Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa
File: 34352e36352e3132392e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier: QbSAjt68+JvaFUI4ghusLrOdJ7gX2G1IC4Qjscfb8oA=
Subject key identifier: 20:C8:55:B8:E9:DF:E8:99:5B:38:59:A0:CB:CC:63:B2:5F:3F:13:8F
Certificate issuer: /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial: 0E9874B7EC7E1B46819925ACD5845FB5D3B2D7AE
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa
Signing time: Tue 09 Jan 2024 11:36:59 +0000
ROA not before: Tue 09 Jan 2024 11:31:59 +0000
ROA not after: Tue 07 Jan 2025 11:36:59 +0000
asID: 266528
IP address blocks: 45.65.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:98:74:b7:ec:7e:1b:46:81:99:25:ac:d5:84:5f:b5:d3:b2:d7:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Validity
Not Before: Jan 9 11:31:59 2024 GMT
Not After : Jan 7 11:36:59 2025 GMT
Subject: CN=20C855B8E9DFE8995B3859A0CBCC63B25F3F138F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:e2:99:50:d3:c8:c8:7b:28:a0:09:15:d5:
fd:38:d3:95:d2:c3:df:a8:cd:b5:a5:49:ae:84:f5:
55:fe:1f:ed:fe:c2:82:91:b0:09:dd:02:56:6c:39:
29:06:9c:9f:22:95:b5:57:84:85:66:f8:0e:ad:0c:
76:11:ef:4b:25:0d:b6:ad:de:6a:98:30:c1:3f:f2:
16:36:7a:07:cb:82:dc:fd:72:83:47:98:43:89:7b:
24:79:22:16:fc:7d:6f:6a:b1:c9:cf:ac:e6:68:22:
6b:7a:7f:49:75:ed:d0:d6:70:22:7a:71:42:06:6b:
13:59:24:a1:82:1e:32:e9:10:f0:8c:c8:85:96:12:
cb:99:f3:b7:ba:39:8a:48:91:90:4b:24:a2:e4:5f:
cd:9a:4e:06:cc:65:7a:c1:ba:b5:c0:1d:b0:2f:b5:
31:1b:60:39:80:da:1c:00:d7:0b:a2:78:96:40:b4:
e2:c7:43:65:a1:ae:ea:6b:40:5a:ad:06:c9:33:4c:
ec:d3:4f:bf:c6:e3:41:29:9f:47:d3:ba:c2:3a:19:
3a:da:2c:99:28:d8:f0:b4:f7:22:30:cc:29:9d:cb:
43:6c:e4:ff:41:42:73:08:a3:57:90:38:3a:ca:d4:
51:e2:10:c4:53:02:01:94:87:a5:c6:bf:f2:59:47:
26:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C8:55:B8:E9:DF:E8:99:5B:38:59:A0:CB:CC:63:B2:5F:3F:13:8F
X509v3 Authority Key Identifier:
keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3132392e302f32342d3234203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.129.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ea:8b:9b:cf:17:2a:5f:40:13:1b:4f:f2:ea:ea:c4:2f:22:
a4:b1:62:de:d4:66:0a:bb:95:47:52:ec:b2:b8:7a:95:f9:47:
35:aa:02:e1:7c:58:8a:c7:c2:1a:d3:2e:56:6e:4a:f6:40:24:
e5:48:15:80:92:31:a6:8c:93:34:66:1d:5a:11:7a:4a:af:4a:
f9:73:e1:ca:3c:e1:1e:0a:db:9d:0f:cf:8e:f4:4e:e1:f6:ed:
2f:09:fb:08:96:32:2b:9a:11:35:a6:a4:39:df:a3:8b:a1:06:
10:8b:47:db:bb:e9:be:99:5a:d7:4d:49:25:78:b5:9c:7a:00:
a0:11:a0:c3:00:d1:7f:d3:87:50:7c:ad:83:31:db:ed:87:93:
e3:6b:b6:3d:2f:b9:f2:75:5c:29:fd:54:68:3d:5b:65:4d:80:
97:05:86:5a:3a:71:4d:63:cb:3b:a5:bb:c6:7e:63:64:11:ae:
2f:6c:41:fb:b2:a0:96:52:0a:7f:45:86:d5:37:75:4e:7e:12:
14:56:b9:f4:52:bc:ba:81:e9:18:ff:e7:67:0a:27:dd:09:6e:
17:88:73:76:bd:54:f3:65:7b:e9:8a:8d:53:ea:b9:c6:44:52:
c8:8a:1a:51:57:e8:ee:b0:cc:86:f9:40:2d:d0:dd:30:fc:4e:
a0:1b:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:32 2025 by rpki-client