Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3234203d3e20323637333034.roa
File: 34352e3233332e33322e302f32322d3234203d3e20323637333034.roa (raw, json)
Hash identifier: mllJ+DTDKGzMJ6urU75Mc4ns7RWW5Hm/h1Iytd7OhD4=
Subject key identifier: 9C:80:26:C9:73:24:59:61:68:55:64:71:A8:A1:6E:96:48:01:86:CC
Certificate issuer: /CN=BAF8CACEADFB87C6217EF0D018600625B078ABCF
Certificate serial: 3AB4E6CBA2B6CA97FD075D53689EDB878B781477
Authority key identifier: BA:F8:CA:CE:AD:FB:87:C6:21:7E:F0:D0:18:60:06:25:B0:78:AB:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF8CACEADFB87C6217EF0D018600625B078ABCF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3234203d3e20323637333034.roa
Signing time: Wed 22 May 2024 14:21:06 +0000
ROA not before: Wed 22 May 2024 14:16:06 +0000
ROA not after: Wed 21 May 2025 14:21:06 +0000
asID: 267304
IP address blocks: 45.233.32.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:b4:e6:cb:a2:b6:ca:97:fd:07:5d:53:68:9e:db:87:8b:78:14:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BAF8CACEADFB87C6217EF0D018600625B078ABCF
Validity
Not Before: May 22 14:16:06 2024 GMT
Not After : May 21 14:21:06 2025 GMT
Subject: CN=9C8026C97324596168556471A8A16E96480186CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fd:44:8a:11:55:02:4b:0d:66:1a:54:ea:d0:
0d:ab:89:49:b5:a3:01:07:02:96:a4:00:c7:a5:70:
7a:98:c1:42:65:07:67:2c:30:4d:3f:62:3f:59:19:
01:8e:23:81:f0:76:dc:b1:7b:55:cb:12:49:59:d0:
f2:49:46:f1:ce:a9:23:c5:30:a7:b9:4d:91:2a:9e:
e8:ab:59:5d:b9:36:9f:db:3c:d4:a8:2a:73:14:36:
7a:bb:f0:4f:a5:b7:07:57:48:72:43:b0:2f:05:22:
b4:e2:46:62:6f:54:80:ef:88:eb:55:a7:11:c6:69:
07:ab:c3:19:e8:fa:a0:51:9f:bd:9d:ae:15:77:90:
b0:da:68:74:39:dd:b8:f6:16:74:fd:33:27:d1:68:
4d:cd:16:24:a9:0e:9a:09:f8:a4:a9:30:75:79:54:
87:eb:86:1c:a1:71:1a:f0:7e:44:9e:94:4d:68:13:
6f:f2:a8:e7:b9:48:50:53:8c:ad:9a:b2:7b:64:3d:
ae:5b:04:9d:b2:fa:45:8c:dc:c3:a7:a7:f6:d0:33:
ed:bd:ab:3b:8d:e0:cb:18:dd:1b:d6:16:9e:19:d6:
e1:4d:cf:e3:4e:b9:db:24:f3:0e:be:e1:e0:fa:33:
33:dd:0c:7a:b6:4f:06:59:bf:24:c8:73:ec:00:fa:
3f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:80:26:C9:73:24:59:61:68:55:64:71:A8:A1:6E:96:48:01:86:CC
X509v3 Authority Key Identifier:
keyid:BA:F8:CA:CE:AD:FB:87:C6:21:7E:F0:D0:18:60:06:25:B0:78:AB:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/BAF8CACEADFB87C6217EF0D018600625B078ABCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BAF8CACEADFB87C6217EF0D018600625B078ABCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fdxq7V2YhcKgxWKa8x5JBcgqdDzMQe1txNLbVE1d6ewo/0/34352e3233332e33322e302f32322d3234203d3e20323637333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.233.32.0/22
Signature Algorithm: sha256WithRSAEncryption
71:2e:cf:84:90:33:d4:e1:c5:cf:a2:17:7a:47:59:44:f4:b3:
10:13:13:7b:52:d8:a3:ee:15:c9:fc:04:82:40:2e:1a:1f:a4:
61:5b:72:7c:46:e4:10:99:17:0f:90:d8:d6:dc:f6:0a:1e:e8:
f7:5f:b7:c0:f3:cd:b2:a0:30:13:1e:90:9d:97:45:90:eb:7b:
ba:60:9f:df:ff:59:cc:1f:cd:2a:86:04:dc:38:a1:a2:02:d2:
d1:9d:8c:a0:29:28:8e:ae:ac:d5:a1:3f:3b:c9:4a:d6:5a:43:
18:f1:2d:52:9c:b1:82:82:f5:34:e1:2f:dd:e7:5a:4a:22:4a:
bc:4a:95:0e:6b:71:ec:70:7d:43:ff:b3:46:ea:65:e8:ff:56:
60:b5:96:83:cd:1d:aa:80:f9:a2:df:7b:90:06:97:54:5e:aa:
01:af:12:f9:6a:a8:ae:c0:0b:85:55:ba:c0:86:64:23:95:59:
7e:c2:db:66:c0:b4:11:e1:85:4b:6f:da:22:7b:fb:ae:3e:fb:
c4:44:40:1a:d7:41:ce:e4:e1:e1:1a:95:80:f9:08:dd:e0:d4:
db:fc:59:db:df:d2:cb:34:f7:1a:38:83:1f:48:0d:e6:23:78:
a8:4b:82:9b:f2:7d:96:4f:19:61:5e:12:b6:2c:76:4a:aa:db:
aa:c6:cd:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:29 2025 by rpki-client