Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/34352e3233362e3231362e302f32322d3234203d3e20323638323437.roa
File: 34352e3233362e3231362e302f32322d3234203d3e20323638323437.roa (raw, json)
Hash identifier: /qdnTiMxHUC6aG4r4h2QH9Vx3Ptb2S1nduNijQgHTqc=
Subject key identifier: BB:C6:77:1D:6B:14:7D:76:A5:0C:98:89:F5:35:0A:A7:B9:0C:53:E1
Certificate issuer: /CN=850B9B1F006AF477CB0A41524901057E62779AF9
Certificate serial: 3C62C907320062C197C6A88AE49528F90E77FBE2
Authority key identifier: 85:0B:9B:1F:00:6A:F4:77:CB:0A:41:52:49:01:05:7E:62:77:9A:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/850B9B1F006AF477CB0A41524901057E62779AF9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/34352e3233362e3231362e302f32322d3234203d3e20323638323437.roa
Signing time: Mon 21 Oct 2024 18:30:45 +0000
ROA not before: Mon 21 Oct 2024 18:25:45 +0000
ROA not after: Mon 20 Oct 2025 18:30:45 +0000
asID: 268247
IP address blocks: 45.236.216.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:62:c9:07:32:00:62:c1:97:c6:a8:8a:e4:95:28:f9:0e:77:fb:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=850B9B1F006AF477CB0A41524901057E62779AF9
Validity
Not Before: Oct 21 18:25:45 2024 GMT
Not After : Oct 20 18:30:45 2025 GMT
Subject: CN=BBC6771D6B147D76A50C9889F5350AA7B90C53E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:cf:d4:a0:b3:10:e1:05:eb:a8:93:9d:2d:41:
df:4e:a7:df:05:0d:3f:03:0a:4d:a3:42:0a:53:13:
00:f1:6a:39:37:48:e3:08:8c:94:3b:55:82:6b:d3:
95:83:1a:d9:8d:dc:40:90:c1:ed:c4:16:8d:94:fe:
f1:5c:f1:bc:99:0d:8d:f8:6f:62:86:3d:25:d4:8d:
63:c9:a0:b3:ab:86:2e:cc:c7:3d:ae:42:58:60:33:
4b:75:fe:d5:7e:94:1b:8d:cb:8b:1c:a8:4f:16:b0:
23:2a:a2:1d:95:f5:1d:ce:79:e9:80:30:e9:1e:1f:
0b:e3:23:c3:5c:71:4d:73:0d:7d:07:7f:79:0c:f7:
c0:b0:34:40:b9:5d:f5:1b:2f:78:99:18:dd:32:28:
a3:8b:0c:4e:c5:ef:ba:6a:92:fe:44:40:57:fa:4d:
32:67:f4:4e:dd:cb:f8:a4:0e:4f:4e:7e:98:28:ff:
e0:e4:77:f2:08:f9:c5:6a:51:2d:d4:9e:a0:0e:79:
1b:61:0c:9f:4a:82:d9:16:27:a9:21:2c:a6:07:5d:
0a:63:3a:7d:82:ac:6f:fc:d9:2f:15:b8:ea:8b:db:
a7:6a:8d:1a:46:ad:9b:87:f7:2b:63:72:5c:bf:56:
48:13:2b:28:15:a5:f0:b5:71:f1:56:ee:21:a4:64:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C6:77:1D:6B:14:7D:76:A5:0C:98:89:F5:35:0A:A7:B9:0C:53:E1
X509v3 Authority Key Identifier:
keyid:85:0B:9B:1F:00:6A:F4:77:CB:0A:41:52:49:01:05:7E:62:77:9A:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/850B9B1F006AF477CB0A41524901057E62779AF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/850B9B1F006AF477CB0A41524901057E62779AF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZzVeKnHhndpX8K5GLwScBqafav2Z5mL9vc44MdtQAq5/0/34352e3233362e3231362e302f32322d3234203d3e20323638323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.216.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:6e:0f:97:7c:b0:c7:93:a4:f5:0c:e7:98:16:4b:74:60:2f:
1d:7d:5e:cd:bc:32:64:14:81:f6:4e:74:f2:5d:8c:68:6e:c5:
0f:27:3e:d6:3c:ef:e5:f1:d9:36:57:2a:33:18:05:5e:9b:14:
14:42:76:fc:7c:98:06:28:3b:10:f2:f3:0c:38:52:b0:ea:5c:
6c:68:39:a9:0d:6f:5a:82:a3:b2:ba:b7:f9:0f:3e:19:a9:dc:
04:e8:42:40:15:c2:30:d5:67:9f:75:8a:02:7c:aa:ec:a1:20:
f5:6d:48:f0:0b:d6:88:ed:0c:65:f4:11:51:8e:97:04:ff:e9:
2e:e2:e2:c3:de:02:7a:60:c0:2a:64:80:8e:3c:e0:bf:2c:6b:
7e:63:e7:66:8c:a1:42:49:ff:af:4f:32:19:fa:c2:59:f2:60:
a5:16:37:57:67:35:e3:52:9c:8f:c3:55:44:fe:71:e4:35:a1:
b7:a7:58:bb:85:58:ce:d6:a0:3f:3c:c0:4f:c6:0f:f0:94:ef:
c3:b1:dd:c2:d1:0d:3c:47:f3:97:3c:98:0f:a3:b9:a6:f1:9e:
8c:a8:ed:b1:54:77:58:dc:c0:62:0d:6e:1f:1d:7e:fe:b0:db:
51:12:6c:bc:85:91:97:a0:b5:7b:ab:bf:a9:7f:b2:a6:45:3e:
02:29:b4:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:33 2025 by rpki-client