Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/34352e3136352e31322e302f32322d3232203d3e20323638363633.roa
File: 34352e3136352e31322e302f32322d3232203d3e20323638363633.roa (raw, json)
Hash identifier: e/2NFKAmRSbt/GA7KqSp8M8j1Y1BHyEqZPSh0aMFk7g=
Subject key identifier: 74:73:F3:93:92:09:27:6B:CC:20:AD:A7:BA:57:F7:4B:E7:3A:EF:48
Certificate issuer: /CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
Certificate serial: 062B0C7FA6C5FB16A908CD7AA1BAA719932B0B9D
Authority key identifier: 8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/34352e3136352e31322e302f32322d3232203d3e20323638363633.roa
Signing time: Mon 23 Sep 2024 13:32:44 +0000
ROA not before: Mon 23 Sep 2024 13:27:44 +0000
ROA not after: Mon 22 Sep 2025 13:32:44 +0000
asID: 268663
IP address blocks: 45.165.12.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:2b:0c:7f:a6:c5:fb:16:a9:08:cd:7a:a1:ba:a7:19:93:2b:0b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CE24CEB6B14017A014B1CFE81BDC99AA707B18A
Validity
Not Before: Sep 23 13:27:44 2024 GMT
Not After : Sep 22 13:32:44 2025 GMT
Subject: CN=7473F3939209276BCC20ADA7BA57F74BE73AEF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d9:4e:69:0a:80:8b:da:4b:af:aa:6a:e3:e7:
c3:71:20:d0:56:73:66:d4:1e:c2:d2:ef:f9:8e:1f:
f9:ba:b3:bd:4a:6f:03:40:eb:9a:c7:1d:49:7a:be:
b5:26:f0:11:21:7d:3f:d7:ef:5d:6a:c7:b0:e1:1c:
d8:cb:92:64:8a:9d:e4:fc:e9:d1:47:b8:dd:74:58:
ba:be:7d:14:c9:b6:b8:29:5d:30:75:a8:0c:9e:38:
14:58:fa:e3:35:95:7f:2f:6a:05:72:07:b1:69:b0:
4b:90:d7:da:af:df:fd:da:5d:1a:28:d0:69:c1:1f:
cf:93:0d:07:ab:6a:e2:4c:39:92:f6:20:38:3b:98:
96:9f:63:89:35:fe:79:6e:fa:13:8b:b3:60:5a:18:
76:c8:94:b1:90:4d:48:93:0e:80:bb:66:2e:c6:eb:
28:8f:60:a6:8d:cc:9a:60:a7:87:45:8f:e2:aa:29:
89:40:46:a6:7b:87:82:7b:7a:1a:8c:5a:58:55:0b:
a6:1f:70:64:01:24:0d:8a:9d:0a:9b:f4:64:9a:51:
1e:a3:99:e1:28:fd:24:6f:09:cd:e8:9e:a9:c8:e5:
58:1c:03:0a:2f:ca:76:5a:3c:e4:b7:1b:89:43:db:
b8:13:8a:88:33:e2:cc:5b:39:cb:0d:c1:44:3e:9b:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:73:F3:93:92:09:27:6B:CC:20:AD:A7:BA:57:F7:4B:E7:3A:EF:48
X509v3 Authority Key Identifier:
keyid:8C:E2:4C:EB:6B:14:01:7A:01:4B:1C:FE:81:BD:C9:9A:A7:07:B1:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE24CEB6B14017A014B1CFE81BDC99AA707B18A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CUa3YCVFk5t5LUht2UpJPcahxoktFhKWG7DRmDn5y7Aj/0/34352e3136352e31322e302f32322d3232203d3e20323638363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.12.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:6f:b5:c1:46:71:ae:8f:5f:85:c6:7e:ad:df:2d:ae:10:12:
ad:90:f0:6b:a6:f7:e7:22:a1:21:f5:3f:c5:21:8a:9d:8c:a7:
7c:68:b6:a7:04:d5:04:e0:dd:1e:1c:ee:5a:ba:9c:6a:e0:a1:
e4:3a:cd:67:56:6f:5b:46:52:d9:af:af:b7:88:2c:56:d6:1c:
c0:f6:bd:97:14:29:4d:56:76:0c:0f:7a:36:89:95:cd:93:c7:
b9:fb:18:29:07:e1:f3:88:39:60:b8:12:4a:64:89:cc:24:42:
db:62:d8:8a:6c:df:07:42:9f:a5:fb:27:a1:3b:66:26:c2:03:
08:e9:90:17:04:79:f7:d6:dd:0d:91:09:41:9c:e9:ed:5c:ea:
93:4d:13:63:ed:b5:5e:5b:c4:a1:da:1c:1d:03:be:7c:9b:51:
82:a5:b2:41:c5:d1:1e:49:f8:05:c4:be:e2:63:8c:77:c5:b5:
4b:20:df:98:43:fa:27:ab:8c:11:d1:b3:92:96:34:c1:47:27:
c1:7e:be:65:b3:4c:d8:b9:6d:05:bd:80:a2:44:51:2f:4d:de:
71:95:ee:b5:bd:22:88:e5:8a:9b:e6:eb:32:7d:bb:3a:02:77:
71:e9:cf:0e:f1:4a:e6:f8:b3:5d:29:c9:d2:d6:fc:91:7d:e7:
6c:69:72:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:19 2025 by rpki-client