Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32342d3234203d3e20323639363938.roa
File: 34352e3139312e382e302f32342d3234203d3e20323639363938.roa (raw, json)
Hash identifier: 1XioyKmgykB6EX0txIC1nBJyTRiXtAbeQrNvbQZRTdk=
Subject key identifier: 42:D6:D3:1A:E9:83:83:14:1C:27:D0:3D:EE:B7:E5:E7:BB:2C:61:54
Certificate issuer: /CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Certificate serial: 5AEF22440E37B9FBC3F3B148A4BB5D1C8CABA155
Authority key identifier: BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32342d3234203d3e20323639363938.roa
Signing time: Tue 23 Jan 2024 14:19:58 +0000
ROA not before: Tue 23 Jan 2024 14:14:58 +0000
ROA not after: Tue 21 Jan 2025 14:19:58 +0000
asID: 269698
IP address blocks: 45.191.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ef:22:44:0e:37:b9:fb:c3:f3:b1:48:a4:bb:5d:1c:8c:ab:a1:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BB64C0B7C1F0513688929835AE908C21A765C4E3
Validity
Not Before: Jan 23 14:14:58 2024 GMT
Not After : Jan 21 14:19:58 2025 GMT
Subject: CN=42D6D31AE98383141C27D03DEEB7E5E7BB2C6154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:87:ae:db:2e:7b:5a:bb:f1:d8:a4:97:20:f0:
3f:2a:42:98:fe:2b:37:b4:32:2a:7a:9f:34:04:d4:
db:e9:a9:be:ef:31:95:b7:89:4c:5c:d5:bf:3e:76:
7a:b7:f2:23:0a:6d:d7:7b:01:d1:f3:d4:77:bd:46:
61:68:ee:09:d1:96:f5:f8:02:9f:5e:d2:90:a3:e1:
c3:2e:64:0a:a5:59:3e:13:44:09:5b:60:75:0a:4c:
30:3a:16:74:22:77:d9:a3:e8:72:83:1a:16:eb:79:
33:85:f0:6b:8d:3e:25:48:21:98:64:42:67:b9:42:
9c:23:a9:28:72:73:a1:a9:af:c2:61:9b:01:6f:a0:
33:5c:fa:3c:e1:c9:50:6f:79:f9:fb:8b:44:ff:f5:
6c:7a:f7:26:e3:8d:29:41:6c:0b:1f:ee:7a:12:43:
52:bb:df:07:38:d0:f4:ca:ef:56:1c:11:bc:76:a4:
71:68:4c:0a:24:99:66:bf:c7:60:3b:5d:3a:ed:a5:
2f:50:8d:99:83:44:44:a2:c1:7a:aa:d8:37:91:57:
01:1b:4e:ff:57:9c:fa:54:98:b2:99:c8:7d:82:ee:
8c:6b:9b:29:60:60:97:6b:9d:a5:1b:0d:92:5a:d4:
93:a0:eb:50:0a:2c:e1:40:d1:d2:d3:e9:33:63:e5:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D6:D3:1A:E9:83:83:14:1C:27:D0:3D:EE:B7:E5:E7:BB:2C:61:54
X509v3 Authority Key Identifier:
keyid:BB:64:C0:B7:C1:F0:51:36:88:92:98:35:AE:90:8C:21:A7:65:C4:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BB64C0B7C1F0513688929835AE908C21A765C4E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HhbPkvDDk6AkAP8kgdaNuT6WuhibF1PLQQh4DdS5wqTK/0/34352e3139312e382e302f32342d3234203d3e20323639363938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.191.8.0/24
Signature Algorithm: sha256WithRSAEncryption
71:e2:95:da:06:58:73:9f:2b:9a:00:9e:18:db:31:4d:3f:45:
7b:13:ae:84:a4:eb:74:a6:c8:f9:53:4c:73:89:3a:ad:e8:5e:
ec:34:21:c8:aa:f7:63:1a:54:0a:78:8d:1c:95:ba:dc:08:da:
df:38:84:16:77:4c:57:35:9c:c7:fc:0b:e5:ef:ae:3e:36:f3:
9f:bd:33:b5:63:31:e4:71:bd:91:6e:d5:43:3e:03:05:87:03:
e5:6d:4d:63:22:f4:55:2f:04:09:37:2b:10:2b:9a:bc:cd:b3:
e6:41:3b:51:9b:0c:10:46:48:ab:ab:1e:55:d7:71:12:57:93:
17:2a:b7:a0:cd:cc:d5:55:a3:6e:3d:c3:3d:0d:64:c5:c1:95:
6d:4f:49:17:56:0f:f8:ef:0c:ad:a2:b4:14:24:6c:b2:0c:23:
88:1d:f8:7b:4d:7a:19:30:72:36:1c:0e:33:87:c7:5e:b4:ba:
87:18:c3:dc:c6:05:63:94:4f:a7:52:fc:dd:5a:4d:e1:80:12:
e1:e2:0b:76:e1:d2:bd:b8:f4:c8:ff:1d:89:68:05:9d:a2:52:
c2:b9:8a:90:9b:35:c9:f9:f2:f4:e1:f4:8c:0f:02:a6:97:ed:
a1:b8:6c:0e:57:f0:86:cd:86:87:92:a1:d6:ae:a8:70:ab:f2:
b1:ae:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:51:17 2025 by rpki-client