Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32332d3233203d3e20323638353137.roa
File: 34352e3136322e39322e302f32332d3233203d3e20323638353137.roa (raw, json)
Hash identifier: WQ/Lt2zUPhs4pGmH7UJe9TcsQSHRnYMJqfykGDaFDsk=
Subject key identifier: 2D:CA:A2:F6:53:F4:61:93:EA:68:28:7B:6F:19:20:D1:3A:98:38:F8
Certificate issuer: /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial: 5D82FA7CBB63E2BF48C8094CE28DD0FBFB40FF62
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32332d3233203d3e20323638353137.roa
Signing time: Thu 11 Apr 2024 01:29:39 +0000
ROA not before: Thu 11 Apr 2024 01:24:39 +0000
ROA not after: Thu 10 Apr 2025 01:29:39 +0000
asID: 268517
IP address blocks: 45.162.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:82:fa:7c:bb:63:e2:bf:48:c8:09:4c:e2:8d:d0:fb:fb:40:ff:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Validity
Not Before: Apr 11 01:24:39 2024 GMT
Not After : Apr 10 01:29:39 2025 GMT
Subject: CN=2DCAA2F653F46193EA68287B6F1920D13A9838F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:d4:84:17:00:cb:f4:b6:db:c7:35:66:fd:
18:30:32:23:cf:48:27:91:a7:25:c0:17:ef:11:da:
bc:b8:cd:fa:da:27:4a:1e:e4:9b:4c:58:ef:a6:d0:
2b:8a:5f:1c:37:89:8d:78:c8:f6:96:43:dc:ac:86:
53:c8:43:4c:cd:82:47:29:3c:68:61:c3:db:a7:0e:
10:ea:0b:d2:95:e0:43:57:99:f0:83:71:c7:b9:4e:
be:72:d1:8c:8a:59:48:f2:31:5e:00:1f:c1:d0:3f:
eb:d3:00:b0:45:e2:4b:f8:a8:e2:ba:5c:14:4f:0d:
67:00:96:5e:76:30:f0:0b:81:2e:04:74:74:9e:b5:
9f:42:ab:c7:ca:b7:b1:d7:d4:04:a2:24:2d:f4:74:
c5:e4:b3:2f:6e:c5:08:e2:43:82:d1:e8:17:87:f3:
6e:ea:5d:af:de:9a:32:0b:3c:22:ca:e4:39:3f:6e:
4b:62:e6:73:08:a5:f0:fa:22:a0:c1:dc:79:13:f4:
5d:27:b2:03:65:44:02:df:f6:48:88:c1:81:33:cd:
7a:fb:94:67:99:4f:21:84:13:e4:a2:a2:ac:9d:fc:
38:c1:70:68:11:e7:9e:a8:90:26:f1:fd:8e:f5:67:
43:4a:84:e1:12:93:ba:00:d3:dc:1d:d8:14:f8:46:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CA:A2:F6:53:F4:61:93:EA:68:28:7B:6F:19:20:D1:3A:98:38:F8
X509v3 Authority Key Identifier:
keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/34352e3136322e39322e302f32332d3233203d3e20323638353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.162.92.0/23
Signature Algorithm: sha256WithRSAEncryption
43:c2:ac:b8:1e:36:60:82:9a:f8:1e:32:6e:49:d9:e9:b9:25:
f9:d4:ed:f2:4b:d5:51:95:ff:ba:08:5d:52:5a:3f:16:d6:5e:
d0:3e:af:79:fc:44:ef:6f:fb:be:a6:82:c1:15:3e:01:40:f9:
1b:53:cb:80:de:f2:65:d7:23:00:cc:d1:1a:4f:7d:71:a1:8d:
bf:fa:10:46:2d:48:88:63:df:36:a8:80:fd:e2:e8:e3:55:e6:
e2:7c:b0:ba:52:a5:50:c5:73:02:ed:b4:fa:13:8c:ec:28:3d:
6c:29:c3:0d:2b:34:54:6d:64:cb:67:0f:34:8b:80:69:da:fa:
83:bd:91:da:92:0e:7b:9a:37:bd:7b:2d:80:f7:fb:9d:5b:8e:
5c:b5:f5:a6:99:68:4c:07:ee:0b:9a:1d:61:0b:25:1c:16:94:
0e:28:b0:cd:91:15:b7:72:8e:95:0e:eb:88:61:e6:5c:a2:0c:
10:77:87:a3:c6:d2:6b:b5:37:27:45:34:42:3a:cc:9f:4a:f9:
4d:f1:61:65:e5:c7:2f:c7:91:71:59:b3:7b:97:f3:8c:9d:01:
54:1f:48:b7:54:d8:87:3e:e5:65:a8:52:66:79:04:16:1a:f5:
83:fd:b9:af:e7:b8:43:7c:12:08:cb:5c:4d:db:40:e7:14:a3:
8e:6d:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:57 2025 by rpki-client