Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32302e302f32322d3232203d3e20323638323737.roa
File: 34352e3233372e32302e302f32322d3232203d3e20323638323737.roa (raw, json)
Hash identifier: ZCwOoqIalqT74NnIlMk2lDUwIMKieBPRdU31Eu6vM6I=
Subject key identifier: 02:D6:54:68:ED:26:73:B3:A0:25:F3:C9:4B:DF:E0:99:CC:E8:F2:68
Certificate issuer: /CN=E9F384C706E4A5CEF9A232E6DB03918B52C871F1
Certificate serial: 6A225999261976C87506264C448A16F5D2A0A469
Authority key identifier: E9:F3:84:C7:06:E4:A5:CE:F9:A2:32:E6:DB:03:91:8B:52:C8:71:F1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32302e302f32322d3232203d3e20323638323737.roa
Signing time: Sun 20 Aug 2023 15:42:53 +0000
ROA not before: Sun 20 Aug 2023 15:37:53 +0000
ROA not after: Sun 18 Aug 2024 15:42:53 +0000
asID: 268277
IP address blocks: 45.237.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:22:59:99:26:19:76:c8:75:06:26:4c:44:8a:16:f5:d2:a0:a4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E9F384C706E4A5CEF9A232E6DB03918B52C871F1
Validity
Not Before: Aug 20 15:37:53 2023 GMT
Not After : Aug 18 15:42:53 2024 GMT
Subject: CN=02D65468ED2673B3A025F3C94BDFE099CCE8F268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:f4:62:c6:ba:d4:67:1c:c5:97:93:96:03:
2e:86:34:29:e9:f3:5d:45:57:1f:83:55:99:a8:13:
19:0b:b7:f2:28:cb:91:dd:7f:ae:6f:d6:19:62:99:
50:3a:54:cb:f0:78:79:ad:f8:0f:bc:fc:f1:55:76:
c8:96:15:70:a7:2f:26:6f:3f:fb:3e:a2:56:43:03:
73:a6:85:e8:a4:97:32:be:d4:5e:85:c5:91:62:57:
7b:d0:ae:5a:43:e6:02:b2:29:32:5e:9e:c5:e4:23:
2d:46:ef:b8:bb:26:d1:79:68:13:42:c8:72:a5:3b:
5b:e7:e8:45:49:bb:a2:90:17:4e:7e:12:a4:00:89:
79:14:1a:a7:15:b6:87:03:bc:72:c9:41:be:7e:41:
53:f7:cc:4f:a7:80:7d:81:db:c6:a0:92:e7:99:b9:
a0:74:a9:8a:e4:e8:01:e9:79:82:1f:a4:65:22:e0:
6f:fb:1a:a1:c8:33:df:75:c0:83:f0:3e:fa:19:2b:
31:cc:86:29:dc:7b:e4:fe:62:7f:fd:a9:c5:5b:5c:
0d:86:aa:f0:3d:98:03:5a:ca:11:c5:88:7e:ed:b3:
6b:5a:cf:f4:d3:8e:dc:fc:2f:e4:e6:5f:0e:9c:f9:
31:69:d5:db:a8:e8:15:47:c0:7e:c0:f7:7a:8f:f9:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D6:54:68:ED:26:73:B3:A0:25:F3:C9:4B:DF:E0:99:CC:E8:F2:68
X509v3 Authority Key Identifier:
keyid:E9:F3:84:C7:06:E4:A5:CE:F9:A2:32:E6:DB:03:91:8B:52:C8:71:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E9F384C706E4A5CEF9A232E6DB03918B52C871F1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DykavfuotHPpm68XaaqAMuUcrfGWmX7SYSp33ebJYmfn/0/34352e3233372e32302e302f32322d3232203d3e20323638323737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.237.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:84:36:10:3d:c2:ef:d8:8d:4e:61:79:55:e7:56:c8:10:79:
89:b8:af:02:c2:ca:d4:5d:c5:bb:4a:6b:01:f9:e5:88:58:aa:
9e:f1:ae:15:00:bb:28:b3:f9:39:17:59:0f:d3:90:74:d8:56:
6d:2b:d4:63:14:30:a2:b3:52:a8:51:52:bb:30:e3:0a:07:84:
fd:16:b4:13:13:3f:b9:3d:03:c5:a4:07:98:4c:07:ba:4f:8b:
70:d2:ee:b3:32:9c:d9:7b:33:68:9c:55:17:e9:59:c4:6c:cd:
a8:e5:87:2a:d3:74:97:df:05:5a:8e:75:35:31:1e:96:53:b3:
d4:ab:e5:3f:ce:dc:1d:3e:02:58:7d:fa:59:18:44:e2:25:cd:
e0:35:df:58:b9:a1:1e:47:15:3a:d4:af:1e:e5:ce:f9:45:7e:
fd:3e:53:41:bd:b7:ce:8e:66:55:3e:a5:ad:db:aa:40:97:60:
ec:00:8a:8d:2e:23:3d:db:cf:bc:ca:4a:1d:d5:90:78:72:6d:
cf:5f:6e:a3:be:ce:f7:e2:d3:c2:5a:5f:bb:b4:a7:ca:b5:4c:
8f:8d:8a:71:10:74:27:6f:c7:0b:4a:e3:20:a2:b7:99:40:cc:
90:58:fb:93:11:ae:b5:f4:26:02:62:6b:aa:36:4e:cd:f9:4d:
99:bf:1b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:27:33 2025 by rpki-client