Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e31302e302f32342d3234203d3e20323639363938.roa
File: 34352e3139312e31302e302f32342d3234203d3e20323639363938.roa (raw, json)
Hash identifier: cZFIM5mhGB6FegVrwt1gESP4ogiMRgP5XDS1LCCPrN0=
Subject key identifier: 5A:70:27:2C:6A:C2:72:A5:B8:6C:D1:30:FA:60:28:3A:80:36:CB:B3
Certificate issuer: /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial: 11C38754A627D92A0883C4F76842230B3FCD082F
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e31302e302f32342d3234203d3e20323639363938.roa
Signing time: Tue 23 Jan 2024 14:20:16 +0000
ROA not before: Tue 23 Jan 2024 14:15:16 +0000
ROA not after: Tue 21 Jan 2025 14:20:16 +0000
asID: 269698
IP address blocks: 45.191.10.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:c3:87:54:a6:27:d9:2a:08:83:c4:f7:68:42:23:0b:3f:cd:08:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Validity
Not Before: Jan 23 14:15:16 2024 GMT
Not After : Jan 21 14:20:16 2025 GMT
Subject: CN=5A70272C6AC272A5B86CD130FA60283A8036CBB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8f:ce:4e:cb:35:a4:ac:98:5e:5c:49:15:cc:
d9:ce:24:4c:84:70:f2:81:7e:cb:e0:b3:61:16:10:
3e:84:68:3d:7d:98:b3:67:90:72:e5:c6:8c:9d:18:
99:7f:3e:e0:25:cc:15:c6:2d:e5:a0:49:fb:45:d4:
8b:d2:4e:b6:fe:15:25:b4:c0:a3:ca:bb:71:95:ef:
68:09:c9:c9:74:c8:39:28:b4:33:a1:e6:bf:10:fa:
5f:37:63:65:a9:51:4b:07:14:65:5e:59:79:1e:20:
4f:90:90:f3:37:97:07:00:64:35:58:d6:e5:02:89:
0c:2d:6b:bc:a8:30:9f:cc:8f:0d:97:ee:e3:64:6d:
e0:ec:60:92:74:a2:c6:38:01:84:2e:7e:31:b3:e4:
72:ff:00:1b:7a:cd:42:b5:63:80:f5:64:91:56:13:
e6:b0:76:16:bd:30:ea:c8:ff:62:14:bb:34:c3:30:
0f:57:59:bd:3c:74:d7:7d:95:ee:b1:ab:b8:3f:11:
08:e6:cf:31:f5:a2:e5:56:af:b7:a7:69:3d:01:bb:
39:23:11:44:ed:ee:0b:09:10:a0:93:80:f2:39:a6:
82:f8:ef:db:fd:0b:e6:47:6c:ab:06:34:29:15:51:
14:d1:a4:5d:0a:b9:2c:f8:f5:e7:40:52:30:d3:28:
ee:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:70:27:2C:6A:C2:72:A5:B8:6C:D1:30:FA:60:28:3A:80:36:CB:B3
X509v3 Authority Key Identifier:
keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e31302e302f32342d3234203d3e20323639363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.10.0/24
Signature Algorithm: sha256WithRSAEncryption
28:78:28:3e:6d:01:c2:e4:63:e6:0d:7e:2b:3f:af:4a:57:93:
54:e6:50:bb:e3:6a:23:0c:50:d5:e4:b6:f0:ec:3a:40:ab:55:
32:b3:c0:1a:17:eb:dd:27:bc:14:63:bc:bb:d4:c2:9e:86:13:
cc:95:31:b1:12:41:10:c0:30:3b:51:95:4c:24:30:a4:37:72:
42:86:c2:0d:e0:97:79:06:b0:d8:d4:40:60:01:93:af:53:d6:
ab:08:ab:7c:5b:ff:cf:04:98:e0:c2:8c:e7:94:c4:29:4c:02:
34:f3:b9:38:dc:5b:e9:15:d6:c5:e0:b9:d3:dc:eb:62:c5:f5:
55:2d:5f:08:ce:6e:44:b9:7d:67:ec:b0:68:38:38:6f:3e:11:
89:aa:5e:f3:93:99:72:23:46:b4:e1:7e:fd:cd:44:ee:26:12:
fc:98:65:94:b8:77:0f:90:64:cf:aa:c2:77:b0:f1:50:4c:6c:
81:96:16:3a:79:17:d0:96:b7:da:ad:81:b7:f1:b9:79:2b:08:
b3:e0:a0:6c:c1:27:9f:d7:85:06:2e:d1:d9:fe:a9:05:3a:2f:
76:31:00:21:2b:93:30:4a:68:01:f2:e7:ef:f4:05:55:21:87:
25:fd:6d:71:81:da:e1:f5:f0:bd:e2:03:97:07:35:a2:42:36:
6a:fd:cf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:23 2025 by rpki-client