Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa
File: 34352e3233362e36322e302f32332d3233203d3e20323731323034.roa (raw, json)
Hash identifier: BNvkPi3F2dmuq7JP3XuNFKlKdpxuRAE+UMESzMdgjT4=
Subject key identifier: FC:68:CD:E2:73:55:80:1A:E0:D6:FB:42:EC:15:DA:4D:54:D4:32:AE
Certificate issuer: /CN=B8AF676772F0F28F22A98D5FCA20569D94F93703
Certificate serial: 6A0871CA4C6E6B65884FD7E5EC68A49C65EB1360
Authority key identifier: B8:AF:67:67:72:F0:F2:8F:22:A9:8D:5F:CA:20:56:9D:94:F9:37:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa
Signing time: Fri 05 Apr 2024 02:13:32 +0000
ROA not before: Fri 05 Apr 2024 02:08:32 +0000
ROA not after: Fri 04 Apr 2025 02:13:32 +0000
asID: 271204
IP address blocks: 45.236.62.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:08:71:ca:4c:6e:6b:65:88:4f:d7:e5:ec:68:a4:9c:65:eb:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8AF676772F0F28F22A98D5FCA20569D94F93703
Validity
Not Before: Apr 5 02:08:32 2024 GMT
Not After : Apr 4 02:13:32 2025 GMT
Subject: CN=FC68CDE27355801AE0D6FB42EC15DA4D54D432AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:61:a8:ed:fb:26:e9:04:ad:dc:e7:be:1f:
c7:75:3a:a1:23:74:c9:d3:0c:cb:d4:c5:94:cb:26:
ff:98:f3:0a:24:fd:5c:ba:25:44:5b:a1:84:e5:08:
5d:f1:2f:24:61:7f:61:eb:fb:08:2b:4f:0f:1f:41:
3a:2d:d4:e0:eb:36:bf:9f:f7:80:17:9c:10:34:94:
1a:22:aa:80:06:43:94:ac:fa:d0:6b:6e:2e:3d:8f:
7d:96:d5:d0:68:29:e5:43:a7:27:35:87:0d:07:97:
8b:e7:31:79:66:f4:1d:37:f7:96:d4:81:c4:6c:75:
3f:d6:cb:af:3a:cb:b7:a7:a4:ae:63:17:b6:9e:c6:
69:3d:90:93:00:30:bb:c2:12:8f:84:ad:2e:f3:8a:
33:fc:e3:b1:bc:7b:59:a6:f1:20:de:e8:15:92:02:
be:24:99:c9:f4:15:80:03:3f:35:ce:c0:38:b4:80:
02:25:28:c1:f6:c3:e7:4e:a5:df:e2:d8:55:3b:e8:
d1:df:fe:19:7b:db:c3:91:94:f1:3d:7c:d0:1a:cd:
3b:96:93:80:02:20:8a:1c:a7:d2:af:2d:dd:63:18:
b7:17:68:62:a4:39:5b:b6:44:58:7c:83:f8:c3:8b:
d7:90:de:df:1c:7b:17:fd:8f:7d:29:46:72:98:fa:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:68:CD:E2:73:55:80:1A:E0:D6:FB:42:EC:15:DA:4D:54:D4:32:AE
X509v3 Authority Key Identifier:
keyid:B8:AF:67:67:72:F0:F2:8F:22:A9:8D:5F:CA:20:56:9D:94:F9:37:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8AF676772F0F28F22A98D5FCA20569D94F93703.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAZPGb3R92oPJE2nhq9pYfiUDxMeMTM9vkitqtCV8cci/1/34352e3233362e36322e302f32332d3233203d3e20323731323034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.62.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:2e:94:aa:0e:64:d4:f7:e4:de:ef:c2:dc:54:52:76:e9:99:
cc:3d:b8:e1:59:36:2f:d6:a9:0d:d0:c0:ec:7b:d4:9e:c0:cd:
a6:30:61:c5:83:e4:da:12:ac:33:d2:f1:17:1a:6f:2c:f2:11:
d5:93:b9:03:af:64:b8:f8:3c:58:0e:3a:af:a2:b1:0a:6b:2d:
52:74:0f:45:4a:a4:47:3d:01:bb:96:55:25:c8:8b:6e:94:25:
06:03:78:08:55:96:b2:14:75:e7:32:6d:7a:74:5a:5c:0a:41:
c3:1b:f9:09:70:17:57:ff:83:71:8c:99:c5:c1:34:a9:fc:3c:
60:01:20:63:af:c1:ca:39:d5:3c:ad:ee:14:fc:a6:66:1d:2e:
14:34:24:8d:d0:75:de:83:ee:73:c6:82:a1:75:73:8e:d6:ab:
bb:62:a7:e0:77:ff:cd:05:f7:6a:a1:38:10:1d:50:cc:67:19:
f6:b1:2a:4e:c7:1e:a5:73:93:48:f3:ad:30:8c:e4:d5:6a:dc:
87:05:d1:dc:99:8e:1b:5b:d2:ac:46:d3:5c:48:53:e9:e2:66:
04:00:07:ad:c1:93:15:2a:48:e6:19:e7:3f:59:3f:fb:5e:ec:
a2:4a:6a:12:88:c2:89:c1:3f:0c:2c:fb:96:00:1c:b4:c0:80:
6d:17:dc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:45:12 2025 by rpki-client