Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137332e302f32342d3234203d3e20323636353931.roa
File: 34352e372e3137332e302f32342d3234203d3e20323636353931.roa (raw, json)
Hash identifier: HStnNwuBW017ZrS4zPbsvlHMcKbDjT7dN+wCVlJpywg=
Subject key identifier: 95:4A:1F:8F:19:7E:F2:E6:A7:E4:FD:7A:8D:A0:2E:FE:31:9F:C1:9D
Certificate issuer: /CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
Certificate serial: 43B26ADA36840CD69505F6EC3254E7D92953F10C
Authority key identifier: DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137332e302f32342d3234203d3e20323636353931.roa
Signing time: Tue 17 Oct 2023 17:41:52 +0000
ROA not before: Tue 17 Oct 2023 17:36:52 +0000
ROA not after: Tue 15 Oct 2024 17:41:52 +0000
asID: 266591
IP address blocks: 45.7.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b2:6a:da:36:84:0c:d6:95:05:f6:ec:32:54:e7:d9:29:53:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC357FEDFFB446880B11B0B151C1736AD4C40D96
Validity
Not Before: Oct 17 17:36:52 2023 GMT
Not After : Oct 15 17:41:52 2024 GMT
Subject: CN=954A1F8F197EF2E6A7E4FD7A8DA02EFE319FC19D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:e1:fa:31:07:78:6d:fa:c6:f4:91:e3:50:
4b:37:8b:57:37:2d:7d:b6:c0:ee:3d:df:a7:f3:88:
d0:ee:a6:32:dd:a3:03:f2:b9:ad:5e:cb:e5:c0:88:
13:7a:76:24:b7:6b:7b:af:c0:b3:dc:c0:e4:63:2a:
8b:b6:5c:ef:b4:3c:fe:b7:df:20:1b:2a:30:d4:7e:
19:e3:d1:ac:b4:ad:29:f2:ad:d2:d2:0c:1b:71:92:
71:f8:74:8e:73:75:01:11:ce:15:82:72:b0:8e:15:
3e:28:f3:92:55:36:a4:07:e8:4c:f5:5b:57:c7:b7:
03:a1:c9:31:9b:6b:58:c4:7d:fc:88:b3:20:ce:b9:
c5:9e:1d:1a:56:14:64:16:11:ba:78:94:9f:96:f7:
21:d1:3e:0e:83:d2:5b:a0:71:92:bb:fa:f9:93:2e:
55:cc:80:1e:ac:cb:2a:ec:f2:d8:42:73:76:f0:39:
b5:d0:dd:01:b3:48:0c:44:e1:ab:14:e5:28:eb:5a:
98:64:fc:e5:74:26:16:3f:a7:69:ca:0f:e8:89:94:
ae:ae:fc:07:9a:cc:ae:97:f3:ae:f0:a6:75:e5:c6:
17:3f:12:dc:99:51:5e:3f:b4:61:ca:3b:0b:eb:f2:
c9:34:5d:e6:6e:04:4c:c8:6d:fd:7f:f2:96:97:17:
5f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4A:1F:8F:19:7E:F2:E6:A7:E4:FD:7A:8D:A0:2E:FE:31:9F:C1:9D
X509v3 Authority Key Identifier:
keyid:DC:35:7F:ED:FF:B4:46:88:0B:11:B0:B1:51:C1:73:6A:D4:C4:0D:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC357FEDFFB446880B11B0B151C1736AD4C40D96.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GTF5hxR3JrSVcAhgxb3WTSqNHbRbRA56PzEh6qkLGjBS/0/34352e372e3137332e302f32342d3234203d3e20323636353931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:b7:4c:d1:e5:d1:72:d9:ac:ad:e2:a0:9e:bc:15:0f:cd:f3:
40:03:65:cd:28:57:78:e2:e9:f4:81:9e:20:96:c6:93:2e:66:
19:f2:49:3e:f7:f8:a2:d4:4d:aa:39:b9:df:e4:20:34:2f:b4:
a0:ce:3c:a9:6f:f3:ba:53:fc:9d:b5:c5:ba:27:de:ea:19:54:
87:99:78:a8:e3:ad:16:58:6f:c4:a0:05:42:99:e6:aa:7b:89:
06:35:17:ba:fe:b0:18:86:c5:55:91:5f:86:ee:83:4f:39:c0:
b8:30:6a:f1:29:7a:8d:38:e3:d4:f4:cd:ca:cd:d0:56:30:d5:
27:a2:37:6a:53:e8:b2:d3:f2:78:9d:d5:fd:d6:d2:5d:91:aa:
cf:3d:ec:2f:64:30:8d:0a:cd:6d:cf:ea:af:e6:a7:9b:ac:d0:
5a:5e:e2:62:69:47:63:28:fd:59:e2:47:89:dd:58:a6:11:e9:
29:a4:bf:fa:e7:9d:5c:c0:9b:02:c8:f2:80:16:6b:5f:1f:7f:
90:de:58:e8:c7:18:2d:62:4e:b8:a7:96:de:fb:fa:a3:a1:ff:
de:a6:5a:b7:49:ed:fe:ca:33:de:c1:3a:25:2d:74:87:6e:ca:
47:04:b1:16:5d:b7:2a:6a:04:5f:98:1f:05:4b:e5:81:5c:c8:
6f:3a:de:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:16:22 2025 by rpki-client