Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/34352e3139312e31372e302f32342d3234203d3e20323639363538.roa
File: 34352e3139312e31372e302f32342d3234203d3e20323639363538.roa (raw, json)
Hash identifier: nVACToQKVj3dmyJoh6N/r9kgsSg5LuTd5kgG5iCSDz0=
Subject key identifier: CB:F5:0E:28:D7:47:76:38:10:DD:83:61:91:5C:78:8F:1B:BF:BD:D0
Certificate issuer: /CN=952AC068B7B96477F85E17C379F12DD0F4D0F924
Certificate serial: 7DDC3EC249C9C393586ADD2C6CE240AA69EA94C0
Authority key identifier: 95:2A:C0:68:B7:B9:64:77:F8:5E:17:C3:79:F1:2D:D0:F4:D0:F9:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/34352e3139312e31372e302f32342d3234203d3e20323639363538.roa
Signing time: Tue 05 Mar 2024 00:20:42 +0000
ROA not before: Tue 05 Mar 2024 00:15:42 +0000
ROA not after: Tue 04 Mar 2025 00:20:42 +0000
asID: 269658
IP address blocks: 45.191.17.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:dc:3e:c2:49:c9:c3:93:58:6a:dd:2c:6c:e2:40:aa:69:ea:94:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=952AC068B7B96477F85E17C379F12DD0F4D0F924
Validity
Not Before: Mar 5 00:15:42 2024 GMT
Not After : Mar 4 00:20:42 2025 GMT
Subject: CN=CBF50E28D747763810DD8361915C788F1BBFBDD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:32:1c:e3:57:7c:14:d4:b2:ff:59:bf:e7:
ea:8c:0c:4c:4f:0f:61:a6:89:9b:92:d8:9a:91:4c:
f5:24:7e:9a:cc:13:1d:d4:cc:56:71:81:87:7d:5e:
0a:b4:84:1f:78:a2:67:f9:4f:d5:e4:8d:7b:b3:30:
ac:9d:d3:32:e0:d9:a8:c3:4d:cd:1d:4a:1b:ea:9e:
62:0d:ad:1f:b9:77:ad:2d:06:91:38:59:41:55:86:
34:85:1d:a3:0f:4b:15:cc:e6:dd:62:66:b9:63:bd:
ca:3a:21:be:4f:72:97:f6:e7:be:74:8a:f2:7c:c2:
99:17:9b:32:c4:d0:f9:db:c5:e6:8f:43:2e:a2:71:
b9:10:88:24:96:be:a0:06:bb:c8:d8:0a:21:90:c2:
05:58:d3:b5:9f:4c:e6:6c:ef:27:48:3f:93:8a:91:
cc:b7:ad:dd:b6:54:17:16:9f:98:a1:4a:75:01:e0:
47:9d:33:8e:63:f6:e8:03:e1:89:95:c1:d4:22:83:
3c:4e:8a:68:5b:22:b3:86:93:68:e0:3a:fc:bd:49:
8f:53:d0:df:5a:02:b9:c4:3f:28:b8:49:09:c3:e1:
77:08:e7:4a:be:90:9b:7a:dd:8b:3d:43:08:20:2c:
00:50:19:2e:ba:1b:bb:b9:4c:99:ca:b7:6d:b0:3a:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F5:0E:28:D7:47:76:38:10:DD:83:61:91:5C:78:8F:1B:BF:BD:D0
X509v3 Authority Key Identifier:
keyid:95:2A:C0:68:B7:B9:64:77:F8:5E:17:C3:79:F1:2D:D0:F4:D0:F9:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952AC068B7B96477F85E17C379F12DD0F4D0F924.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gg15tQ41MhyNqmDwAMxEtXLK6MfaMPYddHbwE1aSzeUB/0/34352e3139312e31372e302f32342d3234203d3e20323639363538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.17.0/24
Signature Algorithm: sha256WithRSAEncryption
94:27:a0:59:f4:64:cf:f2:5e:ad:03:1e:eb:39:da:d5:c6:cf:
d8:14:09:3e:a8:35:bc:9d:a5:b0:7d:81:75:f1:60:57:9c:b4:
74:78:7e:8e:9a:41:79:ca:a4:18:c2:ee:b6:5f:26:e0:7a:24:
62:1d:bc:02:b6:c6:00:ea:97:11:0d:54:0d:9c:61:ce:ff:d8:
a1:d6:cb:6b:a7:a1:44:4a:bd:65:c6:3d:16:04:5c:be:d0:6c:
4c:c8:8b:aa:81:35:2c:5e:02:a0:c8:13:49:b4:25:73:d9:74:
6d:5d:15:e3:af:c1:54:e4:e1:fa:44:6d:fe:5b:0d:90:f9:36:
fb:aa:7b:8a:89:1b:0e:d6:b5:f8:f8:54:c5:be:8a:ec:f0:bc:
87:83:3a:05:46:35:ca:c4:49:d5:9b:6c:80:00:2b:d0:5d:30:
40:86:63:52:c3:dc:68:93:cd:95:06:50:4f:81:3f:fd:10:41:
24:20:9c:f5:d5:21:0f:4d:77:85:31:bd:b5:07:2d:2e:db:d0:
ef:bf:46:fd:0e:8f:3e:69:70:42:ae:59:2d:e6:ee:6c:38:da:
3b:21:f0:b4:a9:ac:8a:f1:a0:7f:51:76:fc:b6:cd:c0:0c:98:
bd:bb:d0:fb:de:e8:44:5e:af:12:fd:5c:36:e4:b0:8c:10:71:
53:a1:4a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org