Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232342e302f32322d3232203d3e203238353938.roa
File: 34352e3137392e3232342e302f32322d3232203d3e203238353938.roa (raw, json)
Hash identifier: JFCSlIkTDPoA8xbi30OlrufZZ4FlM9E2fOf8BEC9XB8=
Subject key identifier: 84:F6:F5:04:24:12:87:35:C2:D2:6E:02:55:E6:7D:AA:95:AF:D7:0B
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 14A60A9C22369E2FFB6411ACC3EFBD4FF20B5EDC
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232342e302f32322d3232203d3e203238353938.roa
Signing time: Wed 29 Nov 2023 12:19:35 +0000
ROA not before: Wed 29 Nov 2023 12:14:35 +0000
ROA not after: Wed 27 Nov 2024 12:19:35 +0000
asID: 28598
IP address blocks: 45.179.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a6:0a:9c:22:36:9e:2f:fb:64:11:ac:c3:ef:bd:4f:f2:0b:5e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Nov 29 12:14:35 2023 GMT
Not After : Nov 27 12:19:35 2024 GMT
Subject: CN=84F6F50424128735C2D26E0255E67DAA95AFD70B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:81:44:16:a4:13:89:9f:c8:1c:5b:f9:f2:8d:
b1:40:8c:7d:5f:f5:46:53:df:d1:98:b8:3c:98:b0:
bd:38:16:36:98:39:30:3f:ba:88:fc:28:e3:ee:cc:
f1:e9:ad:b0:e6:5d:50:91:ee:46:8b:f3:0f:a1:e8:
3a:fe:d3:d1:a5:64:13:9f:d1:0d:83:ea:40:b3:95:
39:55:91:c0:ef:10:6b:f5:51:e5:7e:d2:bb:e4:b1:
c0:8f:6e:68:08:ba:48:13:e5:90:03:9f:36:83:dc:
b7:e0:9a:eb:fd:58:9c:43:c6:38:d7:8b:77:ed:52:
f1:3c:dd:e4:bb:ef:f2:50:21:0f:78:b1:c7:fe:4c:
c0:15:ea:ef:a3:ea:5c:4a:85:c5:c0:88:e9:ec:37:
3b:bf:ce:c4:23:e9:e9:2b:ef:91:de:53:37:77:5b:
72:4a:af:07:ed:fb:40:3b:aa:81:ca:17:37:61:f9:
a2:7b:ec:f9:b6:2f:a0:1c:3a:9d:96:8e:c4:4f:04:
f0:37:3b:b0:a4:d5:7c:e3:75:33:48:f3:31:91:53:
97:56:f1:85:ff:a9:1d:d3:c1:72:63:7d:d9:a4:18:
c9:be:94:49:67:0b:7c:ab:69:24:57:5f:86:c0:de:
2a:bd:b2:aa:2a:47:ec:a1:5d:66:37:ec:56:3c:df:
af:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F6:F5:04:24:12:87:35:C2:D2:6E:02:55:E6:7D:AA:95:AF:D7:0B
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/34352e3137392e3232342e302f32322d3232203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.179.224.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:86:e7:7c:20:38:71:d6:67:2d:de:bb:1b:4b:7f:c6:68:53:
d3:4a:2e:20:73:6e:5e:17:88:ab:7e:eb:a2:be:bd:52:f8:0f:
e5:6f:8a:30:90:35:f2:8d:55:6f:f7:49:01:e7:9a:01:46:dc:
cb:10:4c:a1:ad:1c:c1:fa:33:9b:b9:11:bb:fc:6c:b1:b3:62:
5f:b3:06:3e:a0:f0:d5:82:8a:87:5c:8f:0c:33:9f:72:54:d9:
74:b3:e9:e0:58:52:a9:e8:54:95:f3:b5:f4:a5:43:cb:4c:a2:
fa:dd:de:2e:12:d2:5e:c0:a8:49:d8:9f:bb:9a:02:ed:1d:af:
ca:16:00:61:96:92:78:f7:51:41:50:71:cf:3c:f2:06:65:52:
a2:43:ac:f1:1d:6c:d0:32:68:e1:51:87:c1:26:f3:ba:89:9b:
15:45:d4:1e:1a:a5:d3:46:3d:bd:03:60:c1:37:f9:bd:6c:56:
53:7e:e0:53:f0:f1:dd:34:cc:22:3b:b3:6b:e6:96:51:41:0b:
4e:86:34:0f:f0:1d:77:05:a4:c5:39:a4:bc:d2:13:72:03:35:
ef:af:18:e2:a6:27:c7:88:e3:cc:6c:e8:27:3c:42:57:00:94:
97:14:f2:b0:90:ce:01:a0:3a:85:6f:29:6f:43:e6:94:b5:24:
bc:a4:05:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:32:13 2025 by rpki-client