Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/34352e3139312e31362e302f32332d3233203d3e20323639363538.roa
File: 34352e3139312e31362e302f32332d3233203d3e20323639363538.roa (raw, json)
Hash identifier: L0Wnk4MXb/nda2UpMwKlQ6ciW8YKKFVWD+UULdivpSI=
Subject key identifier: 72:D6:38:91:98:6A:B8:EA:E8:19:C2:34:61:FE:62:EF:0C:7F:EB:C0
Certificate issuer: /CN=952AC068B7B96477F85E17C379F12DD0F4D0F924
Certificate serial: 20B97A7FEB133A9871342F7DFE2E8AD176C8DBE5
Authority key identifier: 95:2A:C0:68:B7:B9:64:77:F8:5E:17:C3:79:F1:2D:D0:F4:D0:F9:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/34352e3139312e31362e302f32332d3233203d3e20323639363538.roa
Signing time: Tue 05 Mar 2024 00:20:38 +0000
ROA not before: Tue 05 Mar 2024 00:15:38 +0000
ROA not after: Tue 04 Mar 2025 00:20:38 +0000
asID: 269658
IP address blocks: 45.191.16.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b9:7a:7f:eb:13:3a:98:71:34:2f:7d:fe:2e:8a:d1:76:c8:db:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952AC068B7B96477F85E17C379F12DD0F4D0F924
Validity
Not Before: Mar 5 00:15:38 2024 GMT
Not After : Mar 4 00:20:38 2025 GMT
Subject: CN=72D63891986AB8EAE819C23461FE62EF0C7FEBC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:18:4d:8a:86:2d:c4:c5:da:39:70:ee:13:7e:
c4:c4:95:b9:a2:a1:03:85:c3:06:77:86:d2:fb:5e:
b6:35:2d:22:9c:d3:f6:9c:a5:21:03:22:21:d5:b3:
37:8e:e5:78:43:59:37:dd:50:14:f6:24:20:a9:17:
df:a4:ee:b8:60:4b:fe:a5:5f:7d:15:16:31:e9:8e:
2b:a1:8a:9e:a7:fe:bc:4f:54:e9:d2:7e:94:12:7c:
83:05:ee:4c:db:6d:39:ee:a1:3b:9c:06:fd:33:20:
93:15:fe:de:6c:d9:c1:d0:5a:4b:18:2d:42:20:24:
d6:ce:fe:90:92:e7:26:13:f0:5b:4f:62:a1:7c:d5:
1e:58:cf:ea:5f:36:eb:19:25:c9:98:6d:8d:af:7d:
ec:35:42:df:6a:bf:13:7f:48:f2:37:35:c9:ea:00:
99:9d:a6:cd:4e:d1:74:b0:0c:bc:c7:96:17:0c:6b:
0f:21:59:02:6b:39:bc:c0:4e:d6:17:08:e4:2e:26:
46:19:c0:20:14:b5:ae:55:d2:40:17:89:18:64:ab:
8b:40:3b:cf:02:2a:a4:24:91:e8:c7:af:16:bf:10:
c2:48:fd:19:ae:91:56:bc:7e:f1:ae:38:b6:b1:ad:
51:0c:e8:1a:6e:57:18:7a:4a:96:78:a2:ee:48:bd:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D6:38:91:98:6A:B8:EA:E8:19:C2:34:61:FE:62:EF:0C:7F:EB:C0
X509v3 Authority Key Identifier:
keyid:95:2A:C0:68:B7:B9:64:77:F8:5E:17:C3:79:F1:2D:D0:F4:D0:F9:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/34352e3139312e31362e302f32332d3233203d3e20323639363538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.16.0/23
Signature Algorithm: sha256WithRSAEncryption
53:cb:90:78:a8:f5:61:59:4d:2e:8a:d8:62:00:2d:7e:84:3b:
9a:1f:ab:d5:78:fa:d0:c1:75:11:12:12:86:e5:ad:32:1c:eb:
75:41:e5:cc:78:36:3b:ee:90:cb:6d:63:9f:c0:9b:54:16:51:
24:ad:4e:62:9d:d2:6a:e4:8c:eb:27:3e:83:ef:cd:4e:53:bd:
f8:1b:eb:d4:5f:e5:df:00:08:f7:11:96:4d:a2:68:30:cb:32:
a1:38:bf:88:09:af:5d:0b:ec:d4:fa:6b:ed:b1:1c:4f:bc:cf:
01:d5:e7:8d:0b:d9:2c:c4:19:b8:31:38:e9:1b:1b:06:f6:69:
d4:ba:06:ce:52:0e:2a:31:be:a1:cb:d0:ef:c5:29:53:e6:47:
fa:27:c7:f9:6b:bb:07:05:d7:41:72:dc:94:6a:a2:50:cb:eb:
1a:5c:f3:f3:7f:4a:58:96:14:4d:37:00:08:74:57:88:01:e2:
64:7e:d6:e5:a1:f1:8e:3e:dc:2e:64:a1:96:ba:f8:54:38:b2:
63:a3:3b:c3:e8:0e:68:72:64:4b:3d:3d:69:59:18:09:5f:13:
2d:a5:c2:49:05:fe:46:f2:1b:76:6a:9d:10:3b:52:56:45:ec:
9e:1a:65:3d:fd:7a:92:eb:a6:09:49:75:28:ca:4c:2b:82:58:
2d:00:34:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:34:08 2025 by rpki-client