Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
File: 34352e362e3136322e302f32342d3234203d3e20323636313936.roa (raw, json)
Hash identifier: 9G8oli/+FFPL/x8wXMRp4shfsOoIpYLlqh6xtV4f13c=
Subject key identifier: 74:D0:1E:B6:0F:95:A5:D0:10:28:5A:14:73:A6:95:D4:81:FD:40:5C
Certificate issuer: /CN=8723709C4D690CFE7D7971537037FC3C8E195928
Certificate serial: 32542420053C15ADB06297C15144F877487131B9
Authority key identifier: 87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
Signing time: Sun 29 Dec 2024 13:32:54 +0000
ROA not before: Sun 29 Dec 2024 13:27:54 +0000
ROA not after: Sun 28 Dec 2025 13:32:54 +0000
asID: 266196
IP address blocks: 45.6.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:54:24:20:05:3c:15:ad:b0:62:97:c1:51:44:f8:77:48:71:31:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8723709C4D690CFE7D7971537037FC3C8E195928
Validity
Not Before: Dec 29 13:27:54 2024 GMT
Not After : Dec 28 13:32:54 2025 GMT
Subject: CN=74D01EB60F95A5D010285A1473A695D481FD405C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:73:70:ea:d2:0a:f1:55:1e:13:75:5c:ab:
60:b2:c1:04:11:9c:0b:e1:6a:64:e3:56:e6:b8:a6:
35:e8:de:f2:de:59:d3:d8:94:3d:d7:a6:44:63:64:
0c:c7:50:ce:20:7c:4b:2e:13:2c:f7:07:64:69:f6:
be:aa:43:cc:be:8c:ca:2d:e0:6c:1d:cb:7f:4e:cf:
a6:ca:9c:c4:d8:3a:04:05:a4:ef:9f:e1:26:18:cb:
52:4b:b6:4d:95:a8:95:d3:2f:25:62:48:32:b9:36:
b9:ce:b4:61:b0:c6:c5:15:5e:e1:42:5b:15:9f:da:
b9:7c:f3:ec:14:86:98:04:e4:c3:e4:b6:1e:8d:0a:
d5:17:76:07:ff:13:d1:38:f1:4a:0d:b2:70:2b:73:
da:b9:c3:50:8b:75:95:44:7f:56:1a:24:5e:a3:b9:
10:ec:89:4c:c0:64:6c:87:d1:f9:da:27:a7:39:35:
39:d3:1f:8f:c2:2d:73:94:ca:29:0c:df:9b:2a:f9:
be:0a:97:61:d0:62:7c:fc:71:3d:f8:31:57:36:fb:
23:f3:d1:58:a0:0f:1e:5a:bd:26:04:5a:73:bb:bb:
ca:fb:ee:08:c7:00:b5:b1:db:c2:90:9f:ff:37:86:
4f:d5:ae:57:c8:0e:22:7d:e3:7a:9d:2c:90:ea:d6:
98:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:1E:B6:0F:95:A5:D0:10:28:5A:14:73:A6:95:D4:81:FD:40:5C
X509v3 Authority Key Identifier:
keyid:87:23:70:9C:4D:69:0C:FE:7D:79:71:53:70:37:FC:3C:8E:19:59:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/8723709C4D690CFE7D7971537037FC3C8E195928.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8723709C4D690CFE7D7971537037FC3C8E195928.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHUCDWBu6SpC3uYW8T99Fw4podnWdL269GsX2U254AdQ/0/34352e362e3136322e302f32342d3234203d3e20323636313936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.6.162.0/24
Signature Algorithm: sha256WithRSAEncryption
88:cf:0d:74:eb:36:e3:11:5d:e5:65:4a:9b:9f:0f:15:54:c6:
ae:70:ad:40:c3:fa:57:d1:d3:79:fc:5d:e1:2a:41:34:45:ef:
80:7f:fd:b1:8d:b8:96:b7:5c:eb:70:e4:a8:2d:38:3a:6e:4d:
eb:41:74:22:9c:d6:17:2f:b7:e9:33:3a:72:13:d1:22:67:32:
7b:df:ff:4e:1b:6d:d0:bf:86:88:3e:82:b7:21:81:af:98:4b:
02:b4:99:9b:41:92:69:ec:df:e6:ca:e2:fc:fb:24:00:a3:0e:
17:ef:55:c1:18:65:35:0a:86:44:f6:e7:58:01:59:73:bc:58:
2e:f9:4e:5b:a9:e3:ca:67:5b:12:53:55:c2:75:72:a4:5c:16:
24:cd:45:5b:4b:8c:d1:0f:b2:7d:eb:eb:e0:95:98:d9:1e:64:
f0:8a:e3:11:e1:fd:8f:7f:12:14:17:ef:24:f2:47:84:ce:0b:
50:d1:ed:6e:56:95:b6:32:0f:3a:7a:73:7f:a5:ea:de:d7:fb:
5e:ae:1d:6c:d6:3c:da:85:5c:ef:a2:a4:9f:57:cb:27:51:c7:
74:40:27:3e:68:ac:34:17:b3:a7:5f:94:23:c1:57:31:33:ad:
90:b0:31:f1:54:76:8d:25:c9:94:b4:a4:0b:c5:3f:14:a7:1f:
b1:5b:52:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:05:06 2025 by rpki-client