Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233382e302f32342d3234203d3e20323637313736.roa
File: 34352e3233302e3233382e302f32342d3234203d3e20323637313736.roa (raw, json)
Hash identifier: Z8Q9gGqqGgJb+Jx2QIgc9cZ2Y51Xr5kXEOtMDgAiu1w=
Subject key identifier: B2:1C:75:9A:BC:98:59:BD:F4:9C:7B:71:88:E3:E4:3E:4B:5C:8A:CC
Certificate issuer: /CN=5EA554640E24C8A21AF8DE1A497FDC6F9592F374
Certificate serial: 3F728F3B0952626E67B2F39B1D3407EB70B14864
Authority key identifier: 5E:A5:54:64:0E:24:C8:A2:1A:F8:DE:1A:49:7F:DC:6F:95:92:F3:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233382e302f32342d3234203d3e20323637313736.roa
Signing time: Wed 18 Oct 2023 17:45:10 +0000
ROA not before: Wed 18 Oct 2023 17:40:10 +0000
ROA not after: Wed 16 Oct 2024 17:45:10 +0000
asID: 267176
IP address blocks: 45.230.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:72:8f:3b:09:52:62:6e:67:b2:f3:9b:1d:34:07:eb:70:b1:48:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5EA554640E24C8A21AF8DE1A497FDC6F9592F374
Validity
Not Before: Oct 18 17:40:10 2023 GMT
Not After : Oct 16 17:45:10 2024 GMT
Subject: CN=B21C759ABC9859BDF49C7B7188E3E43E4B5C8ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:6b:5d:d1:a3:3c:8a:22:63:9b:0e:c7:7a:03:
b7:51:f3:f2:31:f2:a5:e6:9b:d5:7d:e2:ab:1e:1f:
cc:f4:c6:f5:9f:3a:2a:ef:c0:a6:d7:3f:45:61:50:
61:d5:d7:53:d4:3b:30:d8:32:a4:70:2e:81:cc:66:
51:6c:36:e6:07:90:51:e7:62:96:13:ab:3f:22:f3:
ee:17:dc:a8:fb:3b:fa:01:04:cf:4c:80:4d:09:f3:
84:0b:8b:e9:8d:26:98:10:65:4d:15:4b:c9:a4:0c:
25:22:cd:5f:f4:05:5e:3b:99:d4:2e:40:18:e5:35:
40:06:90:c8:68:9c:df:f9:cf:50:ed:73:c9:0f:20:
fd:11:42:ed:88:40:05:03:0f:db:44:7b:d3:b0:bc:
65:06:aa:2b:e5:74:10:47:50:31:44:83:31:50:25:
61:34:0c:73:17:f2:aa:fd:d2:87:f0:dd:13:0c:c7:
21:0d:9d:7c:0f:bc:6f:8e:f5:75:16:35:01:21:9e:
67:e7:d2:0f:e9:60:ca:78:4a:04:9e:e5:22:f2:ce:
2e:f7:6e:9b:5e:cb:af:43:d4:03:ca:bf:79:1c:e5:
b0:50:04:5b:24:0c:f4:81:c6:9e:1b:8f:c1:9f:89:
9e:12:55:24:dd:af:f3:21:11:be:10:78:bc:35:7f:
a2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1C:75:9A:BC:98:59:BD:F4:9C:7B:71:88:E3:E4:3E:4B:5C:8A:CC
X509v3 Authority Key Identifier:
keyid:5E:A5:54:64:0E:24:C8:A2:1A:F8:DE:1A:49:7F:DC:6F:95:92:F3:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5EA554640E24C8A21AF8DE1A497FDC6F9592F374.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Br1rc3Nra73up1jR68Mqad1C4FGXYznQDJoxvg2k3i5c/0/34352e3233302e3233382e302f32342d3234203d3e20323637313736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.230.238.0/24
Signature Algorithm: sha256WithRSAEncryption
29:d9:7e:c3:47:d5:5f:8a:e2:1d:69:13:f1:05:19:01:2e:fa:
b8:f9:07:ac:5b:02:0f:e4:f5:82:36:1d:7c:3b:f4:3d:43:31:
43:c3:eb:3f:73:82:a0:10:de:94:c2:9d:b1:00:8d:5d:c5:23:
2c:0b:a3:15:a7:ae:5d:aa:cb:6a:32:75:ec:76:f0:27:c1:d5:
cd:3b:1a:6d:af:ac:65:fc:37:2f:57:9c:aa:45:8a:74:31:82:
ac:8e:3f:68:27:e9:ee:b8:4e:a0:61:6a:e5:7e:44:fe:bc:70:
83:76:da:12:76:c4:2a:3a:5c:02:c0:84:d9:a5:77:0f:96:66:
ab:54:b2:94:e5:ef:e7:6f:82:6b:33:20:b2:66:fd:43:50:64:
9a:28:1b:df:60:62:f5:fe:ac:2e:f1:35:2e:7c:44:8e:82:9e:
df:4c:2f:99:49:b0:73:48:01:49:4d:a8:1a:b5:20:5b:d0:85:
13:1c:09:0c:ae:cb:fe:c8:3f:34:13:79:ee:52:e1:f0:1f:e2:
6b:1a:b4:7a:10:71:d8:b0:35:64:d7:eb:91:47:d0:5d:8d:cb:
ad:ac:25:66:7e:b9:2a:59:4d:32:1f:c0:dc:f7:0a:ff:3f:54:
d9:4b:c7:70:b4:3c:41:5c:c7:18:b6:99:53:56:bb:5e:f6:bd:
db:51:b2:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:46:57 2025 by rpki-client