Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37382e302f32332d3233203d3e20323638383930.roa
File: 34352e3137352e37382e302f32332d3233203d3e20323638383930.roa (raw, json)
Hash identifier: 67EoZIIcp5GaxVRPiooluP5aEoGucZU460E+yhIS2yE=
Subject key identifier: B9:9F:8A:C5:B5:A7:DC:19:65:06:A9:80:D1:1C:66:A5:A7:A9:57:32
Certificate issuer: /CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Certificate serial: 127F20C9E73604E2E48B40FE625484EA914C4424
Authority key identifier: 67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37382e302f32332d3233203d3e20323638383930.roa
Signing time: Tue 09 Apr 2024 19:50:07 +0000
ROA not before: Tue 09 Apr 2024 19:45:07 +0000
ROA not after: Tue 08 Apr 2025 19:50:07 +0000
asID: 268890
IP address blocks: 45.175.78.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:7f:20:c9:e7:36:04:e2:e4:8b:40:fe:62:54:84:ea:91:4c:44:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67D07BFDBA040A64006EF44DE6F7176B81E1AE56
Validity
Not Before: Apr 9 19:45:07 2024 GMT
Not After : Apr 8 19:50:07 2025 GMT
Subject: CN=B99F8AC5B5A7DC196506A980D11C66A5A7A95732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:19:0e:06:0b:72:b4:06:ea:78:55:47:7d:
a0:4c:9f:09:78:53:25:cf:b9:af:bb:ef:be:28:d3:
97:71:d2:63:8b:1c:c0:30:eb:12:43:15:68:ed:e2:
18:c0:cc:78:80:ba:98:34:e0:8f:49:19:7a:2d:d1:
2f:5b:88:36:00:e1:fe:22:7e:f7:0e:88:9e:76:39:
91:83:19:a9:86:d5:aa:0d:1f:6f:f2:62:33:6a:7a:
0f:4d:65:23:ee:87:5e:78:00:2e:26:0e:50:de:62:
49:99:97:55:ca:45:63:50:e0:6e:45:7f:35:b5:f6:
24:b8:23:58:3f:52:da:ea:1b:7b:c1:d8:af:7d:e3:
d8:c5:ce:15:dc:68:c4:58:80:65:fd:25:22:e1:14:
90:d9:6d:05:5c:e0:51:60:ce:62:80:13:d6:7b:e9:
80:fd:de:e0:aa:eb:c7:3d:5b:85:0c:bf:05:6a:70:
8d:b1:e2:ff:24:f8:30:bf:98:2b:ce:b1:cc:af:ec:
88:8b:76:90:dc:9b:ff:31:37:11:32:f4:90:c9:63:
e0:67:05:fe:84:d9:22:77:e5:f7:da:41:44:34:7f:
6b:51:93:00:f9:53:c2:d2:23:83:8c:69:09:2d:ad:
ee:1f:7d:21:f6:20:62:33:ec:21:69:63:77:c4:65:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9F:8A:C5:B5:A7:DC:19:65:06:A9:80:D1:1C:66:A5:A7:A9:57:32
X509v3 Authority Key Identifier:
keyid:67:D0:7B:FD:BA:04:0A:64:00:6E:F4:4D:E6:F7:17:6B:81:E1:AE:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67D07BFDBA040A64006EF44DE6F7176B81E1AE56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CrfVoJ5h6L2CsAWqaYt538EW8syJQU7dPoKVeompb4DG/1/34352e3137352e37382e302f32332d3233203d3e20323638383930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.175.78.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:ce:fa:e2:4e:bb:ee:7f:70:9f:fd:20:93:b6:a8:13:7d:ae:
02:9d:6d:33:fa:19:55:34:de:14:c1:63:92:09:b9:b0:22:12:
9b:6d:d5:ab:2e:f6:a0:a1:a5:14:9d:f6:2d:9b:cc:51:e5:b8:
ef:b2:1a:ff:61:56:c9:35:be:44:e3:1f:77:44:b0:ae:89:18:
dc:f3:c4:87:b7:f0:80:63:4e:df:93:cc:5a:94:af:6d:9d:e5:
e6:71:bc:8e:ce:75:6c:9b:81:fc:b0:ac:fd:02:8d:46:e4:df:
62:76:0c:bd:77:7e:ae:0a:1c:aa:b4:c4:87:f7:19:35:e8:99:
e4:07:a4:9a:4f:68:de:55:20:e3:0c:20:cd:96:c8:f8:ac:9a:
a8:09:85:36:86:64:9c:4b:bf:e0:fa:d1:9a:e2:89:fc:5f:18:
15:92:cc:9a:e2:fc:32:91:14:d8:d5:28:6f:fd:17:88:f2:53:
5d:9a:78:28:7c:34:54:2f:06:73:85:7f:cd:11:97:8c:5a:6d:
4c:8e:97:e7:11:8e:f3:7a:a1:2d:7f:68:b4:0a:17:a0:22:39:
93:93:77:30:da:39:5d:8c:5c:c2:82:33:30:1b:6d:7a:82:40:
cd:9e:60:e3:7e:11:a6:ea:44:ef:04:c0:e8:a2:ea:c6:2c:75:
e6:b9:9f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:43:11 2025 by rpki-client