Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/34352e37302e32302e302f32342d3234203d3e20323637353733.roa
File: 34352e37302e32302e302f32342d3234203d3e20323637353733.roa (raw, json)
Hash identifier: CG2cKuP8gV+QBJTI6effOQFRkES0yK09sxcLiquao7U=
Subject key identifier: A9:AF:A8:F2:EF:E0:F6:74:3E:30:96:9D:45:6D:E1:49:A9:57:24:BB
Certificate issuer: /CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
Certificate serial: 62C737942F6467114E91C5A45201D381612D5B7F
Authority key identifier: 56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/34352e37302e32302e302f32342d3234203d3e20323637353733.roa
Signing time: Mon 15 May 2023 21:55:51 +0000
ROA not before: Mon 15 May 2023 21:50:51 +0000
ROA not after: Mon 13 May 2024 21:55:51 +0000
asID: 267573
IP address blocks: 45.70.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:c7:37:94:2f:64:67:11:4e:91:c5:a4:52:01:d3:81:61:2d:5b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568240316B2E029888E6CD5C24522C55D5D6DA1E
Validity
Not Before: May 15 21:50:51 2023 GMT
Not After : May 13 21:55:51 2024 GMT
Subject: CN=A9AFA8F2EFE0F6743E30969D456DE149A95724BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:cd:0f:72:b2:be:aa:0e:e6:d1:14:39:b0:97:
9d:c3:e3:6c:6d:32:cc:ec:53:91:8b:b5:39:17:a3:
6a:54:96:0d:cd:4b:68:ad:e2:e5:cc:b6:00:60:22:
de:31:7b:8d:17:e2:62:90:3c:c5:19:34:81:21:a6:
15:a7:69:e0:77:93:bd:47:9f:61:b7:69:2f:35:20:
67:bb:39:e3:6a:2c:1f:34:3f:5a:52:17:35:c4:5a:
bd:8c:67:1e:81:a4:ab:b6:da:98:5e:58:91:26:38:
b2:67:f7:6a:0e:50:73:9f:59:da:25:0c:d0:24:ba:
51:1e:ce:89:26:bf:f9:46:af:87:7c:c6:af:6f:f1:
a2:01:69:fc:b4:e5:c0:99:99:50:08:b6:27:fb:61:
5a:07:fe:ff:05:81:af:13:e6:58:af:d0:3c:4c:13:
8d:a4:ea:93:11:15:d5:1d:70:ab:8e:70:d6:cc:00:
30:c9:8d:2e:ab:c3:53:d9:09:b3:a4:21:c7:c0:27:
8d:73:3d:a1:a0:fa:f8:23:28:ea:ab:14:c4:17:8c:
af:d4:c1:2a:b3:79:84:19:b4:98:4c:78:1d:0f:0d:
e1:4c:81:34:6a:3d:8a:30:45:7a:2a:d4:29:43:09:
54:57:b9:dd:5c:3c:8d:3c:25:c9:ab:fb:58:42:21:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:A8:F2:EF:E0:F6:74:3E:30:96:9D:45:6D:E1:49:A9:57:24:BB
X509v3 Authority Key Identifier:
keyid:56:82:40:31:6B:2E:02:98:88:E6:CD:5C:24:52:2C:55:D5:D6:DA:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/568240316B2E029888E6CD5C24522C55D5D6DA1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjhhMjAZ3HJyDsKoAUGTJ9wNCRtnooZxrkuKMwcsbf8J/0/34352e37302e32302e302f32342d3234203d3e20323637353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.20.0/24
Signature Algorithm: sha256WithRSAEncryption
53:41:5e:47:a5:6b:8c:7c:01:a3:03:76:6f:50:d9:6f:20:9f:
3e:31:5f:1e:0a:21:16:d9:cd:29:24:5a:93:8d:ca:6c:b3:53:
ec:9f:a6:31:38:b8:03:5f:f7:bd:4e:1b:ab:ec:4d:1f:66:6d:
52:c8:3b:69:e4:41:91:94:72:83:cc:b2:08:8c:4e:e4:43:f9:
81:3b:75:bb:0c:e7:42:38:b3:e4:08:34:95:56:cc:d1:d4:64:
00:bb:a2:2a:d8:39:5d:25:b8:30:f2:88:1f:49:4d:94:a3:2d:
98:41:83:ee:1a:60:37:e9:09:db:df:12:42:98:71:44:81:b9:
eb:bc:84:dd:9f:a8:3c:be:23:80:82:bf:cb:3a:af:f0:67:bd:
e3:46:35:c7:d1:ad:14:7d:7d:e6:1b:80:b0:6c:69:5a:66:f0:
e8:9f:99:55:68:b2:d9:0e:ff:ae:21:44:6f:1f:92:ac:f5:c9:
66:a1:d2:98:f6:eb:d4:8b:14:c8:6a:98:31:59:6a:8b:9e:d8:
8c:74:e0:32:66:ed:4b:2a:74:9f:b0:04:8d:3b:8d:f0:57:21:
83:17:74:75:d4:a4:9f:35:a0:b8:c4:67:31:1c:d3:2f:7f:12:
8f:55:2b:76:1a:29:d1:cd:f3:cd:f4:e9:43:a9:29:38:50:ee:
78:e7:27:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:49:00 2025 by rpki-client