00D53807F43A1B2EF3E0A0DEA68AE4D480B789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:56:a5:62:ab:b5:cc:55:39:f0:f5:3b:c3:ef:
aa:cb:5a:b8:0c:b2:80:19:dd:95:bb:57:2a:fc:1d:
fb:f6:4d:b9:58:4f:83:75:72:73:bc:2e:49:ae:e1:
39:f9:ec:ae:89:de:0d:15:22:3d:53:a9:4b:84:68:
d6:c9:1d:d9:fa:c1:8a:6b:d6:89:76:56:ad:f7:7d:
97:52:8e:bf:93:e7:ba:7d:4b:5c:6a:8a:12:50:f9:
b4:13:9a:fb:05:c0:0f:c3:4d:81:a6:21:76:22:52:
ed:81:81:a8:07:ed:61:de:65:03:fe:51:bf:c7:14:
ad:01:e1:b8:5a:a9:36:4f:00:25:3c:d5:83:88:bd:
33:5a:2d:57:4d:3d:a3:7f:b7:0a:ab:10:c8:b5:55:
32:2a:55:b7:5f:4d:7d:21:13:b2:69:73:51:96:92:
bb:66:a6:5a:01:f6:48:1f:cd:df:c5:ce:2f:5c:90:
5d:bc:c1:79:47:fc:8a:c9:87:ae:ed:c9:89:6c:38:
db:2a:a2:1e:38:e0:08:58:85:b8:93:d1:33:9f:81:
cf:e8:7c:d7:b3:54:f3:72:f3:d6:c7:0f:cf:84:96:
ae:d4:1f:32:e8:c8:2e:31:17:b1:5b:2f:db:0f:93:
f8:fd:4a:da:fa:70:42:1e:23:5c:5e:07:0f:1c:45:
ab:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:D5:38:07:F4:3A:1B:2E:F3:E0:A0:DE:A6:8A:E4:D4:80:B7:89
X509v3 Authority Key Identifier:
keyid:34:CE:85:35:37:D2:05:33:D4:57:CD:0E:A7:BD:47:D0:13:44:C8:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/34CE853537D20533D457CD0EA7BD47D01344C870.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/34CE853537D20533D457CD0EA7BD47D01344C870.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BaBZKaj3KUWNE1p8fhoyCLspn2X9pwMU7PkS2ciAonPv/1/3136382e3132312e35322e302f32322d3232203d3e20323632353039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.121.52.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:7b:dc:10:9e:d2:37:3e:cd:c1:84:56:26:a8:10:09:da:c4:
78:3e:65:dd:33:19:23:64:cb:10:e6:c9:d6:a9:54:3d:65:2a:
51:f5:18:7b:b8:c2:3d:47:51:1a:1a:fa:07:29:27:51:fd:49:
ea:58:a1:12:33:3b:e0:ef:21:6d:02:a2:1e:50:1d:e8:4f:42:
4f:89:f1:cd:f8:ec:84:99:e3:5c:dd:f0:00:98:18:72:f6:e4:
2d:ab:84:e2:76:c7:eb:2f:12:ea:9d:01:30:48:ca:51:c1:a7:
8f:e1:71:d1:b2:59:93:77:ca:c2:42:5e:b1:ea:2b:32:e6:92:
f9:6b:71:46:63:9c:34:23:a3:c0:6a:4f:c2:0d:05:8d:84:57:
df:54:4e:31:b2:fa:84:ce:19:ad:06:d9:98:95:cb:ca:cb:b2:
30:69:15:47:35:0a:4c:a9:48:8c:6a:5b:ba:fc:08:6e:62:eb:
68:32:0c:36:0d:dc:18:6f:65:92:88:50:0b:be:ec:04:72:1b:
6d:fd:05:b6:db:cc:3d:48:84:6b:db:39:6c:be:dd:95:9e:fb:
be:cf:e2:e2:72:0b:fa:8e:49:a7:1d:b0:af:24:f7:2a:7a:a4:
48:3b:98:6b:c6:39:22:8e:ad:b5:2a:ec:88:10:8e:17:07:8e:
06:ce:4e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:18:16 2025 by rpki-client