Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3232203d3e20323639343131.roa
File: 34352e3138362e35322e302f32322d3232203d3e20323639343131.roa (raw, json)
Hash identifier: Qgi/c/H0ltlOwcbP/3t5pppAs0Y5q2BHWUrVRZCNqK8=
Subject key identifier: D2:B8:74:5E:F1:49:D5:6B:D8:95:08:2B:1E:D3:36:C3:17:B6:04:D9
Certificate issuer: /CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
Certificate serial: 7D419394DEF3218EF312654F6F43D84ADC4BDA20
Authority key identifier: 10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3232203d3e20323639343131.roa
Signing time: Wed 28 Feb 2024 01:14:27 +0000
ROA not before: Wed 28 Feb 2024 01:09:27 +0000
ROA not after: Wed 26 Feb 2025 01:14:27 +0000
asID: 269411
IP address blocks: 45.186.52.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:41:93:94:de:f3:21:8e:f3:12:65:4f:6f:43:d8:4a:dc:4b:da:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=100BA0134C785D84A913EF65B85A8B4973D0B2C5
Validity
Not Before: Feb 28 01:09:27 2024 GMT
Not After : Feb 26 01:14:27 2025 GMT
Subject: CN=D2B8745EF149D56BD895082B1ED336C317B604D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5c:99:81:90:3f:6b:63:4c:81:a4:bc:18:d0:
7a:67:69:ac:4e:b1:6c:80:b9:a4:e0:3d:ab:a7:57:
e2:07:31:cf:85:91:75:c1:21:a1:7a:ff:ad:9a:ee:
3d:c7:fa:8c:b5:f2:dd:3a:5c:50:ad:74:4d:55:ca:
2a:f3:3f:be:77:f7:41:ee:6b:5f:76:cb:fa:ab:f6:
b0:53:94:3e:30:4b:0d:cc:e3:2b:5b:36:f3:5d:df:
94:83:ec:ef:74:e1:ad:77:71:fb:1c:21:a0:ba:3d:
e8:a3:11:49:ae:58:d4:5a:a2:57:82:43:c5:4c:93:
53:16:2c:f8:46:f8:ca:1c:c5:7c:f7:63:a5:e6:2a:
fb:d6:d9:57:b5:c9:f7:55:f5:99:90:5b:66:bb:0a:
f0:e2:95:af:e6:a8:3b:4c:37:2d:f6:e0:bb:e3:33:
fe:0d:7f:ca:87:a1:f0:10:29:fc:bd:72:44:66:2e:
2f:b0:2b:43:35:f0:2c:1c:6c:a1:8d:2d:ca:a6:4b:
20:1d:f4:7d:82:97:2a:d6:da:94:9b:fd:82:87:66:
bd:c7:ff:a0:5f:41:bd:df:ba:73:5d:ab:4e:e5:63:
e6:c2:a4:74:f7:a2:95:03:a2:b9:53:90:47:ba:92:
6f:48:43:67:cd:2d:a1:3a:86:f1:d3:6c:ba:0f:db:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B8:74:5E:F1:49:D5:6B:D8:95:08:2B:1E:D3:36:C3:17:B6:04:D9
X509v3 Authority Key Identifier:
keyid:10:0B:A0:13:4C:78:5D:84:A9:13:EF:65:B8:5A:8B:49:73:D0:B2:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/100BA0134C785D84A913EF65B85A8B4973D0B2C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQfZrt9GSoS2JtBju4RiQH1qBGk8GRsDySD5r5L28QxE/0/34352e3138362e35322e302f32322d3232203d3e20323639343131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.186.52.0/22
Signature Algorithm: sha256WithRSAEncryption
9b:f9:10:dc:70:de:4e:27:b4:e9:ba:c0:2c:53:f8:bd:da:3b:
84:6c:4a:8b:45:a2:9f:73:7d:1a:0a:38:f7:be:c0:69:a8:65:
6c:b4:ed:c0:8b:81:e0:1d:c3:44:cd:f8:8d:b6:2d:22:28:f7:
9e:79:7b:16:7f:8c:be:b2:99:8e:84:6f:28:f8:eb:a7:2a:25:
a1:17:6f:6f:6b:89:14:d9:8a:62:87:7a:01:8b:c5:11:47:26:
51:e0:b9:ca:af:df:00:f2:6c:d4:3a:a9:10:7e:15:02:d4:be:
ba:8b:01:e3:c9:3a:4f:a0:56:08:0c:81:d1:52:cf:88:2d:47:
0d:58:c3:c9:53:0d:af:cb:17:b4:b6:c4:11:8c:0f:bf:63:53:
a8:72:17:cf:d2:9e:92:6e:d7:aa:7e:1f:75:b9:f1:ee:cc:39:
b1:7b:a6:42:0c:19:72:a5:1e:fb:9c:9e:4c:21:95:b8:52:65:
b9:7e:be:9d:fb:ab:89:67:ea:78:55:bb:4b:a9:c3:44:df:2c:
0d:8d:b0:88:73:bf:32:bc:88:59:00:f0:6e:25:89:b7:1f:77:
4b:41:31:43:28:7a:2e:0b:37:67:38:87:e3:85:c5:04:0e:67:
93:d2:47:04:f7:4d:50:52:8b:88:9f:7d:9b:b7:0f:3e:e6:0e:
e2:47:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:57 2025 by rpki-client