Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/34352e3138382e32342e302f32322d3332203d3e20323639333435.roa
File: 34352e3138382e32342e302f32322d3332203d3e20323639333435.roa (raw, json)
Hash identifier: +b82V84EkzS8sNXeKUYrMpNtpQSO3DMdzPCmmOYlTks=
Subject key identifier: EF:4E:60:E3:96:B2:0C:EC:BC:0E:E9:04:04:87:79:2B:AA:A3:1A:C9
Certificate issuer: /CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Certificate serial: 1D3C065D3AC8864A4B819C4F0C1FB98845DEBA38
Authority key identifier: AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/34352e3138382e32342e302f32322d3332203d3e20323639333435.roa
Signing time: Mon 11 Mar 2024 18:09:31 +0000
ROA not before: Mon 11 Mar 2024 18:04:31 +0000
ROA not after: Mon 10 Mar 2025 18:09:31 +0000
asID: 269345
IP address blocks: 45.188.24.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3c:06:5d:3a:c8:86:4a:4b:81:9c:4f:0c:1f:b9:88:45:de:ba:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Validity
Not Before: Mar 11 18:04:31 2024 GMT
Not After : Mar 10 18:09:31 2025 GMT
Subject: CN=EF4E60E396B20CECBC0EE9040487792BAAA31AC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:64:10:f0:0f:20:19:01:58:cf:bd:94:ad:
82:ec:bc:34:db:22:f7:59:9e:bb:34:d6:44:4c:e4:
5a:74:24:70:cd:5f:98:7a:33:23:32:1e:bb:2d:63:
a5:18:ce:b7:66:ba:35:c1:c7:c6:51:e8:5e:d0:08:
83:9f:1d:a2:84:3b:76:3e:e2:30:ce:bf:d7:83:e9:
c6:6b:a8:d0:c7:06:6f:8b:24:0b:12:58:11:59:8e:
8d:73:47:ab:19:7c:23:d5:81:f7:9b:4f:01:48:88:
3d:59:e7:3b:19:e0:fc:f5:70:84:ef:e0:f1:e5:04:
82:01:f6:c4:7e:c5:15:14:a9:d0:ec:6c:b2:af:d6:
77:6e:d8:0f:5a:ac:ea:39:c7:dc:2c:d8:62:c1:58:
b8:d7:d9:bb:2e:16:fd:ff:c9:dd:6c:44:a8:e8:0f:
d2:c5:e5:d0:0c:6a:6e:14:06:21:44:12:c2:56:50:
72:ae:1b:f4:4f:78:a2:1d:28:a8:2b:1c:5c:84:14:
2f:fc:53:b0:9c:c6:ca:ef:8b:26:0a:db:c9:1c:9a:
39:f1:7e:a0:ef:37:bf:4f:f7:82:48:18:18:d3:6e:
2a:31:d6:34:38:29:31:38:5a:04:3a:9d:f2:6f:49:
18:2a:02:4a:b4:98:f5:68:d4:03:d8:65:af:fe:19:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4E:60:E3:96:B2:0C:EC:BC:0E:E9:04:04:87:79:2B:AA:A3:1A:C9
X509v3 Authority Key Identifier:
keyid:AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/34352e3138382e32342e302f32322d3332203d3e20323639333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.188.24.0/22
Signature Algorithm: sha256WithRSAEncryption
14:fe:bc:47:9e:be:2a:1d:20:ba:81:5c:75:ba:32:cd:4b:bd:
5c:c6:d8:9e:af:31:48:30:02:bf:da:63:05:bc:ce:f8:e7:52:
9e:b3:dd:ad:77:c5:c5:74:47:49:de:98:a0:e4:04:14:e1:7a:
9a:66:e3:f7:61:fb:86:b6:36:01:0e:bf:c3:ff:24:fa:cc:8f:
47:49:7e:85:c6:cb:08:cc:25:51:30:fe:d1:66:ad:c8:ed:d0:
49:4a:22:a1:ef:64:5c:c5:9a:ae:a2:e5:38:82:34:44:72:e7:
dd:74:b4:bf:89:81:ba:a5:01:be:bc:d8:3a:3e:18:9d:69:b9:
16:2f:4e:9e:d3:72:fd:8f:f8:c5:29:03:bc:13:2d:58:10:ee:
63:c1:33:ba:58:ef:4f:2c:73:1f:d1:81:80:78:4e:d4:ac:26:
a0:75:55:04:25:84:5f:ed:0a:1e:d6:09:53:1f:bd:73:fa:95:
37:4c:61:74:ec:95:46:62:a5:41:5b:31:7a:ef:f2:98:9a:3c:
9d:8d:c4:a4:99:a6:b0:83:15:4e:7e:d6:d2:fd:35:4d:d9:02:
fd:ec:03:21:cf:7d:e8:fe:13:b7:d3:aa:87:6a:7c:40:a5:be:
91:79:36:98:ee:d5:aa:bd:8e:e3:74:ca:a1:ee:70:46:8d:63:
37:c9:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:53 2025 by rpki-client