Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/34352e3136342e34302e302f32342d3234203d3e20323731373531.roa
File: 34352e3136342e34302e302f32342d3234203d3e20323731373531.roa (raw, json)
Hash identifier: PDs75Gn6YsxcIYD9QbxaMZUz+KucYOAVwaJ4s9vMak0=
Subject key identifier: AF:27:5F:71:3D:A7:27:4C:A8:98:46:94:27:DB:91:E2:77:B3:DA:24
Certificate issuer: /CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA
Certificate serial: 0D50916D6F4EABB5B1EB6BD129D60FBDD10B0450
Authority key identifier: D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/34352e3136342e34302e302f32342d3234203d3e20323731373531.roa
Signing time: Fri 29 Nov 2024 13:28:55 +0000
ROA not before: Fri 29 Nov 2024 13:23:55 +0000
ROA not after: Fri 28 Nov 2025 13:28:55 +0000
asID: 271751
IP address blocks: 45.164.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:50:91:6d:6f:4e:ab:b5:b1:eb:6b:d1:29:d6:0f:bd:d1:0b:04:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA
Validity
Not Before: Nov 29 13:23:55 2024 GMT
Not After : Nov 28 13:28:55 2025 GMT
Subject: CN=AF275F713DA7274CA898469427DB91E277B3DA24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:62:ae:bf:b9:71:00:bf:8e:c8:de:c1:d8:
34:e9:8d:5b:66:85:8f:44:ad:5e:31:b5:55:94:5d:
a4:af:52:7a:db:10:04:72:a7:5b:b2:1c:3a:f7:43:
28:7c:6a:a5:77:be:79:fc:16:be:aa:8b:e6:e0:f8:
ed:13:0b:99:cb:20:15:df:ba:59:dc:c8:dc:f6:19:
67:4c:3b:0a:16:6a:59:3d:05:b6:fd:a5:aa:ad:c7:
85:d4:78:2c:3b:d3:62:0f:58:41:96:45:b9:69:e5:
c3:82:0e:20:1b:fc:71:b6:04:70:34:ed:b4:ec:59:
d7:4e:fe:56:bf:e2:06:b5:f5:3e:7d:bb:32:d4:e2:
b1:cc:74:e8:78:43:ab:f1:cf:12:31:9f:9e:08:f1:
9e:f3:96:b0:bc:75:73:bf:c1:91:6b:1a:26:b9:ab:
f3:2b:dc:49:2c:37:a9:7d:92:83:7f:1c:9f:bd:3a:
0c:cd:ee:05:e3:01:66:95:a8:c7:9c:c4:24:6b:0f:
84:8d:e5:8c:ba:62:ce:d9:48:0c:fd:38:2a:f0:c1:
44:de:a9:8d:8e:c0:d4:7a:00:79:67:96:52:73:c7:
a4:cd:af:b9:56:f7:d8:3a:ac:d9:0c:6b:5a:28:c5:
14:4a:65:a8:be:2d:7b:2a:e3:de:ce:d3:87:b6:17:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:5F:71:3D:A7:27:4C:A8:98:46:94:27:DB:91:E2:77:B3:DA:24
X509v3 Authority Key Identifier:
keyid:D9:3E:5A:3D:61:92:A3:29:B1:CC:3A:94:3D:36:A0:A9:C5:CA:1E:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D93E5A3D6192A329B1CC3A943D36A0A9C5CA1EEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZ3WfjPuG8ZMBd9rVEyexzh5mt2VgUkGSAZh8C5Cq4gv/1/34352e3136342e34302e302f32342d3234203d3e20323731373531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.164.40.0/24
Signature Algorithm: sha256WithRSAEncryption
70:27:56:23:37:65:d0:90:e5:b4:a9:33:64:f7:8d:69:a3:a4:
e0:b3:a2:a1:94:d2:76:a6:87:2f:24:e9:c2:ab:f8:32:1d:8c:
f9:40:46:c3:3d:e9:73:1f:bd:bb:1a:31:88:9d:6d:d1:f8:69:
e9:34:13:37:70:42:e5:fb:62:bf:98:80:74:d8:43:d8:8d:5c:
33:87:16:e7:30:a4:e9:14:4f:79:66:9c:c5:b1:cc:16:34:e3:
a0:fe:53:b5:7b:a3:27:1c:af:69:50:4d:2f:99:12:85:b3:51:
f6:af:4a:fc:e4:ca:72:73:35:ec:e3:59:7e:73:47:8b:76:18:
54:02:fc:93:fa:7b:10:c8:51:38:6b:5c:aa:1e:4b:77:0b:53:
9d:d0:45:86:1b:91:b4:f4:5e:2d:f9:19:94:d2:e2:1f:5b:b8:
d5:69:5c:a5:35:ae:8b:2b:3a:ef:68:73:35:fd:97:bd:75:cf:
6b:51:49:2b:1f:19:ed:c7:50:90:e4:69:58:ee:91:f1:75:03:
7b:c2:ef:8f:e2:2f:ba:d5:52:af:8f:d5:1b:6b:f9:0f:e6:41:
c1:ec:81:38:c2:2f:1a:7d:8c:da:6c:2d:6c:f4:59:16:01:fe:
5e:64:7b:93:4f:61:63:ee:bb:89:59:3d:0c:2a:de:20:57:8d:
b3:e3:c1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:49:38 2025 by rpki-client