Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa
File: 34352e37302e3233322e302f32322d3234203d3e20323632323732.roa (raw, json)
Hash identifier: R/cV3lcx6U9yIg14vBbv5sDAYBzSIieEkTxlVZgbcTM=
Subject key identifier: 28:B9:BA:9A:99:2B:A8:06:39:26:37:43:EB:9D:AD:0D:01:18:3B:24
Certificate issuer: /CN=0234F91A291644025C2C2460D355272A046B58DD
Certificate serial: 729729F553EEF6059AD7DDAA5FE58EFEE52474B0
Authority key identifier: 02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa
Signing time: Mon 22 Jul 2024 18:02:15 +0000
ROA not before: Mon 22 Jul 2024 17:57:15 +0000
ROA not after: Mon 21 Jul 2025 18:02:15 +0000
asID: 262272
IP address blocks: 45.70.232.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:97:29:f5:53:ee:f6:05:9a:d7:dd:aa:5f:e5:8e:fe:e5:24:74:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0234F91A291644025C2C2460D355272A046B58DD
Validity
Not Before: Jul 22 17:57:15 2024 GMT
Not After : Jul 21 18:02:15 2025 GMT
Subject: CN=28B9BA9A992BA80639263743EB9DAD0D01183B24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0f:ef:49:af:2b:43:13:8f:e8:ed:52:19:ae:
50:68:15:81:66:6d:55:86:92:af:f6:31:e9:06:51:
e6:13:8e:18:89:21:c9:3e:98:41:e5:a0:4c:9d:1a:
53:46:fd:d9:62:f7:ff:37:89:64:55:57:5f:73:67:
47:e8:df:2c:b3:8b:06:43:88:09:6c:55:fc:2e:31:
2b:e0:73:94:86:b5:2c:55:df:e4:fd:8c:6e:9f:f2:
56:ba:57:5b:f9:04:60:b5:7f:47:2c:e6:47:61:b6:
00:36:69:27:36:78:8f:8e:ca:82:e2:5a:0a:3a:80:
b2:29:27:c7:16:4d:43:f4:e3:0e:1b:e1:0a:52:1c:
de:48:eb:f6:79:58:1c:58:e0:04:ce:b0:fd:56:14:
ec:5a:0f:78:ec:7c:1f:94:5d:55:7f:66:3c:84:95:
81:67:86:ac:3a:7c:cc:7b:52:74:95:01:0f:75:3e:
ab:3f:8c:df:c3:bf:60:e5:d6:71:87:d1:cf:04:cf:
d5:cd:5e:eb:c9:fd:d0:03:df:20:86:86:98:a5:aa:
2d:c6:2e:1e:52:b3:95:3a:57:81:9c:66:04:26:7f:
ea:71:21:9b:9d:8f:32:64:e9:d8:ad:56:0b:aa:cf:
a2:dc:5d:b7:1d:19:8d:a2:1a:01:ad:16:e0:66:c2:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B9:BA:9A:99:2B:A8:06:39:26:37:43:EB:9D:AD:0D:01:18:3B:24
X509v3 Authority Key Identifier:
keyid:02:34:F9:1A:29:16:44:02:5C:2C:24:60:D3:55:27:2A:04:6B:58:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/0234F91A291644025C2C2460D355272A046B58DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0234F91A291644025C2C2460D355272A046B58DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/2/34352e37302e3233322e302f32322d3234203d3e20323632323732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.70.232.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:86:ff:48:2e:70:f5:ec:ec:0d:ac:24:3f:ef:f3:20:2c:67:
a7:93:cf:6b:d5:f4:b6:b0:21:f1:3d:c8:8d:f9:e1:c4:5c:b7:
72:6f:92:5c:b8:9f:cc:11:6b:e1:80:37:ae:9e:96:dd:86:75:
5a:99:ad:47:4b:27:5c:14:30:1a:1e:f2:9d:31:8a:49:7c:51:
69:18:98:d8:46:b0:66:b0:97:d4:8c:a2:a0:44:0e:2c:50:f1:
85:ef:fb:45:ed:ef:91:87:cd:59:1b:ec:10:af:6d:81:e3:3c:
2d:68:b8:da:5e:cb:87:c9:5e:76:a4:c9:0e:c1:f0:1e:ec:9c:
b6:1c:2d:c4:23:8b:50:d6:e8:4b:79:fe:a8:74:b9:33:6d:a8:
21:b9:1e:51:40:92:99:94:8b:93:84:20:e9:a9:a1:6d:43:95:
47:96:5e:61:d3:e7:9c:46:92:23:a9:dc:01:d9:6e:33:de:72:
6b:8b:e6:2c:2f:43:e7:04:e5:f4:e9:86:cd:22:af:20:d6:65:
89:25:95:4b:38:95:b6:03:b8:ca:3c:4d:05:8c:85:39:e4:a9:
ec:9e:91:8d:d3:f9:41:bd:bd:e4:74:69:47:d1:fa:8f:90:b7:
f1:81:2d:fb:75:95:59:3d:95:26:b3:11:f0:d4:55:05:9d:84:
13:b5:e2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:42:43 2025 by rpki-client