Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
File: 34352e36352e3133302e302f32342d3234203d3e20323636353238.roa (raw, json)
Hash identifier: pMaNI7ac5KTlp+Xom+/FPhN+Bg62pD+Xm8ipQLgm6po=
Subject key identifier: 2C:C5:E5:68:95:46:94:65:B7:0F:DD:34:B8:67:CA:A9:26:51:26:A5
Certificate issuer: /CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Certificate serial: 63A6BCB6FDFC6035EC965DD2BA3A8DDB1927F552
Authority key identifier: C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
Signing time: Tue 09 Jan 2024 11:37:00 +0000
ROA not before: Tue 09 Jan 2024 11:32:00 +0000
ROA not after: Tue 07 Jan 2025 11:37:00 +0000
asID: 266528
IP address blocks: 45.65.130.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a6:bc:b6:fd:fc:60:35:ec:96:5d:d2:ba:3a:8d:db:19:27:f5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C89720E3719923B2D8B06EF8F0B3C59247D69AF1
Validity
Not Before: Jan 9 11:32:00 2024 GMT
Not After : Jan 7 11:37:00 2025 GMT
Subject: CN=2CC5E56895469465B70FDD34B867CAA9265126A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f0:3a:7f:e4:f5:2c:e6:9a:ee:87:24:84:88:
7a:db:40:8d:59:93:7d:d1:62:d9:06:af:2c:fa:fd:
73:bf:96:4e:34:bb:64:ef:20:2b:c3:29:aa:5b:9f:
35:95:8c:05:29:59:b8:e6:03:5d:d4:63:86:d2:7e:
a4:66:27:58:45:e9:e1:fb:58:a0:dd:13:b3:43:cf:
83:41:37:d8:d1:15:78:63:72:b0:46:50:9c:fc:e9:
dd:8e:02:3f:9f:45:71:8e:f4:fc:f9:b2:90:92:b1:
d2:e3:8c:cf:30:ea:b4:43:25:36:0e:4c:ef:d8:31:
13:fa:2e:95:29:16:b0:b3:8a:1d:15:ab:c5:92:97:
c5:d6:58:68:9e:f1:91:39:08:01:bc:da:13:9b:cb:
ed:47:df:97:c2:c4:99:93:e3:51:3b:10:60:92:46:
97:e7:43:98:33:53:b6:d2:cc:81:54:86:d6:3e:e2:
0e:8f:f5:f3:c5:07:6f:f7:b3:49:73:2e:be:74:a2:
37:ae:c0:1d:66:85:b3:e3:7b:bd:5a:14:f1:1f:fd:
e4:74:88:23:30:9d:7d:a0:a4:d6:02:dc:be:c2:17:
b5:95:10:37:b5:37:dc:58:d4:6c:c6:60:71:46:71:
f3:61:68:a7:42:56:0e:a8:ce:e9:05:d1:6f:5c:aa:
f7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:E5:68:95:46:94:65:B7:0F:DD:34:B8:67:CA:A9:26:51:26:A5
X509v3 Authority Key Identifier:
keyid:C8:97:20:E3:71:99:23:B2:D8:B0:6E:F8:F0:B3:C5:92:47:D6:9A:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C89720E3719923B2D8B06EF8F0B3C59247D69AF1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BrN5eXT2MUF5FvMmhBcnCDjHvPmbFbkmkWxMASo7u2w2/0/34352e36352e3133302e302f32342d3234203d3e20323636353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.130.0/24
Signature Algorithm: sha256WithRSAEncryption
84:8d:d4:58:22:85:09:32:91:f0:7d:19:3d:a8:3b:64:fc:43:
13:29:ee:45:19:17:d8:93:1d:9a:d1:f8:ac:ae:4c:03:88:57:
92:a1:3e:83:77:21:e1:80:d9:83:cc:68:12:e9:1b:b8:4e:7f:
69:a4:d1:1d:83:51:84:51:17:35:7c:19:0a:58:f7:ca:e7:21:
7e:21:1e:51:f0:51:2a:9a:66:93:1a:46:70:9b:c5:dc:f6:cf:
ea:f0:f9:69:cc:a9:11:ac:f4:d4:22:fc:9d:b7:49:4c:5a:a0:
30:27:37:48:f0:b1:55:0b:e2:49:65:1f:8c:6f:0a:ff:c1:b7:
df:06:e1:6e:40:1d:9f:ae:f3:84:de:e1:7b:a3:8c:e7:f9:f2:
01:28:c9:a7:80:53:4b:db:10:66:20:18:e2:58:20:b6:3c:9b:
ea:55:a4:8e:b8:ab:57:7c:1b:af:a6:e9:bf:d8:10:35:4f:cc:
7b:bb:b7:e3:b2:3e:e3:0a:42:27:ce:8d:13:7a:68:a7:91:3e:
63:1c:76:05:42:97:aa:9c:41:58:93:3c:7d:f8:94:bf:e4:b4:
db:69:1c:5b:84:4e:92:a3:da:af:1c:d5:57:4b:1c:f3:94:65:
60:9e:87:7b:49:c7:26:f6:69:e6:f0:7d:83:ac:60:2d:1e:83:
a6:1e:75:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:48 2025 by rpki-client