Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa
File: 34352e3137352e37362e302f32332d3233203d3e20323638383930.roa (raw, json)
Hash identifier: G4qeXWR9Fpe/ITjz8sEdsN8G7UfTkY+zi4OW0v0W2RI=
Subject key identifier: 05:20:E3:9E:B0:9C:71:1E:27:02:4B:B2:59:7C:71:EC:8D:D9:D0:DC
Certificate issuer: /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial: 16037184BD31C5B8B3648FD26D123CE854DFE182
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa
Signing time: Tue 09 Apr 2024 19:49:56 +0000
ROA not before: Tue 09 Apr 2024 19:44:56 +0000
ROA not after: Tue 08 Apr 2025 19:49:56 +0000
asID: 268890
IP address blocks: 45.175.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:03:71:84:bd:31:c5:b8:b3:64:8f:d2:6d:12:3c:e8:54:df:e1:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Validity
Not Before: Apr 9 19:44:56 2024 GMT
Not After : Apr 8 19:49:56 2025 GMT
Subject: CN=0520E39EB09C711E27024BB2597C71EC8DD9D0DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:0f:fc:95:85:07:80:6c:b8:c3:de:a6:8d:b3:
d7:ce:b2:23:e1:86:0a:3f:55:73:9d:92:1b:4c:45:
bb:3b:98:ff:2d:25:0f:63:b1:dd:05:7b:88:ba:35:
5d:46:50:18:53:b1:1f:a8:90:05:01:f0:79:11:41:
3f:c8:9b:0d:b4:89:a4:09:e7:bb:04:a3:d7:8f:9a:
a1:be:89:15:be:e4:48:51:ca:23:01:be:26:40:9d:
59:86:74:53:0e:98:57:34:76:ac:d9:04:37:45:32:
65:54:97:8d:5e:49:03:38:85:06:8e:03:cc:6c:e4:
06:0d:87:6b:92:0a:02:e5:a1:9c:71:e0:a2:3e:6b:
be:b8:73:6b:91:16:32:4d:69:4f:69:d9:70:7d:0f:
a9:6a:40:45:72:3f:3f:61:73:52:e9:52:be:84:b3:
36:d1:29:7b:b7:06:63:2e:43:f5:2c:2f:f1:01:d0:
47:cc:fd:40:80:78:f9:b8:17:26:79:3d:86:97:19:
cf:56:c6:1d:77:18:8d:7a:b3:c8:16:15:69:d3:4d:
a4:fb:75:e5:27:35:71:57:90:0a:bd:94:cc:71:83:
1b:42:5a:da:ad:3c:ab:33:f2:5d:f0:f6:b2:a8:b6:
60:30:1b:45:c6:7d:02:8a:08:a4:30:4a:70:38:ce:
71:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:20:E3:9E:B0:9C:71:1E:27:02:4B:B2:59:7C:71:EC:8D:D9:D0:DC
X509v3 Authority Key Identifier:
keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37362e302f32332d3233203d3e20323638383930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.76.0/23
Signature Algorithm: sha256WithRSAEncryption
39:59:0a:8e:ea:a4:85:b7:76:14:71:af:3c:b2:50:9e:25:de:
ef:ee:0b:2e:2e:f8:9b:36:bf:d1:62:48:23:90:29:c9:c0:1e:
62:de:bf:70:af:3c:79:bd:5b:d9:2d:f1:71:d8:cf:56:ec:0e:
3e:c2:d0:a5:45:28:9c:18:7d:12:15:ba:db:9b:85:db:6e:d8:
3a:db:56:07:de:e8:f7:32:d5:8f:b0:a7:4f:54:46:bf:8b:e2:
5d:36:28:4b:cb:13:78:de:67:3e:31:ef:69:a6:a3:cd:03:91:
13:8b:34:6d:64:d4:95:89:cc:8b:6a:29:e8:46:ef:91:30:d3:
78:9d:c0:5a:0d:07:84:9c:75:f1:4d:70:89:2a:0b:d3:f7:7c:
39:93:90:91:fd:28:33:57:81:5f:ff:dc:d7:73:b8:77:66:c2:
d4:d7:c4:99:83:6c:2d:cc:09:51:91:df:99:a5:d4:ed:c5:71:
c7:f2:0f:26:1c:bc:d1:1e:0d:33:76:6d:46:e0:86:31:a5:9b:
05:d1:f5:2f:c1:f0:8a:79:37:24:a1:f4:c7:46:6a:bc:ca:70:
8a:6c:b3:29:8e:0d:45:9d:2b:40:da:b7:a4:01:6e:55:5c:49:
12:fc:f1:14:53:7e:93:d2:f9:64:74:2e:08:47:55:b9:79:d7:
b5:14:68:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:34 2025 by rpki-client